Cyber Essentials, certified through Osiris.
Osiris IT is an IASME-accredited Cyber Essentials Certification Body. We help your organisation prepare for, complete, and maintain Cyber Essentials certification, covering readiness, remediation, evidence, and the annual renewal.
- IASMEAccredited Body
- DirectNo reseller margin
- AnnualRecertification supported
Direct IASME certification
Know what will pass before you submit.
Cyber Essentials usually arrives with pressure attached: a tender deadline, an insurance renewal, or a board request. We turn that pressure into a controlled route to certification.
Five controls, checked in plain English.
- Boundary firewalls and internet gateways
- Secure configuration across devices and services
- User access control, administrator access, and MFA
- Malware protection on endpoints and cloud services
- Security update cadence and unsupported software
- 01
Scope
Define exactly what is being certified
We confirm the sites, users, devices, cloud services, remote-working routes, and assessment timing before you open the account.
Clear scope prevents expensive surprises once the assessor starts reviewing the answers.
- 02
Readiness
Check the five controls before submission
Boundary firewalls, secure configuration, user access control, malware protection, and patch management are reviewed against the current standard.
You get a prioritised remediation list written for both technical teams and decision-makers.
- 03
Remediation
Close the gaps with senior support
We help fix the issues that would block certification: unsupported devices, weak access control, missing MFA, patching gaps, or unclear ownership.
The work is documented as it happens, so the evidence pack is built at the same time as the fix.
- 04
Assessment
Write, review, and submit the answers
We review every answer for scope, wording, evidence, and control intent before submission to reduce avoidable back-and-forth.
Because Osiris is an IASME-accredited Certification Body, the review and certification route is direct.
- 05
Renewal
Keep the certificate useful after issue
We keep the certificate, assessor notes, renewal date, and control evidence ready for buyers, insurers, trustees, and annual recertification.
If Cyber Essentials Plus is next, the same control work becomes the foundation for the technical audit.
Why it matters
Turn a rushed request into controlled assurance.
Cyber Essentials is a UK Government-backed standard built around practical controls. The value is not only the badge; it is the shared evidence that buyers, insurers, trustees, and boards already recognise.
Not sure if you are ready?
Start with a readiness review before you submit. A senior assessor looks at the evidence that will decide whether you pass, then gives you a controlled route to certification.
- A clear pass/fail view before assessment submission.
- Remediation prioritised by certification risk, not tooling preference.
- Evidence gathered once and kept ready for renewal, tenders, and Plus.
An insurer has asked for it
We turn renewal pressure into a written control plan, so you know what will pass and what needs fixing before the deadline.
A buyer or tender requires it
We prepare the certificate, scope notes, and supporting evidence in a format procurement teams can understand quickly.
Your board wants assurance
We explain the five controls in operational language, so trustees and directors can see what is managed, evidenced, and reviewed.
Cyber Essentials Plus is likely next
We make the self-assessment work audit-ready, so moving to Plus does not mean starting the remediation again.
Scope. Assess. Remediate. Certify.
- 01
Scope
We define what is in scope with you: which sites, networks, devices, and cloud services the certification covers.
- 02
Assess
A readiness review against the five technical controls, with a written report and prioritised gaps.
- 03
Remediate
We close the gaps together: senior-led, documented, and signed off at each control area.
- 04
Certify
We submit the assessment, certify you through Osiris as your IASME-accredited Certification Body, and hand over the badge along with your renewal plan.
The certificate matters. What it represents matters more.
Cyber Essentials is government-backed because the controls work. Our job is to get you the certificate and make sure the controls underneath it run properly day to day. The result is an insurer, a procurement team, and a board who trust the work behind the badge.
Cyber Essentials without the scramble.
If your insurer, procurement team, trustees, or board have asked for Cyber Essentials, talk to a senior consultant. We will scope the work, give you a clear written plan, and certify you directly when you are ready.