Prepare for the higher-assurance route.
Cyber Essentials Plus is a higher-assurance pathway built on Cyber Essentials. Quarm Solutions can help you understand the starting point, prepare the work, and talk through what comes next.
The relationship at a glance
One baseline, then a higher-assurance pathway.
- Cyber Essentials is the baseline route for understanding and improving five core technical controls.
- Cyber Essentials Plus is the higher-assurance pathway built on that baseline.
- Quarm helps with preparation; the certification decision remains separate.
Cyber Essentials versus Cyber Essentials Plus
Start with the route that matches the question you need to answer.
Cyber Essentials
The scheme’s applicable certification assessment route, including the verified self-assessment route, for working through the five technical controls.
Explore Cyber EssentialsCyber Essentials Plus
Adds independent technical testing and verification of the implemented controls to check that they work in practice.
Start preparing for PlusBoth Cyber Essentials and Cyber Essentials Plus assess the same five technical controls. Cyber Essentials follows the scheme’s applicable certification assessment route, including the verified self-assessment route. Cyber Essentials Plus adds independent technical testing and verification of the implemented controls. Quarm Solutions provides practical preparation and IT/security support. Quarm does not issue certification or make the certification decision.
The preparation pathway
A practical way to work out what comes next.
- 01
Understand the scope
Start with the organisation, systems, users, devices, and services that need to be considered.
- 02
Check the baseline
Use the readiness check to create a practical snapshot of the Cyber Essentials controls. It is preparation guidance, not certification.
- 03
Address the gaps
Prioritise useful improvements across IT and security, with support where the work fits Quarm’s role.
- 04
Discuss the next route
Talk through the certification route and the questions you need to confirm before moving forward.
Is this the right conversation?
Explore the route when you need more clarity about readiness.
This route may be useful if your organisation already has Cyber Essentials, is preparing for it, or wants to understand what a higher-assurance pathway could mean. Suitability depends on your scope, systems, and starting point.
What Quarm can help with
Practical support without overstating the outcome.
Quarm can help review the starting point, work through agreed improvements, and prepare useful questions for the certification route. We do not issue certification, set the route requirements, or make the certification decision.
Keep certification current
Cyber Essentials renewal
Cyber Essentials certification is valid for 12 months and must be renewed annually to maintain certification; renewal is not automatic. Use renewal as a useful point to review new computers/devices, users joining or leaving, supported software, cloud services, administrator access, MFA, security updates/patching, and infrastructure changes.
Start with a sensible next step
Get a clearer view before you commit to the route.
Use the readiness check for a starting snapshot, or talk to Quarm about the scope and support your organisation may need. Neither is a certification decision; both can help clarify the next conversation.