{"id":10011504,"date":"2026-06-29T12:58:36","date_gmt":"2026-06-29T11:58:36","guid":{"rendered":"https:\/\/amtivo.com\/uk\/standards\/\/\/\/"},"modified":"2026-07-07T10:05:28","modified_gmt":"2026-07-07T09:05:28","slug":"preparing-for-cyber-essentials-plus-assessment","status":"publish","type":"standard-post-filter","link":"https:\/\/amtivo.com\/uk\/standards\/cyber-essentials\/insights\/preparing-for-cyber-essentials-plus-assessment\/","title":{"rendered":"Preparing for Cyber Essentials Plus Assessment"},"content":{"rendered":"<p><span data-contrast=\"none\">As anyone\u00a0who\u2019s\u00a0ever run a race will know,\u00a0it\u2019s\u00a0all about the preparation; as the saying goes, \u201cif you fail to plan, you plan to fail\u201d.\u00a0The Government\u2019s Cyber Essentials (CE) scheme is no different, especially at the Cyber Essentials PLUS (CE+) level, where more work is involved.<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p>\r\n<p><span data-contrast=\"none\">This article is written for anyone who\u00a0<\/span><a href=\"https:\/\/amtivo.com\/uk\/standards\/cyber-essentials\/certification\/\"><span data-contrast=\"none\">is considering CE+ for their organisation<\/span><\/a><span data-contrast=\"none\">. You might be the CISO, the Head of IT, Security or Risk. In a smaller organisation, you might be the person tasked with cyber or information security.<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p>\r\n<p>&nbsp;<\/p>\r\n<h2><span data-contrast=\"none\">Reasons to Consider\u00a0Cyber Essentials Plus Certification<\/span><span data-ccp-props=\"{&quot;335559739&quot;:0}\">\u00a0<\/span><\/h2>\r\n<p><span data-contrast=\"none\">The CE scheme helps you to\u00a0identify\u00a0and guard against the most common cyber threats and\u00a0demonstrate\u00a0your commitment to cyber security.\u00a0It\u2019s\u00a0also mandatory for businesses supplying products and services to Government.<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p>\r\n<p><span data-contrast=\"none\">There are two levels of certification: <a href=\"https:\/\/amtivo.com\/uk\/standards\/cyber-essentials\/\">Cyber Essentials (CE) and Cyber Essentials Plus (CE+)<\/a>. Obtaining CE is a prerequisite to obtaining the higher level CE+. <\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p>\r\n<p><span data-contrast=\"none\">CE is an independently verified self-assessment. Organisations assess themselves against five basic security controls, and a qualified assessor verifies the information provided. These controls cover:<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p>\r\n<ul style=\"margin-top: 0\">\r\n\t<li><span data-contrast=\"none\">Firewalls\u00a0and secure internet connections<\/span><span data-ccp-props=\"{&quot;335559739&quot;:0}\">\u00a0<\/span><\/li>\r\n\t<li><span data-contrast=\"none\">Secure configuration<\/span><span data-ccp-props=\"{&quot;335559739&quot;:0}\">\u00a0<\/span><\/li>\r\n\t<li><span data-contrast=\"none\">Access controls<\/span><span data-ccp-props=\"{&quot;335559739&quot;:0}\">\u00a0<\/span><\/li>\r\n\t<li><span data-contrast=\"none\">Malware\u00a0protection\u00a0<\/span><span data-ccp-props=\"{&quot;335559739&quot;:0}\">\u00a0<\/span><\/li>\r\n\t<li><span data-contrast=\"none\">Patch management<\/span><span> <\/span><span data-ccp-props=\"{&quot;335559739&quot;:0}\">\u00a0<\/span><\/li>\r\n<\/ul>\r\n<p><span data-contrast=\"none\">For more information on Cyber Essentials, <\/span><a href=\"https:\/\/amtivo.com\/uk\/standards\/cyber-essentials\/guides\/cyber-essentials-guide\/\"><span data-contrast=\"none\">read our guide<\/span><\/a><span data-contrast=\"none\">.<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p>\r\n<p><span data-contrast=\"none\">CE+ is a higher level of assurance. A qualified and independent assessor examines the same five controls, testing that they work in practice by simulating basic hacking and phishing attacks. It involves a technical audit of the systems that are in-scope for CE by checking the CE controls have been applied as per the self-assessment.<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p>\r\n<p><span data-contrast=\"none\">Obtaining CE+ is good for your organisation\u2019s cyber security,\u00a0but\u00a0it\u2019s\u00a0also reassuring for your customers and\u00a0demonstrates\u00a0a higher level of commitment to security\u00a0that\u2019s\u00a0likely to increase their confidence.