Stronger Protection, Verified Security
CE Plus Certification
Cyber Essentials Plus offers a higher level of cyber security assurance by requiring a hands-on technical verification of your systems. Unlike the standard Cyber Essentials self-assessment, this certification includes independent security testing to ensure your defences work in real-world cyber attack scenarios.
What is the Cyber Essentials Plus Certification?
Independent Technical Assessment
Your security controls are tested through vulnerability scans, patch compliance checks, malware defences, and system audits.
Stronger Protection Against Cyber Threats
All UK businesses are vulnerable to cyber attacks. Cyber Essentials Plus ensures your organisation is in the best position to be properly secured.
Essential for Government & Public Sector Contracts
Many government tenders and large supply chains now require Cyber Essentials Plus certification.
Enhances Customer Trust & Compliance
Show your clients and partners that you prioritise cyber security and that you are serious about securing their personal data.
Cyber Insurance & Reduced Cyber Risk
Certified organisations may qualify for free cyber insurance and benefit from reduced cyber liability risks.
Why Choose Arcanum
for Cyber Essentials Plus Certification?
Over a Decade of Cyber Security Expertise
We have been an approved Cyber Essentials certification body since 2014, helping organisations of all sizes achieve compliance.
We Train the Assessors Who Train Others
Our Lead Penetration Tester is an IASME assessor in their own right, setting the standard other assessors are measured against.
Tailored Technical Audits for Complex IT Environments
Unlike generic certification bodies, we specialise in helping enterprises with intricate IT infrastructures, cloud security challenges, and operational technology (OT) security.
Hands-On Technical Assessment, Not a Checklist
Our assessors run the actual vulnerability scans and technical tests on-site or remotely, then walk you through the results before anything’s signed off.
Efficient Audit Process, Minimal Operational Disruption
We help businesses achieve certification quickly and smoothly, minimising operational disruption.
Recognised by IASME, NCSC, and CREST
We are a government-approved certification body, ensuring your Cyber Essentials Plus certification meets all regulatory standards.
Working with ZSL
On their cyber essentials plus certification
Mark Eagles, Information Security Analyst, ZSL:
“ZSL has benefitted a huge amount from this assessment and your patient support and advice over the past year, which has left us in a much better state for Cyber Security than when we started. Please accept my sincere thanks to the penetration testing team and everyone that helped from Arcanum throughout the assessments over the past year, and for your support with Cyber Essentials Plus. We look forward to working with you again in the future.“
What's the difference in CE and CE+?
Cyber Essentials vs Cyber Essentials Plus
| Cyber Essentials | Cyber Essentials Plus |
|---|---|
| Self-assessment questionnaire | Independent hands-on technical verification |
| Basic level of assurance | Higher level of assurance with audit |
| Demonstrates awareness of basic security controls | Demonstrates effective implementation of controls |
| Low cost, entry-level certification | More rigorous and comprehensive certification |
| Usually completed internally by organisation | Conducted by a licensed Certification Body |
| Valid for 12 months | Valid for 12 months |
| Required for many SMEs to show cyber hygiene | Required for UK government contracts and MOD suppliers |
| No technical audit | Includes vulnerability scans and system testing |
| Covers five key security controls | Assesses those controls with practical validation |
| Ideal for small organisations starting out | Ideal for organisations handling sensitive data or large supply chains |
How long does Cyber Essentials Plus Certification take?
Unlike Cyber Essentials which can be processed within 48 hours, the Cyber Essentials Plus certification is tailored to the size, structure, and complexity of your organisation. For smaller businesses with straightforward IT systems, the process can be completed quickly. For larger or more complex environments – particularly those using cloud services or operational technology – a more detailed technical assessment may be required. We’ll guide you through every step to minimise disruption and ensure a smooth experience.
How much does Cyber Essentials Plus Cost?
The cost of Cyber Essentials Plus certification depends on the size and complexity of your organisation’s IT environment. Factors such as the number of devices, locations, cloud services, and internal systems all influence the level of testing required. Because of this, we offer custom pricing tailored to your specific setup.
If your organisation handles sensitive data, operates in the public sector, or requires higher security assurance, Cyber Essentials Plus is the best option.
Get a tailored quote based on your requirements
Cyber Essentials Plus Assessment
Cyber Essentials Plus involves rigorous technical testing by our cyber security experts.
The assessment typically includes:
External Vulnerability Scanning
We scan all externally facing IP addresses and cloud-based infrastructure for vulnerabilities.
Internal Security & Patch Compliance Audit
A representative sample of your company’s devices undergo testing to ensure they meet the 14-day patching rule.
Malware Protection & Endpoint Security Testing
We verify that antivirus, endpoint security, and malware protections are properly configured and effective.
Cloud Security & Access Controls
Your cloud systems are tested to ensure:
- Multi-Factor Authentication (MFA) is enforced
- Administrator and non-administrator accounts are properly separated
User Privileges & Secure Configuration Review
We examine your password policies, access permissions, and network configurations to ensure they meet security best practices.
Results & Reporting
Once testing is complete, we provide a detailed security report highlighting any non-compliance areas and recommended improvements.
Start Your Cyber Essentials Plus Certification Today
Arcanum Cyber is an NCSC-approved certification body offering Cyber Essentials Plus certification tailored to your organisation. Whether you need to meet government contract requirements, qualify for cyber insurance, or simply improve your security posture, we’re here to help.
FAQs
What is the difference between Cyber Essentials and Cyber Essentials Plus?
Cyber Essentials is a self-assessment certification, while Cyber Essentials Plus includes independent testing by security professionals to verify that your systems meet the required security controls.
How long does Cyber Essentials Plus certification take?
This is dependent upon the size and complexity of your organisation. If you need fast-track certification, get in touch with our team.
Can I get Cyber Essentials Plus without first having Cyber Essentials?
No, you must first achieve Cyber Essentials certification before applying for Cyber Essentials Plus. However, we offer bundled packages to complete both at the same time.
What does the Cyber Essentials Plus audit involve?
The audit includes:
- External vulnerability scanning
- Internal security testing (e.g., malware protection, patching, configuration checks)
Cloud security assessments (e.g., MFA, administrator account separation)
How much does Cyber Essentials Plus cost?
The cost varies based on your network size and complexity. Contact us for a tailored quote based on your infrastructure.
What happens if I fail the Cyber Essentials Plus assessment?
If you don’t pass, we provide a detailed report outlining the issues and clear recommendations to help you improve security and pass a retest.
Is Cyber Essentials Plus required for government contracts?
Yes, many government contracts and public sector tenders require Cyber Essentials Plus certification. It’s also a major advantage for organisations in regulated industries.
Does Cyber Essentials Plus include penetration testing?
Cyber Essentials Plus is not a full penetration test, but it does include vulnerability scanning and security testing. If you need comprehensive penetration testing, please view our pen test page.
How do I get started?
To get started with Cyber Essentials Plus, simply complete our enquiry form and a member of the team will contact you.
Get Certified with Arcanum Today
Ensure your organisation meets the highest cyber security standards. Speak to our team today.