How much does Cyber Essentials cost, and how long does it take?
Cyber Essentials costs the certification body's fee, which is set by IASME according to the size of your organisation, plus whatever it takes to fix the gaps the assessment finds. With IT WORKHOUSE most businesses go from first call to certificate in about 30 days, and we quote the fee and our work as one figure before we start.
What you are paying for
The certification fee
Paid to an IASME certification body for checking your answers and issuing the certificate. We use CyberSmart. The fee depends on the size of your organisation and is included in our quote.
Fixing the gaps
Unsupported devices, missing updates, admin accounts used day to day and weak sign ins are the usual reasons a business would fail. Fixing them is often the bigger part of the work.
Doing the paperwork
We complete the questions with you, submit them, and answer the assessor's follow up questions, so your time is protected.
How long it takes
About 30 days from first call to certificate for most businesses we help, depending on how much needs fixing. The certificate lasts 12 months, so it needs renewing every year. On one of our managed IT plans the controls stay in place all year, which makes renewal a check rather than a scramble.
When you need Cyber Essentials Plus
Cyber Essentials Plus covers the same five areas, but an assessor tests your systems directly instead of relying on your answers. The Plus audit has to be done within three months of passing basic Cyber Essentials, and it costs more. If a customer or tender asks for "Cyber Essentials", check which one they mean before you start.
Who asks for it
Central government contracts that handle personal information have required Cyber Essentials since 2014, and many councils, insurers and larger companies now ask their suppliers for it too.
Questions we get asked
No. We prepare you and do the work, and the certificate is issued by CyberSmart, an independent IASME certification body.
Yes. IT WORKHOUSE is Cyber Essentials certified.
Yes. We prepare every device in the sample before the assessor tests them. See Cyber Essentials and Plus.
About this answer
Written by Alex Robertson, Managing Director of IT WORKHOUSE, Kingsbridge. Reviewed 23 October 2026. Sources: IASME (iasme.co.uk) on the three month window for Plus, and Procurement Policy Note 09/14 on government contracts.
Talk to a local team
Call, email or fill in the form and one of the five of us will get back to you, usually within the hour.
Get in touch.
We'd love to hear from you. Whether you have questions, feedback, or need support, our team is here to help. Simply fill out the form and we usually respond within the hour.
Find our door on what3words: Find our door on what3words: ///crusaders.promotes.painter