<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p>\r\n<p>&nbsp;<\/p>\r\n<h2><span data-contrast=\"none\">The\u00a0Scope of Cyber Essentials\u00a0Plus\u00a0Assessment<\/span><span data-ccp-props=\"{&quot;335559739&quot;:0}\">\u00a0<\/span><\/h2>\r\n<p><span data-contrast=\"none\">There are\u00a0a number of\u00a0tests in CE+ over and above the basic CE assessment.\u00a0It\u2019s\u00a0a step up in complexity and effort where failure in any one area will result in an overall failure.<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p>\r\n<p><span data-contrast=\"none\">To achieve CE+, a certification body conducts a range of external and internal technical tests to\u00a0validate\u00a0your approach to the\u00a0additional\u00a0elements.\u202f\u202fIf the tests are successful, the certification\u00a0body awards the CE+ certificate. IASME stipulate that CE+ should be completed within\u00a0three\u00a0months of obtaining CE.<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p>\r\n<p><span data-contrast=\"none\">The\u00a0additional\u00a0tests for CE+ are:<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p>\r\n<ul style=\"margin-top: 0\">\r\n\t<li><span data-contrast=\"none\">Authenticated vulnerability scanning of representative user endpoints including internet-facing servers<\/span><span data-ccp-props=\"{&quot;335559739&quot;:0}\">\u00a0<\/span><\/li>\r\n\t<li><span data-contrast=\"none\">Vulnerability scanning of external internet-facing infrastructure<\/span><span data-ccp-props=\"{&quot;335559739&quot;:0}\">\u00a0<\/span><\/li>\r\n\t<li><span data-contrast=\"none\">Password guessing of exposed authentication services<\/span><span data-ccp-props=\"{&quot;335559739&quot;:0}\">\u00a0<\/span><\/li>\r\n\t<li><span data-contrast=\"none\">Email attachment tests<\/span><span data-ccp-props=\"{&quot;335559739&quot;:0}\">\u00a0<\/span><\/li>\r\n\t<li><span data-contrast=\"none\">Browser download checks<\/span><span data-ccp-props=\"{&quot;335559739&quot;:0}\">\u00a0<\/span><\/li>\r\n\t<li><span data-contrast=\"none\">Review of mobile devices<\/span><span><br \/>\r\n<\/span><\/li>\r\n<\/ul>\r\n<p><span data-contrast=\"none\">Tests for CE+ include a representative set of user devices, all internet\u00a0gateways\u00a0and all servers with services accessible to unauthenticated internet users. It is recommended that other devices, such as\u00a0additional\u00a0servers and network hardware, are also scanned to provide a complete assessment of the infrastructure.<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p>\r\n<p><span data-contrast=\"none\">Cloud services are considered out of scope where they are provided as Software as a Service (SaaS),\u00a0such as Office 365. Where cloud services are used as Infrastructure as a Service (IaaS) and the customer\u00a0is responsible for\u00a0patching and other services such as installing software, these are considered in scope. Platform as a Service (PAAS) can be a grey area and is considered on a case-by-case basis.<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p>\r\n<p>&nbsp;<\/p>\r\n<h2><span data-contrast=\"none\">Best Practice Preparation<\/span><span data-ccp-props=\"{&quot;335559739&quot;:0}\">\u00a0<\/span><\/h2>\r\n<p><span data-contrast=\"none\">The\u00a0following tips\u00a0are often considered best practice:<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p>\r\n<ul style=\"margin-top: 0\">\r\n\t<li><span data-contrast=\"none\">Keep your software up to date, and\u00a0don\u2019t\u00a0use unsupported software.<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li>\r\n\t<li><span data-contrast=\"none\">Use suitable firewalls.<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li>\r\n\t<li><span data-contrast=\"none\">Ensure any exposed services are configured with strong and hard-to-guess passwords.\u00a0<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li>\r\n\t<li><span data-contrast=\"none\">Make sure your patch management processes are as robust as they can be. Although meant to fix security vulnerabilities and other bugs, patching can sometimes introduce\u00a0new problems\u00a0or, in worst-case scenarios, server failure. All missing patches for critical or security updates more than 14 days old will result in CE+ failure.