Cyber Essentials Plus provides a more advanced level of assurance and includes a technical audit of the systems that are in scope for Cyber Essentials. Organisations applying for Cyber Essentials Plus must also pass an on-site or remote assessment, internal vulnerability scans, plus an external vulnerability scan conducted by the certification body.