Level One: Cyber Essentials
Providing businesses a straightforward way to demonstrate they are following essential cyber security best practices, the standard Cyber Essentials certification is an independently verified self-assessment process. Basically, it’s like marking your own homework, but it can be a useful tool to know where you’re up to and to identify areas for development.
However, it’s essential that the certification is completed accurately and honestly, especially if it forms part of your cyber insurance requirements.
Even a single gap in your security controls, such as one user not having Multi-Factor Authentication (MFA) enabled, could put you at risk of a rejected claim in the event of a cyber incident.
Alarmingly, around 40% of cyber insurance claims are currently being declined often because business owners believed they were covered, only to discover key requirements hadn’t actually been met.
That’s why it’s so important to get Cyber Essentials done properly, not just completed.
.

Level Two: Cyber Essentials Plus
Before you can achieve Cyber Essentials Plus, you must first complete the verified Cyber Essentials self-assessment.
Cyber Essentials Plus takes things further. It includes the same five core security controls, but instead of relying on self-assessment alone, your systems are independently tested by a qualified assessor. That means real technical verification, external validation, and a much higher level of assurance that your security is working in practice – not just on paper.
Because of this, preparation is key. To give yourself the best chance of passing first time, it makes sense to work with an experienced IT professional before the external assessment takes place.
At AMP InfoSys, we guide businesses through the entire process, helping you get properly prepared, avoid common pitfalls, and achieve certification with confidence.
One of our team members has recently completed training as a Cyber Essentials Assessor, and as we move into summer 2026, we expect to begin delivering independent external assessments ourselves, subject to completing a small number of additional higher-level accreditations.
Until then, we continue to support clients through Cyber Essentials Plus in partnership with CyberSmart – giving you expert support today, with a fully in-house service coming soon.

Why Cyber Essentials Matters
What it means for you
- Reassures your customers that you take cyber security seriously.
- Protects your business against the most common cyber threats.
- Demonstrates compliance for government contracts and supply chains where certification is often required.
- Strengthens your reputation by showing you follow industry best practices.
- Aligns with the requirements for valid cyber insurance cover.

Looking ahead
Some Cyber Essentials self-assessment questions can be difficult to interpret especially if you don’t have a technical IT background or your business has a more complex structure.
If you’re getting started on your own, there are helpful free resources available through the official Cyber Essentials scheme, including guidance on the website and a free 30-minute call with their team. You can find support and further information via IASME Consortium.
Our Commitment
In partnership with CyberSmart, we support businesses through Cyber Essentials and Cyber Essentials Plus – helping you achieve certification properly, strengthen your cyber security, and protect the systems your business relies on every day.
Call us on 01995 600700 to start your journey.

Blog
For more information contact us...
If you need responsive and reliable IT solutions that are tailored to your business, then contact the experts at AMP. Our skilled engineers provide outstanding IT support and technical expertise you can depend on.

























