Why Cyber Essentials Plus?

Cyber Essentials is a UK Government-backed scheme designed to help organisations guard against the most common cyber threats. Cyber Essentials Plus demonstrates an even higher level of commitment to cyber security and data protection.

The National Cyber Security Centre (part of GCHQ) launched the Cyber Essentials scheme to enable organisations to gain one of two badges: Cyber Essentials (CE) and Cyber Essentials Plus (CE+)

Becoming CE+ Certified

Cyber Essentials is a self-assessment certification that requires a questionnaire to be completed and submitted to the IASME Consortium, who were appointed by the NCSC as their selected Accreditation Partner in April 2020.

Organisations holding certifications are publicly listed on IASME’s certificate-search database making it easy to identify if you are CE/CE+ certified or not.

Being CE Certified means that you will ensure your security defences stand up to cyber-attacks as you will learn how to address, protect and prevent common threats.

Basic Cyber Essentials

The certification verifies that an organisation meets the requirements outlined under five specific technical control themes:

  • Firewalls
  • Secure Configuration
  • User Access Control
  • Malware Protection
  • Patch Management
Book a Call

Cyber Essentials and Audit

The Cyber Essentials Plus certification additionally requires you to carry out an independent External Vulnerability Assessment of your infrastructure to provide more assurance that you are complying with the Cyber Essentials Scheme above the basic self-assessment level.

You need to complete your Cyber Essentials PLUS audit within 3 months of your last Cyber Essentials basic certification – however both can also be completed at the same time.


What happens during the vulnerability assessment?

Our External Vulnerability Assessment directly tests the controls in place on your network perimeter and highlights any obvious vulnerabilities via:

  • A full TCP port scan for all IP addresses within specified ranges
  • Scanning for known common UDP services for all IP addresses within specified ranges
  • Basic web application scanning for common vulnerabilities performed from an unauthenticated user perspective
  • Testing of inbound email binaries and payloads using a remote test account and desktop/laptop to send multiple emails containing one of the test files detailed by the certificating body
  • A test from a website page with URLs linking to a set of test binaries
  • Authenticated vulnerability scan of hosts using an approved industry- standard workstation build review tool to perform an administrator-level scan including local checks for each host within a sample set. This stage also includes a patch check for operating system updates and common applications, and a check of any antivirus solutions in use

What do I get on completion?

When the assessment has been all successfully completed, we will deliver the following: A report listing all identified risks scored using the CVSSv2 standard covering all five Cyber Essentials technical control themes, Recommendations to further comply with the government standard, and your Cyber Essentials Plus Certificate and badge.

Gaining your Cyber Essentials Plus certificate evidences your commitment to cyber security.

1 of 10

Managed Service

"We needed a reliable cloud backup and storage service that didn’t take too much time to manage. Autodata's Managed Service solution is straightforward, secure, and sensibly priced. It’s helped us get on top of our data protection goals and tick off a few compliance boxes too. It’s also been easier to work with Autodata than some of the bigger names."

Gavin Bidgood Infrastructure and Security Manager, Hotel Chocolat

Cyber Security Maturity Assessment

"We were able to make our perimeter even more secure by addressing the areas of weakness exposed by Autodata. A previous assessment performed two months earlier by another supplier for our CE+ renewal had failed to highlight all the critical and high risks. I was also impressed that Autodata's report arrived swiftly seeing as I'd waited over two weeks for anything from the other supplier."

Simon Parsons Director of IT, CitySprint

Microsoft 365 Backup

"We needed S3 object storage offsite to bolster our backup environment, initially for M365 then for our server infrastructure as well. Autodata’s M365 Backup solution has allowed us to leverage immutable cloud repositories giving us reassurance that our data will be safe. It’s easy to setup, easy to manage, and backs up with no problems whatsoever."

Neil Fleetwood IT Helpdesk Support Manager, Kimal

Penetration Testing

"We engaged Autodata for our penetration testing based on their credentials and overall approach. The whole process was very smooth and I felt fully engaged throughout. Their project team was impressively self-sufficient, providing us with daily progress updates and issuing the final report within a matter of days. I was very satisfied with the service and would definitely recommend them."

Dan Young IT Service & Support Director, Killik & Co

Managed Service

"We were already an existing Veeam user, however we were overprovisioned and looking to increase our protection against ransomware by introducing immutability. Autodata took our requirements and provided an easier to manage, more affordable service backed by prompt support. The service has improved our level of confidence in our backups whilst reducing costs."

Luke Cox IT Support Engineer, HQW Aerospace

Cyber Essentials Plus

"We engaged Autodata to support the renewal of our CE+ certification. They were able to kick-off the project at short notice and scheduled penetration testing in alignment with our internal IT resource availability. Their team are professional, knowledgeable, and supportive. I would not hesitate in recommending them to any organisation looking to overcome its cyber security challenges."

Sean Forrest IT Manager EMEA, Tetra Tech

Managed Service

"Autodata's Managed Service solution is really easy to use and is cost effective against other types of backup and cloud storage available yet offers advanced functionality. It has given us extra layers of security and helps us to assure stakeholders that we have the right technology in place for data protection and restoration. The solution just works!"

Ian Robertson Director of ICT, The Regenda Group

Microsoft 365 Backup

"When it came to implementing an offsite immutable storage repository to protect our entire M365 environment and provide ransomware protection, Autodata's unique offering represented a significant cost saving. They were able to offer us a fully managed Veeam M365 Backup solution with immutable storage for only a marginal increase in what we had been paying for Veeam licences alone."

Stephen Clark Solutions Architect, Greencore

Cyber Awareness as a Service

"Autodata offers an effective managed cyber awareness testing and training programme. I was very pleased with how straightforward it was to set up and that everything runs on my behalf with minimal interaction. We continue to benefit from such a well thought-out programme, helping to keep cyber security at the forefront of our employee’s minds all year round."

Chris Russell CTO, Abacus Financial Services

Immutable Cloud Storage

"We wanted a cloud storage service that worked well with Veeam and provided immutability to enable us to lockdown our data and recover backups in the event of a ransomware attack. Autodata's Immutable Cloud Storage solution powered by Wasabi provides cloud storage at an affordable price with added cyber security protection - which is precisely what we were looking for."

Alan Pereira CIO, Gibraltar Financial Services Commission

Get in touch with us today

Book a Call
A man with a beard and short hair, identified as Alex Bye, wearing a blue quilted jacket and a white shirt, is outdoors. The image is in a circular frame.
A young man with short brown hair smiles at the camera. He is wearing a dark blazer over a light shirt, and there is a decorative mug on a shelf in the blurred background. The photo is framed in a circular shape.
A smiling man with short grey hair and a beard, wearing a black shirt, standing indoors with large windows and an urban landscape visible in the background.

Case Studies

Explore some of our work supporting customers in industries ranging from financial services to logistics.

More Cyber Resilience Solutions

We Partner with Leading Global Technology Vendors