Buying Cyber Essentials certification should be direct. You choose the correct business size, pay the published certification fee, and receive access to the IASME assessment portal. From there, you complete the self-assessment in your own time and submit it for review by a qualified assessor.
With Solusec, you buy directly from an appointed Cyber Essentials Certification Body, not through a reseller. Your IASME portal account is generally set up within the same working day, often within an hour of payment. Once you submit your answers, Solusec aims to complete the assessment within one business day. If you have a deadline to meet, you can also select an urgent turnaround option.
There is no mandatory consultation or sales call before you buy. You can start the process online, preview the assessment questions beforehand, and get in touch if you need help choosing the right service.
How to Buy Cyber Essentials Online
The process is designed to let organisations purchase certification without unnecessary delays or complicated arrangements.
To get started, select your organisation’s size from the available options, enter your business and contact details, and complete the payment. Solusec then creates your IASME portal account and sends your login details by email.
You can complete the questionnaire when you are ready. There is no requirement to finish it immediately after purchasing. Once submitted, your answers are reviewed by a qualified, certified assessor. The assessment is taken out by a person, not automatically marked or fed into an AI tool.
The standard process is:
You can also preview the Cyber Essentials self-assessment questions before buying. This is useful if you want to understand what will be assessed and identify areas that may need attention.
How Much Does Cyber Essentials Cost?
The Cyber Essentials certification fee is set by IASME and depends on your organisation’s size. Solusec charges the published certification fee without adding a reseller margin.
The published fees are:
| Organisation size | Number of employees | Certification fee |
| Micro | 0–9 | £320 + VAT |
| Small | 10–49 | £440 + VAT |
| Medium | 50–249 | £500 + VAT |
| Large | 250+ | £600 + VAT |
The size band is based on payroll headcount, not yearly turnover or the number of computers and devices your company uses. Contractors, consultants and volunteers are not added in the employee count. Schools should also exclude pupils.
If your organisation is close to a size-band margin, use the right payroll figure when selecting your package. Choosing a lower band incorrectly can create delays when the assessment takes place.
Buying directly from an appointed Certification Body also makes the process more transparent. You are dealing with the organisation responsible for helping with your submission and issuing your certificate, rather than paying an intermediary to arrange certification on your behalf.
For a more detailed breakdown, see Solusec’s guide to how much Cyber Essentials costs.
What If You Need Cyber Essentials Quickly?
If you have a tender deadline, customer requirement or contractual obligation approaching, waiting several days for an assessment may not be practical.
Solusec offers an optional instant turnaround for an extra £100. Submissions received before midday are prioritised and assessed on the same day where possible. This can help organisations that need to complete certification within a tighter timeframe.
The standard assessment service aims to review submitted answers within one business day. The urgent option moves your submission to the front of the line, but it does not remove the need to complete the questionnaire accurately or meet the scheme needs.
It is worth remembering that a quicker assessment does not necessarily mean your organisation will be ready to pass early. If your systems do not meet the controls, you may need time to make the required changes before submitting.
What Does the Cyber Essentials Assessment Cover?
Cyber Essentials assesses an organisation against the five technical control areas designed to reduce common cyber security risks.
1. Firewalls
Firewalls help manage network traffic and prevent unauthorised access to your systems. The assessment checks whether appropriate firewall protection is in place and configured correctly.
2. Secure configuration
Devices, applications and systems should be secured. Unnecessary software, default passwords and unused services can build weaknesses that attackers may exploit.
3. Security update management
Operating systems, applications, and networks need to receive security updates. Under the updated scheme, high-risk and critical updates must be applied within the specified 14-day timeframe.
4. User access control
Users should only have the access necessary to perform their responsibilities. The assessment considers account permissions, administrator privileges and authentication arrangements.
5. Malware protection
Organisations must have appropriate protection against corrupted software, including measures to prevent or restrict malware from affecting their devices and systems.
The assessment also considers cloud services and the systems included within your organisation’s scope. In particular, multi-factor authentication must be enabled where it is available on cloud services in use. Cloud services should not simply be excluded from the assessment because they are hosted by a third party.
The requirements are based on the applicable Cyber Essentials question set. Organisations should make sure their systems meet the current requirements before submitting their answers.
Should You Buy Cyber Essentials or Get a Gap Analysis First?
For organisations that already know their IT environment and have suitable security controls in place, buying Cyber Essentials directly is usually the simplest route.
However, if you are not sure whether your systems meet the needs, a gap analysis may be worthwhile before you buy certification.
During a gap analysis, Solusec reviews your existing setup against the controls that will be assessed. You receive knowledge about areas that need attention, trying you address potential problems before completing the formal assessment.
Unlike the standard certification fee, a gap analysis is priced on the basis of your organisation’s setup and requirements. It is quoted differently rather than offered as a fixed-price add-on.
If you only need clarification about the process, payment methods or assessment needs, you can also contact Solusec before placing your order.
Why Buy Directly from Solusec?
Solusec is an appointed Cyber Essentials Certification Body. This means the organisation can carry out the assessment and issue the certificate directly, rather than acting as a reseller.
There are several practical advantages to buying directly:
Buy Cyber Essentials from Solusec
If your organisation is ready to be assessed, choose the required size band, enter your information and pay online. Solusec will arrange your IASME portal access so you can complete the assessment at a required time.
If you need a quicker assessment, select the urgent turnaround feature. If you would prefer your security arrangements to be seen before applying, request a separately quoted gap data.
You can also contact Solusec if you would like to discuss a different payment method, ask a question before purchasing, or request a quotation for on-site Cyber Essentials or IASME Cyber Assurance Level 1.
FAQs
Q1. What is Cyber Essentials certification, and why does a business need it?
Ans: Cyber Essentials is a UK government-backed scheme that helps businesses protect themselves against common online threats. It shows that a company has basic security measures in place, such as firewalls, secure settings, and access controls. It can also help build trust with clients and meet certain contract requirements.
Q2. Why should businesses buy Cyber Essentials directly from an appointed certification body?
Ans: Buying directly from an appointed certification body makes the process simpler and gives businesses access to the right guidance and support. It also helps them understand the requirements, complete the assessment, and work towards certification without dealing with unnecessary third parties.
Q3. How long does it take to get Cyber Essentials certification?
Ans: The time needed depends on how well a business meets the security requirements and how quickly it completes the assessment. Businesses with the right security measures already in place may complete the process sooner, while others may need extra time to fix issues before receiving certification.
