ESSENTIAL GUIDANCE · COST GUIDE · 8 min read
Part of Foundation insights →How much does Cyber Essentials cost in the UK? Fees, preparation and hidden effort
The current certification fee, the work that sits around it and how to budget realistically for Cyber Essentials or Cyber Essentials Plus.
The current certification fee, the work that sits around it and how to budget realistically for Cyber Essentialsi or Cyber Essentials Plusi.
Need an acronym translated?Open the cyber glossary →The basic assessment fee is tiered by organisation size
IASME, the Cyber Essentials Delivery Partner, publishes tiered pricing for the basic Cyber Essentials assessment. At the time of review, pricing starts at £320 plus VAT for a micro-organisation. Always confirm the current fee and size bands with IASME or an authorised certification body before purchasing because scheme pricing and requirements can change.
Certification and preparation are separate costs
The assessment fee covers the formal certification route; it does not necessarily include consultancy, remediation work or technology changes. An organisation that already understands its scope and meets the controls may complete the self-assessment with limited external help. Others need support to identify devices and cloud services, remove unsupported software, improve access control or assemble accurate evidence.
Cyber Essentials Plus requires a separate quotation
Cyber Essentials Plus covers the same five control areas but adds independent technical verification. Cost depends on factors such as organisational size, scope, device sampling, architecture and readiness. Treat any headline price as an initial indication until the certification body understands the environment. Preparation can reduce the risk of failed checks, delay and repeat effort.
Use Foundation pricing as a clear starting point
Pentesys publishes indicative Foundation prices for readiness and managed support so buyers can separate preparation from the formal certification fee. The right route depends on company size, whether Plus preparation is required and how much remediation support the team needs. Pentesys does not guarantee certification; Foundation identifies likely gaps, prioritises action and prepares the evidence for assessment through an authorised certification body.
