How secure is my business, and what should I do next?
I'm Carl. I've worked in IT for 30 years and taken my own business through Cyber Essentials, Cyber Essentials Plus and ISO 27001. Answer fifteen plain questions and see where you stand on the five pillars of cyber security.
Does the Cyber Security and Resilience Bill apply to your business?
Find out in about four minutes, see how ready you are and download your checklist. Your answers stay on your device.
The five pillars of cyber security
Everything CertiCyber does is built on five pillars. Get these right and you have closed the gaps most attacks use.
Accounts and passwords
Who can get into your accounts, and how well they are protected.
See the guidesPillar 2Devices and updates
Keeping every laptop, phone and tablet up to date and safe wherever it is used.
See the guidesPillar 3Data and recovery
Getting your data back, and knowing who to call, when something goes wrong.
See the guidesPillar 4People and scams
Helping your team spot scams and report mistakes quickly.
See the guidesPillar 5Knowing your setup
Knowing what you have, so nothing gets missed.
See the guides43% of UK businesses reported a cyber breach or attack last year
Phishing was the most common attack by far. Most of the damage comes from weak passwords, missing updates and cloud accounts without multi-factor authentication. Cyber Essentials targets exactly those problems, and many UK government contracts, larger customers and insurers now ask to see it.
Figures from the UK Government Cyber Security Breaches Survey 2025/2026
Cyber Essentials explained
The five controls, what changed in April 2026, what it costs and how the process works.
Read the guide GuideCyber Essentials Plus
What the hands-on audit tests, how it differs from the basic certificate and how to prepare.
Read the guide Free toolsUseful resources
The best free guidance and tools from the NCSC and IASME, collected in one place.
See the resourcesWhat Cyber Essentials checks
Every question in the assessment maps back to one of these five technical controls.
Firewalls
Put a properly configured firewall between your devices and the internet, and change default admin passwords on routers.
Secure configuration
Remove software and accounts you do not use, change default settings and lock devices with a PIN or password.
Security update management
Keep every operating system, app and piece of firmware supported, and install critical and high risk updates within 14 days.
User access control
Give people only the access they need, keep admin accounts separate and turn on multi-factor authentication for every cloud service.
Malware protection
Stop malicious software running, using anti-malware or by only allowing approved apps to run.
Popular guides How do I turn on multi-factor authentication? · How do I stop fake invoice and bank detail fraud? · How do I back up my business data properly? · all guides
Clear advice at a fixed price
I advise, and you or your IT provider do the work. Every price is agreed before we start.
Free call
Free 30 minutes
Tell me where you are and what is driving it. I'll tell you what fits, or whether you need anything at all.
Book a free call Most popularCyber Security Clarity Review
£495 + VAT
A 90 minute session that leaves you with a one page list of what to fix first.
See the Clarity Review Cyber EssentialsCyber Essentials Clarity Sessions
£695 + VAT
Three one hour sessions to answer every question you have about the five controls.
See the sessions Cyber EssentialsGuided Cyber Essentials
From £995 + VAT
I take you through every question, one by one, until you submit.
See Guided Cyber EssentialsI've sat in your seat
I started out fixing computers, worked my way up to IT Director, and I still own the IT company I started 13 years ago. As a business owner I've also been sold the dream, paying for tools and expertise that promised a lot and delivered little.
So I give straight answers. I don't sell IT support, software or hardware through CertiCyber, and I don't take commission from anyone, so what I recommend is what I think you need.
Away from cyber security you'll usually find me on a golf course. Some of my best business conversations have happened over 18 holes, so if you play, I'm always happy to talk it through over a round.
Cyber security explained, in plain English
Short videos where I explain what Cyber Essentials asks, show the free NCSC tools every business should switch on, and tell you which urgent updates to install.
Watch on YouTubeCyber security news for UK businesses
What the Cyber Security and Resilience Bill means for your business
Who the new law covers, the 24 hour reporting rule, and why smaller businesses will feel it through their customers.
Read moreFrom CarlWhat ISO 27001 really cost my business
Around £21,000 and a day a week for a year. What I expected, what it took, and what I'd tell a small business to do first.
Read moreCostsWhat Cyber Essentials costs in 2026
The official assessment fees by business size, and the hidden costs worth planning for.
Read moreGot a question about your setup?
Send me one quick question and I'll give you a straight answer in plain English, usually within one working day. Prefer to talk it through? Book a free 30 minute call.