ipfour
Cybersecurity certification badge and compliance documents on a desk with a laptop showing security dashboard
ComplianceCyber Essentials
Cyber Essentials Certification

Get certified. Win more business.

Cyber Essentials is the UK government-backed certification that proves your business takes cybersecurity seriously. Required for public sector contracts, demanded by larger clients, and proven to reduce cyber insurance premiums. IP Four gets you certified and keeps you that way.

IASME Accredited
Certified in 4 to 6 Weeks
CE and CE Plus Available
100% Pass Rate
Choose Your Level

Cyber Essentials or Cyber Essentials Plus. We support both.

Cyber Essentials

4 to 6 weeks

Self-assessment questionnaire verified by an IASME-accredited assessor. Covers the five technical controls that protect against the most common cyber threats.

What We Do

  • Gap analysis against the five controls
  • Remediation of identified issues
  • Self-assessment questionnaire completion
  • Assessor review and submission
  • Certificate issued

Best For

Businesses needing baseline certification for public sector contracts or client requirements.

Cyber Essentials Plus

6 to 10 weeks

Independently verified by a technical auditor who tests your systems directly. Required by many government frameworks, defence supply chains, and enterprise clients.

What We Do

  • Everything in Cyber Essentials
  • Technical environment preparation
  • Vulnerability scanning
  • On-site or remote technical audit
  • Certificate issued

Best For

Businesses supplying to government, defence, or enterprise clients who require independently verified certification.

The Five Controls

What Cyber Essentials actually requires.

Cyber Essentials covers five technical controls. Most businesses already have some of these in place. We identify the gaps and fix them before you apply.

1

Firewalls

Boundary firewalls and internet gateways configured to protect your network from unauthorised access.

2

Secure Configuration

Devices and software configured securely, with unnecessary features disabled and default passwords changed.

3

User Access Control

User accounts with the minimum necessary privileges, and strong authentication for administrative access.

4

Malware Protection

Protection against malware through anti-malware software, application whitelisting, or sandboxing.

5

Patch Management

Software and devices kept up to date with security patches applied within 14 days of release.

Ready to Start?

Get your Cyber Essentials certificate in under 6 weeks.

We start with a free gap analysis to tell you exactly what needs to change. From there, we fix it, submit your application, and manage the whole process to certification.