Frameworks

Cyber Essentials & CE Plus (UK)

The UK's entry-level certification — mandatory for much government work, cheap credibility everywhere.

Book a demo

Cyber Essentials is the UK government-backed certification covering five technical control themes: firewalls, secure configuration, access control, malware protection, and patching. Basic tier is a verified self-assessment; Plus adds hands-on technical testing. UK public-sector contracts frequently require it.

Small standard, real hygiene

Its five themes are deliberately minimal — the controls that stop commodity attacks. Certification is annual, affordable, and fast, which makes it the lowest-cost trust signal in this list and a common first rung before ISO 27001 for UK-facing companies.

How Compriska helps

Compriska tracks the five control themes with evidence year-round, so the annual (re)certification is a formality — and cross-maps them into CIS IG1 and ISO 27001, which they naturally feed.

Frequently asked questions

Do we need Plus or is Basic enough?

Basic satisfies many contracts; Plus (independent technical verification) is increasingly requested for government and defense-adjacent work. If a contract names it, it means Plus.

Other frameworks

Automate Cyber Essentials with Compriska

See how cross-mapped controls, continuous evidence, and AI workflows change the cost of compliance.

Book a demo