Audit scoping
Identify the locations, devices, users and services relevant to the assessment and agree the audit arrangements.
Build on Cyber Essentials with an independent technical audit. Prepare your environment, resolve gaps and approach the assessment with a clear plan.
Cyber Essentials PlusCyber Essentials Plus checks the same five controls as Cyber Essentials through technical testing. We help you understand the audit scope, coordinate preparation and address findings so your team knows what needs to be ready. Testing and certification follow the scheme’s requirements.
For businesses that need stronger assurance, have a contractual certification requirement or want their technical controls independently checked.
Scheme information: IASME official guidance →
Plus assessment costs depend on the size and complexity of the environment. We set out the assessment, preparation and any remediation work in your proposal.
Confirm audit scope, the Cyber Essentials prerequisite, timing and any third-party charges before proceeding.
Request your Plus quote →We agree the scope around your organisation. Your proposal confirms the activities and deliverables included.
Identify the locations, devices, users and services relevant to the assessment and agree the audit arrangements.
Review device configurations, updates, access and protective controls before the audit.
Prioritise identified gaps, allocate owners and plan changes around business operations.
Coordinate access, scheduling and evidence with your technical team and the certification body.
Understand the next step, the people involved and the outcome you are working towards.
Talk through your priorities →Review your Cyber Essentials status and agree the route and timing for Plus.
Check in-scope systems and agree how any gaps will be addressed.
Arrange the authorised technical assessment and ensure the right people are available.
Work through findings and agree the maintenance and renewal actions.
Yes. Cyber Essentials is the foundation for Plus. The Plus assessment must be completed within three months of the Cyber Essentials certification, so planning the two together is useful.
We prepare a tailored quote based on scope, size and technical complexity. Your proposal identifies assessment, preparation and remediation costs and whether the Cyber Essentials fee is included.
No. It is a technical assessment against the Cyber Essentials controls. A penetration test is a separate exercise with a different scope and purpose.
No. The certification decision follows the independent assessment. Preparation helps identify issues; the controls still need to meet the scheme requirements.
Talk to PENTAGUARD about cyber essentials plus.