Cyber Essentials

About Cyber Essentials

Cyber Essentials is a UK Government-backed certification scheme managed by the National Cyber Security Centre (NCSC). It defines a baseline of cybersecurity hygiene controls that, when properly implemented, protect organisations against the most common internet-based cyber attacks.

There are two levels of certification: Cyber Essentials (self-assessed, independently verified questionnaire) and Cyber Essentials Plus (full hands-on technical audit conducted by an accredited assessor).

The Five Control Areas

Cyber Essentials certification requires organisations to implement controls across five technical areas:

• Firewalls: Boundary firewalls and internet gateways must be configured to block unauthorised inbound connections. All unused ports must be blocked by default.
• Secure Configuration: Devices and software must be configured securely, with default credentials changed, unnecessary software removed, and auto-run features disabled.
• User Access Control: Administrative privileges must be limited to those who need them. Standard user accounts must be used for day-to-day activities, and accounts must be reviewed regularly.
• Malware Protection: All devices must have malware protection in place — via anti-malware software or, for Cyber Essentials Plus, application whitelisting.
• Patch Management: Operating systems and third-party software must be kept up to date. High-severity patches must be applied within 14 days of release, and unsupported software must be removed.

Who Needs Cyber Essentials?

Cyber Essentials certification is mandatory for suppliers bidding for certain UK Government contracts — particularly those involving handling of sensitive information or delivery of technical services.

It is also increasingly required by cyber insurers as a condition of cover, and is recognised as a baseline assurance requirement by many enterprise clients when qualifying their supply chains.

How LivBiko Helps

As a managed service provider, LivBiko helps clients achieve and maintain Cyber Essentials certification through:

• Gap Assessment: We review your current controls against all five Cyber Essentials requirements and produce a prioritised remediation plan.
• Remediation: We implement the required technical controls — firewall configuration, patch management, access control hardening, and malware protection — across your managed environment.
• Certification Support: We assist you through the self-assessment questionnaire process and liaise with the certification body on your behalf.
• Cyber Essentials Plus: For Plus certification, we prepare your environment for the hands-on technical audit and support you through the assessment process.
• Ongoing Maintenance: Cyber Essentials requires annual renewal. As your MSP, we maintain the required controls continuously — so renewal is a confirmation, not a remediation project.

LivBiko's Own Certification

LivBiko holds Cyber Essentials Plus certification, renewed annually. Our own internal controls — firewalls, patch management, access control, and malware protection — are maintained to Plus standard.

Copies of our current certification are available on request. Please contact info@livbiko.com.

Getting Certified

The typical timeline from gap assessment to certification is 4–8 weeks, depending on the remediation required. Most of our managed service clients are able to achieve Cyber Essentials within their existing managed service contract — no additional project fees required.

For Cyber Essentials Plus, an additional assessment fee applies. Contact us at info@livbiko.com for a quote based on your organisation's size and scope.