Cyber Essentials: what Norwich businesses need to know

Cyber Essentials is a government-backed certification that protects organisations against the most common cyber attacks. It covers five technical controls (firewalls, secure configuration, security update management, user access control and malware protection), which together give you a baseline of security.

Why certification matters

If you handle customer data or depend on your systems to operate, the certificate carries weight. In many industries Cyber Essentials is now a requirement when tendering for contracts, and it gives the organisations you work with evidence of your security.

If you supply the MOD or a defence prime, Cyber Essentials is also the first of the three controls in Defence Cyber Certification Level 0, which the MOD has asked its suppliers to hold by the end of 2026. We assess and certify Level 0 as well.

As an IASME-accredited Certification Body, we certify Cyber Essentials directly. We take organisations across Norwich through the process as part of their wider IT and risk planning.

The certification process

To get certified, you show that you meet the required standards. It starts with a review of your current IT setup, then you put the missing controls in place, such as strong passwords and multi-factor authentication.

• A review of your current IT setup.
• Strong password practices.
• Multi-factor authentication.
• Secure device configuration.
• Clear documentation of IT assets.
• Established procedures for staff onboarding and offboarding.
• A consistent plan for monitoring threats.

The benefits

• Lower risk of data breaches and the downtime that follows.
• Greater credibility with customers and partners.
• Alignment with a government-backed security standard.
• Clearer internal processes and documentation.

Why documentation matters

Certification depends on good documentation. You'll need a clear record of IT assets and an established procedure for onboarding and offboarding staff.

The process itself is straightforward, but outdated systems and gaps in documentation often hold organisations up.

As a managed IT provider in Norwich, we get the controls in place and working before you apply, so you're more likely to pass first time.

Cyber Essentials in Norwich

Norwich has a growing digital and business community, and awareness of cyber security has grown with it. Working with a Norwich-based provider means quicker on-site help and advice from people who know the area.

We've helped organisations through Cyber Essentials, including a nonprofit we then prepared for the Cyber Essentials Plus audit. The process often turns up weaknesses nobody knew were there.

It leaves you with a stronger IT foundation and a certificate to show the people you work with.