\u00a0<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li>\r\n\t<li><span data-contrast=\"none\">Your devices should also run with the latest version of the operating system, and all applications should be up to date.<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li>\r\n<\/ul>\r\n<p><span data-contrast=\"none\">With any process requiring higher standards and more assessment, it follows that the potential for failure can increase with the greater level of scrutiny. However, CE+\u00a0doesn\u2019t\u00a0have to feel like a marathon, especially when\u00a0you\u2019ve\u00a0done the preparation beforehand.\u00a0If your organisation is looking to protect itself at this higher level and make a statement to potential customers, the extra work and investment\u00a0can pay off.<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p>\r\n<p><span data-ccp-props=\"{}\">\u00a0<\/span><\/p>","protected":false},"excerpt":{"rendered":"As anyone\u00a0who\u2019s\u00a0ever run a race will know,\u00a0it\u2019s\u00a0all about the preparation; as the saying goes, \u201cif you fail to plan, you plan to fail\u201d.\u00a0The Government\u2019s Cyber Essentials (CE) scheme is no different, especially at the Cyber Essentials PLUS (CE+) level, where more work is involved.\u00a0 This article is written for anyone who\u00a0is considering CE+ for their [&hellip;]","protected":false},"author":59,"featured_media":3804,"template":"","meta":{"_acf_changed":false,"_searchwp_excluded":"","footnotes":""},"standard-post-categories":[31],"standard-post-tags":[32],"class_list":["post-10011504","standard-post-filter","type-standard-post-filter","status-publish","has-post-thumbnail","hentry","standard-post-categories-insights","standard-post-tags-cyber-essentials"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.7 (Yoast SEO v27.7) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Preparing for Cyber Essentials Plus Assessment - Amtivo<\/title>\n<meta name=\"description\" content=\"Read our extensive guide, titled: How to pass Cyber Essentials PLUS first time. Amtivo are experts in cyber security - Call us now.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/amtivo.com\/uk\/standards\/cyber-essentials\/insights\/preparing-for-cyber-essentials-plus-assessment\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Preparing for Cyber Essentials Plus Assessment\" \/>\n<meta property=\"og:description\" content=\"Read our extensive guide, titled: How to pass Cyber Essentials PLUS first time. Amtivo are experts in cyber security - Call us now.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/amtivo.com\/uk\/standards\/cyber-essentials\/insights\/preparing-for-cyber-essentials-plus-assessment\/\" \/>\n<meta property=\"og:site_name\" content=\"Amtivo UK\" \/>\n<meta property=\"article:modified_time\" content=\"2026-07-07T09:05:28+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/amtivo.com\/uk\/wp-content\/uploads\/sites\/20\/2025\/07\/Amtivo.png\" \/>\n\t<meta property=\"og:image:width\" content=\"600\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/amtivo.com\/uk\/wp-content\/uploads\/sites\/20\/2025\/04\/testimonialImage-placeholder.jpg\" \/>\n<meta name=\"twitter:label1\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"4 minutes\" \/>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Preparing for Cyber Essentials Plus Assessment - Amtivo","description":"Read our extensive guide, titled: How to pass Cyber Essentials PLUS first time. Amtivo are experts in cyber security - Call us now.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/amtivo.com\/uk\/standards\/cyber-essentials\/insights\/preparing-for-cyber-essentials-plus-assessment\/","og_locale":"en_GB","og_type":"article","og_title":"Preparing for Cyber Essentials Plus Assessment","og_description":"Read our extensive guide, titled: How to pass Cyber Essentials PLUS first time. Amtivo are experts in cyber security - Call us now.","og_url":"https:\/\/amtivo.com\/uk\/standards\/cyber-essentials\/insights\/preparing-for-cyber-essentials-plus-assessment\/","og_site_name":"Amtivo UK","article_modified_time":"2026-07-07T09:05:28+00:00","og_image":[{"width":600,"height":400,"url":"https:\/\/amtivo.com\/uk\/wp-content\/uploads\/sites\/20\/2025\/07\/Amtivo.