Welcome to Amtivo in the US, formerly Orion, ASR, CMA, Audit3 and QSR

Cyber Essentials & Cyber Essentials Plus

Cyber Essentials is a UK Government-backed cybersecurity scheme that defines a series of technical controls designed to help organizations strengthen their IT infrastructure and defend against common cyber threats. For U.S. organizations working with UK-based clients, bidding for UK public-sector contracts where Cyber Essentials is required, or operating within international supply chains, Cyber Essentials certification is often a contractual or commercial requirement. The scheme is designed to help prevent the most frequent internet-based attacks and ensure that appropriate measures are in place to protect the confidentiality, integrity, and availability of data on all internet-facing devices. Achieving certification provides peace of mind that a businesses defenses can withstand the vast majority of common cyberattacks.

amtivo usa feefo

Request a Quote

Enter your details below to get started.

If you would like to learn about the Cyber Essentials and Cyber Essentials Plus schemes, and the benefits they bring to your business, you’re in the right place.

Cybersecurity in Numbers

880,000

The number of cybercrime complaints that were reported in 2024, with total reported losses exceeding $12.5 billion.*

247 Days

The average time to identify and contain a data breach.**

9 million

The average cost of a data breach in the United States is over $9 million.**

What Are the Cyber Essential Schemes?

Cyber Essentials and Cyber Essentials Plus are government-backed cybersecurity schemes that define a baseline level of protection against common cyber threats.

They focus on helping prevent the most common internet-based attacks by ensuring organizations implement appropriate technical controls to protect systems, networks, and data.

There are two levels of Cyber Essentials;

  • Cyber Essentials—the entry-level scheme; and
  • Cyber Essentials Plus—the advanced level.

Both demonstrate a commitment to managing cybersecurity effectively and adhering to the standards established by the scheme, although to different extents.

iso 27001 information security management systems

Cyber Essentials is the affordable, entry-level option for showing you take cybersecurity seriously. Cyber Essentials Plus is the next step up, giving clients extra confidence through an independent technical assessment.

cyber essentials certification

Self Assessed Scheme

Cyber Essentials is a scheme for cybersecurity. It helps organizations improve their cyber framework and deliver more secure services to customers. It also allows them to consistently meet regulatory requirements. 

Cyber Essentials Could Be Right For You If… 

  • You want a base-level security certification to demonstrate that you have key controls in place.
  • You work with UK-based clients or partners that require Cyber Essentials certification.
  • You are bidding for UK public-sector contracts where Cyber Essentials is a prerequisite.
  • You operate within international supply chains where cybersecurity assurance is contractually required.
cyber essentials plus

Expert Assessed Scheme

Cyber Essentials Plus builds on the Cyber Essentials certification with independent verification of security controls. It helps businesses implement strong, cost-effective cybersecurity measures to better safeguard sensitive data and strengthen customer trust. 

Cyber Essentials Plus Could Be Right For You If… 

  • You are required to have a more in-depth audit of the key controls you have in place.
  • You are bidding for higher-risk UK public-sector contracts that require independent verification.
  • Your employees work from remote locations, or third parties have access to your premises or IT systems.
  • You handle sensitive, regulated, or commercially critical data and require additional assurance.

Cyber Essentials vs Cyber Essentials Plus

Feature  Cyber Essentials  Cyber Essentials Plus 
Verification  Self-assessment  Independent audit 
Assurance  Baseline certification Higher assurance certification 
Typical Duration  1–3 days (questionnaire review) 3–5 days (testing + verification)
Suitable For  Baseline certification (often SMEs or first-time certification) Independently verified certification (often required in supply chains)
Cost  Quoted individually  Quoted individually 
Renewal  Annual  Annual 

 

Five Controls of Cyber Essentials

Cyber Essentials defines five technical controls designed to protect against the majority of common cyberattacks:

  • Firewalls & Secure Internet Connections: Blocking unauthorized access
  • Secure Configuration: Protecting devices and software from misuse
  • Access Control: Limiting who can reach sensitive data
  • Malware Protection: Detecting and preventing malicious software
  • Patch Management: Keeping devices and applications updated

This is the foundation that Cyber Essentials is built on.

Which Organizations Need Cyber Essentials?

Cyber Essentials certification in the USA is particularly relevant for organizations that trade internationally or operate within UK-linked supply chains. It is useful for any organization looking to improve its cybersecurity, regardless of size or industry.

Cyber Essentials certification can be particularly beneficial for organizations looking to protect sensitive data, demonstrate cybersecurity commitment, and enhance their reputation—from growing service providers to large-scale enterprises.

Importantly, Cyber Essentials involves the entire organization, not just the IT department, emphasizing proactive risk management and leadership involvement in making cybersecurity a strategic priority.

Businesses that require a higher level of cybersecurity assurance can benefit from a Cyber Essentials Plus certification. Speak with our team to find out more.

Cyber Security Month - US

Certification Benefits

Your organization could enjoy many of the benefits that Cyber Essentials / Plus certifications can bring.

Cyber Essentials Benefits

  • Certification gives you peace of mind that your defenses can withstand the vast majority of common cyberattacks
  • Stand out from competitors, retain and win more business
  • Increased credibility and reputation—customers feel more confident in sharing information with you
  • Raised awareness of threats among staff reduces risk levels
  • Improved business continuity management
  • Tender for contracts where Cyber Essentials is a prerequisite (including UK public-sector supply chains)
  • May support improved cyber insurance terms, subject to insurer criteria
  • Drive business efficiencies throughout your organization, helping improve productivity

Cyber Essentials Plus Benefits

  • Provides independent technical verification of implemented controls
  • Offers enhanced assurance for customers and stakeholders
  • Strengthens confidence in cybersecurity measures
  • Supports organizations with higher assurance requirements

Why Cyber Essentials Matters For Your Business

  • It meets UK government and supply-chain requirements where Cyber Essentials is specified
  • It instantly builds trust and credibility with clients and partners
  • It can significantly reduce the likelihood of common, costly cyber incidents
  • It is valid for 12 months, providing ongoing, recognized assurance (renewable annually)

Cyber Essentials Certification FAQs