The government-backed certification, with the gap analysis, the fixes and the audit done by the people who run your IT. Cyber Essentials and Cyber Essentials Plus, quoted as a project, no retainer needed.
The certification is the last step. The work is everything before it.
We check your estate against each control and tell you in writing what would fail today, before anything is submitted.
On the devices we manage, or alongside your own team, we close the gaps and keep the evidence pack as we go. The assessment becomes a record of work done, not a promise.
The self-assessment questions are answered with you, in plain English. For Plus we prepare you for the audited test and sit it with you.
The certificate lasts twelve months. The renewal goes in our diary as well as yours, so it never lapses because it was nobody’s job.
Clients on Essentials or Pro are kept aligned to the controls as part of the plan, which is why the second year is a formality.
The scope depends on the estate, so the certification is quoted after a short scoping call. What changes by plan is how much of the groundwork is already done.
Not a Netix client? The same project, quoted on the same scoping call. No plan needed.
Cyber Essentials Plus was a box we had been failing to tick for two years. Netix mapped us against the controls, closed the gaps, coached our team through the audit, and we passed first time. Our insurance premium came down at renewal.
Netix is Cyber Essentials Certified and sits the audit every year. We are not reading the controls for the first time on your job.
The people who find the gaps are the people who close them. No handover between an auditor and an IT supplier.
It is quoted as a project with an end. If you want us afterwards, that is a separate conversation.
The commonest way to lose Cyber Essentials is to forget it. We do not.
Cyber Essentials is a self-assessment against the five controls, verified by an assessor. Plus adds an independent technical audit of the same controls on your actual devices. Many insurers and public-sector contracts now ask for Plus.
Two to six weeks for most businesses of ten to a hundred staff, depending on how much fixing there is. A date-driven tender can move faster when the estate is already managed.
No. The certification is quoted as a project for anyone. Clients on Essentials or Pro get the alignment work and the evidence pack included in their plan, so for them it is the audit alone.
Firewalls and routers, secure configuration, user access control, malware protection, and security updates. In practice: a firewall that is set up, devices with the defaults changed, multi-factor authentication and no shared admin accounts, protection on every device, and patches applied within fourteen days.
Most insurers ask for it or price around it, and some include a level of cyber cover with the certificate. We hand you the certificate and the evidence behind it; the policy wording is theirs.
We tell you in writing what would fail before anything is submitted, so a fail is rare. If one happens, the failing control is fixed and the assessment resubmitted.
30 minutes with an engineer. Tell us who is asking and when, and we will tell you what would fail today and what it takes to pass.