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_image":"https:\/\/amtivo.com\/uk\/wp-content\/uploads\/sites\/20\/2025\/04\/testimonialImage-placeholder.jpg","twitter_misc":{"Estimated reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/amtivo.com\/uk\/standards\/cyber-essentials\/insights\/preparing-for-cyber-essentials-plus-assessment\/","url":"https:\/\/amtivo.com\/uk\/standards\/cyber-essentials\/insights\/preparing-for-cyber-essentials-plus-assessment\/","name":"Preparing for Cyber Essentials Plus Assessment - Amtivo","isPartOf":{"@id":"https:\/\/amtivo.com\/uk\/#website"},"primaryImageOfPage":{"@id":"https:\/\/amtivo.com\/uk\/standards\/cyber-essentials\/insights\/preparing-for-cyber-essentials-plus-assessment\/#primaryimage"},"image":{"@id":"https:\/\/amtivo.com\/uk\/standards\/cyber-essentials\/insights\/preparing-for-cyber-essentials-plus-assessment\/#primaryimage"},"thumbnailUrl":"https:\/\/amtivo.com\/uk\/wp-content\/uploads\/sites\/20\/2025\/07\/Amtivo.png","datePublished":"2026-06-29T11:58:36+00:00","dateModified":"2026-07-07T09:05:28+00:00","description":"Read our extensive guide, titled: How to pass Cyber Essentials PLUS first time. Amtivo are experts in cyber security - Call us now.","breadcrumb":{"@id":"https:\/\/amtivo.com\/uk\/standards\/cyber-essentials\/insights\/preparing-for-cyber-essentials-plus-assessment\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/amtivo.com\/uk\/standards\/cyber-essentials\/insights\/preparing-for-cyber-essentials-plus-assessment\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/amtivo.com\/uk\/standards\/cyber-essentials\/insights\/preparing-for-cyber-essentials-plus-assessment\/#primaryimage","url":"https:\/\/amtivo.com\/uk\/wp-content\/uploads\/sites\/20\/2025\/07\/Amtivo.png","contentUrl":"https:\/\/amtivo.com\/uk\/wp-content\/uploads\/sites\/20\/2025\/07\/Amtivo.png","width":600,"height":400},{"@type":"BreadcrumbList","@id":"https:\/\/amtivo.com\/uk\/standards\/cyber-essentials\/insights\/preparing-for-cyber-essentials-plus-assessment\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/amtivo.com\/uk\/"},{"@type":"ListItem","position":2,"name":"Standards","item":"https:\/\/amtivo.com\/uk\/standards\/"},{"@type":"ListItem","position":3,"name":"Cyber Essentials","item":"https:\/\/amtivo.com\/uk\/standards\/cyber-essentials\/"},{"@type":"ListItem","position":4,"name":"Insights","item":"https:\/\/amtivo.com\/uk\/standards\/insights\/"},{"@type":"ListItem","position":5,"name":"Preparing for Cyber Essentials Plus Assessment"}]},{"@type":"WebSite","@id":"https:\/\/amtivo.com\/uk\/#website","url":"https:\/\/amtivo.com\/uk\/","name":"Amtivo","description":"","publisher":{"@id":"https:\/\/amtivo.com\/uk\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/amtivo.com\/uk\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/amtivo.com\/uk\/#organization","name":"Amtivo","url":"https:\/\/amtivo.com\/uk\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/amtivo.com\/uk\/#\/schema\/logo\/image\/","url":"https:\/\/amtivo.com\/uk\/wp-content\/uploads\/sites\/20\/2025\/10\/cropped-BAB-Amtivo-Joint-Logo-Updated-300ppi.png","contentUrl":"https:\/\/amtivo.com\/uk\/wp-content\/uploads\/sites\/20\/2025\/10\/cropped-BAB-Amtivo-Joint-Logo-Updated-300ppi.png","width":371,"height":203,"caption":"Amtivo"},"image":{"@id":"https:\/\/amtivo.com\/uk\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/amtivo.com\/uk\/wp-json\/wp\/v2\/standard-post-filter\/10011504","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/amtivo.com\/uk\/wp-json\/wp\/v2\/standard-post-filter"}],"about":[{"href":"https:\/\/amtivo.com\/uk\/wp-json\/wp\/v2\/types\/standard-post-filter"}],"author":[{"embeddable":true,"href":"https:\/\/amtivo.com\/uk\/wp-json\/wp\/v2\/users\/59"}],"version-history":[{"count":3,"href":"https:\/\/amtivo.com\/uk\/wp-json\/wp\/v2\/standard-post-filter\/10011504\/revisions"}],"predecessor-version":[{"id":10011626,"href":"https:\/\/amtivo.com\/uk\/wp-json\/wp\/v2\/standard-post-filter\/10011504\/revisions\/10011626"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/amtivo.com\/uk\/wp-json\/wp\/v2\/media\/3804"}],"wp:attachment":[{"href":"https:\/\/amtivo.com\/uk\/wp-json\/wp\/v2\/media?parent=10011504"}],"wp:term":[{"taxonomy":"standard-post-categories","embeddable":true,"href":"https:\/\/amtivo.com\/uk\/wp-json\/wp\/v2\/standard-post-categories?post=10011504"},{"taxonomy":"standard-post-tags","embeddable":true,"href":"https:\/\/amtivo.com\/uk\/wp-json\/wp\/v2\/standard-post-tags?post=10011504"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}