Cyber Essentials Certification
For UK Organisations – From £349
Every UK organisation should have Cyber Essentials certification. It is the government-backed baseline for cybersecurity, mandatory for government contracts and increasingly expected by private-sector clients, insurers, and supply chains. Fig is an IASME-accredited Cyber Essentials certification body delivering the fastest turnaround in the UK – Baseline certified in under 6 hours for orders before midday, from just £349.
Fig is an IASME-accredited Cyber Essentials certification body based in London and the fastest Cyber Essentials certification body in the UK. Order before midday and receive your Cyber Essentials Baseline certificate the same working day – typically within 6 hours. We assess organisations of all sizes for both Cyber Essentials Baseline (from £349) and Cyber Essentials Plus (from £1,499) under the NCSC-backed scheme. Fully transparent pricing with no hidden fees.
Why UK Organisations Need Cyber Essentials
Cyber Essentials is not optional for many UK organisations. Since 2014, the UK government has required Cyber Essentials certification for all contracts involving sensitive or personal data. Beyond government procurement, private-sector supply chains increasingly mandate Cyber Essentials as a minimum security standard. Insurance underwriters use it to assess cyber risk. Clients use it to evaluate vendor security. The NCSC estimates that Cyber Essentials controls would prevent approximately 80% of common cyber attacks. For UK organisations of any size, Cyber Essentials provides independently verified proof of basic cyber hygiene – and Fig makes achieving it faster, simpler, and more affordable than any other certification body.
Government mandatory
Required for UK government contracts involving sensitive or personal data since 2014.
Supply chain requirement
Increasingly demanded by private-sector clients and procurement teams.
Insurance benefits
Demonstrate security posture to insurers. May improve premiums and coverage terms.
Prevents 80% of attacks
NCSC estimates Cyber Essentials controls prevent approximately 80% of common cyber attacks.
What is Cyber Essentials?
A UK government-backed cybersecurity certification scheme
Cyber Essentials is a UK government-backed cybersecurity certification scheme that validates an organisation has implemented five core security controls: firewalls, secure configuration, security update management, user access control, and malware protection. The Cyber Essentials v3.3 requirements (April 2026) introduced mandatory MFA for all user accounts in scope. Certification is required for UK government contracts involving sensitive data and is increasingly expected by private-sector supply chains. Whether you are a small business or a large enterprise, Cyber Essentials provides independently verified proof of your cyber hygiene.
There are two certification levels. Cyber Essentials Baseline is a self-assessed certification – you complete a questionnaire and an accredited assessor reviews your answers. Cyber Essentials Plus adds an external technical assessment including vulnerability scanning to independently verify your controls are working in practice. Both are valid for 12 months and both carry the NCSC badge.
How It Works
Four steps to Cyber Essentials certification with Fig
Choose and purchase
Select Baseline or Plus and your organisation size. Purchase directly online. No sales call required.
Complete the assessment
For Baseline, complete the self-assessment questionnaire. Our platform guides you through every question with clear, plain-English explanations.
Review and feedback
An accredited assessor reviews your submission. If anything needs correcting, we provide structured feedback up to three times – directly in the platform.
Receive your certificate
Once approved, your certificate is issued automatically. For Baseline orders before midday, this typically happens within 6 hours of submission.
Transparent Pricing
Cyber Essentials Baseline certification from £349. No hidden fees.
Micro (1-9)
£349
Small (10-49)
£449
Medium (50-249)
£549
Large (250+)
£649
Why Choose Fig
IASME-accredited certification body with the fastest turnaround in the UK
Fastest in the UK
Baseline certified in under 6 hours for orders before midday. No other IASME-accredited body matches this speed. Same day certification is the standard service – not a premium add-on.
Transparent pricing
Every price is published upfront. No hidden assessment fees, no consultancy charges, no mandatory add-ons. Baseline from £349, Plus from £1,499. What you see is what you pay.
IASME accredited
Fig is a fully IASME-accredited certification body authorised to assess organisations for both Cyber Essentials Baseline and Plus. The certificate is the same government-backed credential regardless of which body issues it.
3x structured feedback
If your submission needs corrections, Fig provides up to three rounds of structured, in-platform feedback. Each round identifies the specific controls that need attention and explains what to change.
v3.3 compliant
Fig assesses against the latest NCSC Cyber Essentials Requirements v3.3, effective April 2026, including the mandatory MFA requirement for all user accounts in scope.
Readiness checker
Use our free readiness checker to assess your position before purchasing. Identify gaps, understand the requirements, and go into your assessment prepared.
Frequently Asked Questions
Common questions about Cyber Essentials certification
How quickly can I get Cyber Essentials certified?+
How much does Cyber Essentials cost?+
What is the difference between Cyber Essentials Baseline and Plus?+
Is Cyber Essentials mandatory?+
What are the five Cyber Essentials controls?+
Have a Question?
Whether you need help choosing between Baseline and Plus, want to discuss multi-organisation pricing, or just have a question about the process – we are here to help. Submit an enquiry and a member of the team will respond within one working day.
Get Cyber Essentials Certified
The UK's fastest Cyber Essentials certification – under 6 hours. From £349. IASME-accredited.