You need clarity on assessment boundaries
Start by understanding assessment boundaries in your current environment. We look at what exists today and what needs to change.
01The starting point
Prepare for certification with a clearer task list.
Certification work is easier when the requirements and system boundaries are understood early. Preparation support helps identify gaps and organise the changes needed.
Useful security work leaves you with more than a list of technical findings. It should explain what matters, what can be improved and who needs to act.
02When this helps
Start with the problem
you want to solve.
Certification work is easier when the requirements and system boundaries are understood early. Preparation support helps identify gaps and organise the changes needed.
You are planning control review
A clear brief for control review helps you compare options and avoid making a commitment before the important details are understood.
You want a plan for evidence coordination
The work should leave you knowing who handles evidence coordination and how follow-up tasks are managed.
03The work in scope
What we work through
with your team.
These are the starting points for the brief. Your proposal confirms the exact work, boundaries and the people involved.
Assessment boundaries
Review the current requirements with the person who knows the work. Agree the boundaries and useful examples before delivery.
Control review
Prepare the working detail for review, with time to ask questions and resolve assumptions.
Preparation tasks
Understand how the work happens today and who is involved at each handoff. We compare practical improvements and record the decisions, responsibilities and next steps.
Evidence coordination
Explain the handover and confirm who owns the next change or request.
04What useful progress looks like
Make risk easier to act on.
Explore preparation support for Cyber Essentials or Cyber Essentials Plus. Confirm applicable requirements, assessment arrangements and specialist availability.
Talk about this serviceA better understanding of exposure
Assessment boundaries is understood before the next decision is made.
Priorities your team can work through
Control review has a defined scope and someone responsible for moving it forward.
Clearer response responsibilities
Evidence coordination is considered as part of the handover, rather than left until the end.
05How the work happens
A clear route
from brief to handover.
We agree what success looks like before work begins. Decisions, access and dependencies stay visible throughout the engagement.
Listen
We talk through assessment boundaries and the issues behind your enquiry. Your team’s experience helps us understand the starting point.
Plan
We define control review, responsibilities and any dependencies. You review the proposal before the work is scheduled.
Work
The agreed tasks are carried out in the planned order. Preparation tasks is checked against the brief, with important decisions brought back to your team.
Hand over
We review the result and explain evidence coordination. Outstanding actions and any ongoing arrangements are documented.
06Tools & existing systems
Work with the whole
picture in mind.
The right tools depend on the environment and the authorised scope. We review existing endpoint, network and identity controls before discussing additions.
For cyber essentials / plus certification support, we check the relevant access, compatibility and existing agreements before making recommendations. Any third-party costs or licences are explained in the proposal.
REVIEW → PLAN → TEST → HAND OVER
Before we change anything
- Understand what is already in place
- Confirm who owns accounts and access
- Check dependencies and permissions
- Agree the work and any extra costs
07What you take away
A handover you
can actually use.
The agreed deliverables should help your team understand the result and manage what follows. The exact documents depend on the service.
An agreed scope
A written record covering assessment boundaries, control review, preparation tasks, evidence coordination, including exclusions and responsibilities.
A record of the work
Relevant notes, findings or configuration details from cyber essentials / plus certification support, with important decisions explained.
Clear next steps
Any outstanding actions, the owner of each task and the arrangements for evidence coordination after handover.
08Working together
Bring the context.
We’ll help with the plan.
You do not need a finished technical brief to start. Tell us what your people are trying to do, what is getting in the way and any deadline that matters.
This is an area for discussion from the extended service scope. Delivery expertise and availability are confirmed before an engagement is agreed.
Useful things to bring
- An authorised system owner
- The systems and accounts in scope
- Existing findings or security requirements
A short explanation of what you need from cyber essentials / plus certification support is enough to begin.
Start the conversation09Service FAQs
Practical answers
about this service.
These answers cover common starting questions. Your proposal gives the details for your own environment.
Does support mean certification is guaranteed?
No. Certification is decided by the relevant assessor. Support helps with preparation; the assessment arrangement and any fees must be confirmed separately.
What is included in cyber essentials / plus certification support?
The scope starts with assessment boundaries, control review, preparation tasks, evidence coordination. We confirm the deliverables, boundaries and responsibilities in your proposal before work begins.
What do you need from us before starting?
For this work, an authorised system owner, the systems and accounts in scope, existing findings or security requirements are useful starting points. We agree what access is needed rather than asking for unrestricted access.
How long does the work take?
The schedule depends on the size of the environment, access to information and the work agreed. We explain dependencies and propose a realistic timeline after discovery.
How much does it cost?
We quote against the agreed scope. Product subscriptions, advertising budgets, assessment fees or third-party costs are listed separately where applicable.
Is ongoing support included?
Only if it is part of the agreed proposal. We discuss the handover and any ongoing support you want before the initial work finishes.
10Client perspectives
The kind of feedback
we want to earn.
These are sample perspectives for this service, not real client endorsements. Verified reviews can replace them once approved for use.
“We needed help with assessment boundaries. What mattered was getting a clear explanation and knowing what to do next.”Operations leadCyber Essentials / Plus certification support · sample perspective
“Our main concern was control review. We wanted the work to be planned around the people using the system.”Project leadCyber Essentials / Plus certification support · sample perspective
11Connected services
Look at what
comes alongside.
Related services can help you think through dependencies. Each has its own scope and is agreed separately.
12Let’s talk
Your next step
starts here.
Tell us what you need from cyber essentials / plus certification support. We’ll discuss the starting point and confirm whether we can help with the scope you have in mind.