Advise · Advisory & Governance · Project
Cyber Essentials & Compliance Readiness
Cyber Essentials became stricter in April 2026: multi-factor authentication on every cloud service that supports it, no cloud services left out of scope, and critical patches applied within 14 days. Central government and NHS contracts increasingly require it before award. We bring your estate to the standard, then take you through certification and the assurance questions that follow.
Talk to us about this
Who it is for
Organisations bidding for public contracts or answering to a customer, insurer or regulator that asks for evidence of baseline controls.
What is included
- Scoping of devices, users and cloud services
- Gap assessment against the current Cyber Essentials question set
- Hands-on remediation across Microsoft 365, Google Workspace and AWS: multi-factor authentication, patching, administrator accounts and device configuration
- Preparation for Cyber Essentials Plus technical assessment
- Evidence for supplier assurance questionnaires and public sector cyber requirements
What you get
- A gap report and remediation record
- An estate that meets the controls
- Completed self-assessment answers, ready to submit
- A plan for keeping the certificate at renewal
Certificates are issued by an IASME-licensed certification body. We prepare you for the assessment and stay with you through it.
Why Cipherer
- Principal-led. The person who scopes the work does the work, with no hand-off to a junior team.
- SC-cleared principal consultant (National Security Vetting), and a Cyber Essentials certified company.
- Seventeen years of delivery across government, healthcare, banking and Web3, including an organisation-wide cyber security programme for the Scottish Government.
- Security by design in everything we build and run, from a community website to a bank's data platform.
- One partner from advice to operation, based in Scotland and working across the UK.
Every engagement starts with a short call to agree scope, then a written proposal setting out deliverables, timeline and price.