Cyber Essentials vs Cyber Essentials Plus
Choose the right level of certification for your organisations needs.
↓Enhance your reputation and reduce the risk of common cyber threats
IASME CYBER ESSENTIALS
Cyber Essentials certification is a vital step in safeguarding your business against cyber threats. By implementing the necessary security controls, you can demonstrate your commitment to protecting sensitive data and ensuring the integrity of your systems.
ENHANCING REPUTATION
Cyber Essentials certification is a vital step in safeguarding your business against cyber threats. By implementing the necessary security controls, you can demonstrate your commitment to protecting sensitive data and ensuring the integrity of your systems.
GAIN ADVANTAGE IN TENDERING
20% increase the chances of winning tenders.
Our Process for Digital Health Organisations
Apply
MEETING REGULATORY REQUIREMENTS AND MAINTAINING CONFIDENCE IN YOUR SECURITY POSTURE.
Onboard
MEETING REGULATORY REQUIREMENTS AND MAINTAINING CONFIDENCE IN YOUR SECURITY POSTURE.
Complete
Time to complete the self-assessment. You'll be connected to our assessment team via our service desk for help along the way.
Submit
Once complete, our team will provide a full review of the answers and feedback on non-compliant answers, working with you to provide bespoke solutions where needed. Once all the requirements are met, you will be awarded certification.
Why Choose Our Digital Health Approach?
HEALTHCARE EXPERTISE
Specialised knowledge of digital health regulations and compliance requirements
DEDICATED SUPPORT
Direct access to our assessment team throughout the certification process
TAILORED SOLUTIONS
Bespoke remediation strategies for your specific digital health environment
FAST CERTIFICATION
Streamlined process designed specifically for healthcare organisations
FAQ’s
Cyber Essentials is a UK government-backed certification scheme that helps organisations protect against the most common cyber attacks. It covers five technical controls: firewalls, secure configuration, user access control, malware protection and security update management.
Any organisation can benefit from Cyber Essentials, and it is required for many UK government contracts. For digital health suppliers it is also a quick way to evidence a large part of the NHS DSPT and to show NHS buyers you take security seriously.
Cyber Essentials Plus covers the same five controls as Cyber Essentials, but adds hands-on technical verification. An assessor tests a sample of your devices and systems to confirm the controls work in practice.
You complete an online self-assessment questionnaire, which is reviewed and verified by an IASME-licensed Certification Body such as Periculo. Cyber Essentials Plus then adds an independent technical audit of your systems.
Cyber Essentials protects you against the most common attacks, builds trust with customers and partners, opens up government and NHS supply chains, and gives you a head start on wider frameworks such as the NHS DSPT and DCC.
You need correctly configured firewalls, secure settings on devices and software, controlled user access, malware protection, and software kept up to date with security patches.
Cyber Essentials and Cyber Essentials Plus certificates are valid for 12 months. You need to recertify every year to stay certified.
No. Cyber Essentials Plus builds on Cyber Essentials, so you must hold a current Cyber Essentials certificate. The Plus audit has to be completed within three months of your Cyber Essentials certification.
It isn’t a legal requirement, but it is mandatory for many UK government contracts that involve handling personal or sensitive information. It is also a building block of DCC Level 0 for MOD suppliers.
Testimonials
We had a great experience working with Periculo for our Cyber Essentials Plus certification. From the very beginning, their team was incredibly responsive, supportive, and approachable, which made the preparation phase smooth and efficient.
They were always available to answer our questions, clarify requirements, and help us feel fully prepared before the audit.
When it came time for the actual audit, the process was handled with impressive professionalism and thoroughness, giving us full confidence in their assessment.
Highly recommended for any organization looking for a dependable and knowledgeable partner for cybersecurity certifications.
“When it came time for the actual audit, the process was handled with impressive professionalism and thoroughness, giving us full confidence in their assessment.
Highly recommended for any organization looking for a dependable and knowledgeable partner for cybersecurity certifications.”
“Periculo assisted with our DSPT audit requirements. They were able to quickly understand our needs, the proposal met the brief and a detailed project plan was produced.
The process was well supported by the team and we gained a successful outcome.”
Simplify Your Compliance Journey
Periculo streamlines processes, tracks your progress, and maintains audit readiness.


