Zelo Security - Protecting What Matters.

Cyber Essentials & Cyber Essentials Plus Readiness

Prepare with clarity.
Work towards certification.

We help organisations prepare for Cyber Essentials and Cyber Essentials Plus by reviewing the environment, closing security gaps and organising evidence before assessment.

Arrange a readiness review

01 / Preparation

Know where you stand.
Know what to fix.

Your deliverable: A scoped readiness review and prioritised remediation plan.

Cyber Essentials Preparation

We review your environment against the applicable Cyber Essentials requirements, explain where controls need attention and turn the findings into an achievable plan.

  • Agree the proposed scope, including devices, cloud services, remote working and third-party responsibilities.
  • Review firewall settings, secure configuration, account access, malware protection and security updates.
  • Identify unsupported software, unnecessary privileges and configuration gaps.
  • Record evidence, remediation priorities, ownership and dependencies.

Start here if you are applying for the first time, renewing after changes or unsure whether your current setup is ready.

02 / Cyber Essentials

Close the gaps.
Prepare your submission.

Your deliverable: Documented improvements and a reviewed submission ready for your approval.

Cyber Essentials Certification Support

We help you address the findings and prepare clear, accurate self-assessment answers that describe the controls you actually have in place.

  • Plan and implement agreed configuration changes, with testing and rollback arrangements.
  • Map questionnaire answers to your environment and supporting records.
  • Review the submission for completeness and consistency before your organisation approves it.
  • Help respond to assessor clarification requests and organise actions for renewal.

Cyber Essentials uses a verified self-assessment. Your organisation confirms the accuracy of its answers; a licensed certification body assesses the submission and makes the certification decision.

03 / Cyber Essentials Plus

Prepare your systems.
Be ready to demonstrate.

Your deliverable: A technical readiness record, remediation actions and an assessment preparation plan.

Cyber Essentials Plus Readiness

Cyber Essentials Plus adds independent technical verification of the same core controls. We help you prepare the environment and the people supporting the assessment.

  • Confirm the proposed assessment scope and preparation requirements with your chosen certification body.
  • Review device updates, supported software, authentication and malware protection settings.
  • Help remediate identified weaknesses and document checks before the formal assessment.
  • Prepare access arrangements and evidence, and provide technical liaison during the assessment where agreed.

The formal Cyber Essentials Plus assessment and certificate are provided by a suitably licensed certification body. Cyber Essentials certification is a prerequisite; we help you plan the sequence with your assessor.

The Foundations

Five control areas.
One practical approach.

Connect the scheme’s requirements to the systems your organisation uses every day.

  1. 01

    Firewalls

    Control connections into and out of your environment.

  2. 02

    Secure Configuration

    Remove unnecessary exposure and insecure settings.

  3. 03

    User Access Control

    Limit access and administrator privileges.

  4. 04

    Malware Protection

    Apply appropriate protection against malicious software.

  5. 05

    Security Update Management

    Keep supported software updated within the required timeframes.

Before You Start

Clear scope.
No surprises.

Preparation and technical support from Zelo. Independent assessment from your certification body.

Can Zelo issue the certificate?

No. Zelo provides preparation, remediation and assessment support. Formal assessment and certification are carried out by a licensed certification body.

Will this guarantee a pass?

We help you address gaps and prepare for assessment, but cannot guarantee the outcome. Your certification body decides whether the applicable requirements have been met.

Are certification fees included?

Our proposal will set out Zelo’s scope and fees. Certification and assessment charges are separate unless expressly included in your written agreement.

Do you need administrator access?

We agree the evidence and access needed for the review. Any implementation access is limited to the agreed work, with authorised changes, testing and handover. Do not send passwords, recovery codes or sensitive assessment evidence in an initial enquiry.

Scheme information: NCSC Cyber Essentials and IASME certification guidance.

Planning Your Engagement

Prepare for the assessment you need.

Scope, fees and acceptance criteria are agreed in writing before work begins.

Ready to strengthen
your security?

Speak with Zelo about your Microsoft environment, data protection priorities or recovery plans.

Arrange a consultation