5
control themes in the scheme
Firewalls, secure configuration, security update management, user access control, malware protection.
CYBER ESSENTIALS AND CYBER ESSENTIALS PLUS
Cyber Essentials.The certificate your customer asked for, done properly.Leicester-based, UK wide.
We scope it, fix the five controls with you and evidence your answers, so you apply to an IASME-licensed certification body with the work already done.
- Free 45-minute diagnostic and a one-page roadmap, yours either way
- Cyber Essentials, Cyber Essentials Plus and IASME Cyber Assurance
Book the free 45-minute diagnosticBring the customer's request, the tender wording or your last self-assessment. You leave with a one-page roadmap either way.Same-week availability
No sales pitch 45 minutes Senior practitioner
CISSP, ISO 27001 Lead Implementer and Lead Auditor, ISO 42001 Lead Implementer and Lead Auditor, PMP.
THE OFFER AT A GLANCE
12 months
a certificate lasts
Renewed every year. We can run the renewal with you.
45 min
free diagnostic
You leave with a one-page roadmap either way.
Leicester
based, UK wide
1st Floor, Grove Business Park, 4 Penman Way, Enderby, Leicester LE19 1SY.
Why it comes up
A customer or tender asks for it
Suppliers are asked for Cyber Essentials in contracts, questionnaires and framework listings, often with a date attached.
The questions are about your real settings
The self-assessment covers every laptop, phone, cloud service and account in scope, and a missed setting is a failed assessment.
Plus tests it for real
Cyber Essentials Plus adds an independent technical test of the same controls on your actual devices.
Doing it alone vs with Goldline
Doing it alone
- Working out which devices, cloud services and accounts are in scope.
- Answering the self-assessment from memory.
- Finding out at assessment that a setting was missed, and paying to go again.
- Doing the same work again for Cyber Essentials Plus.
- Starting from scratch at renewal.
With Goldline
- Scope agreed on the free diagnostic and written down.
- Every control checked against the scheme's current requirements before you apply.
- Your answers evidenced, so the assessment holds.
- Cyber Essentials Plus on the same work.
- Renewal run with you each year, and a clear next step when a customer asks for more: IASME Cyber Assurance or ISO 27001.
What we can do for you
01
Cyber Essentials
We scope it, fix the five controls with you and evidence your answers, so you apply to an IASME-licensed certification body with the work already done.
Explore 02Cyber Essentials Plus
Cyber Essentials Plus is the audited extension of Cyber Essentials.
Explore 03IASME Cyber Assurance, Level One and Level Two
The step after Cyber Essentials: a verified assessment at Level One and an independent audit at Level Two, both carried out by an independent IASME Assessor.
Explore 04First Security Questionnaire
Your first customer security questionnaire answered with evidence within 10 working days.
Explore 05ISO 27001 and ISO 42001
For UK startups of up to 50 people whose customers ask for security assurance.
Explore 06ISO 9001 alongside ISO 27001
ISO 9001 and ISO 27001 on one management system.
ExploreBeyond Cyber Essentials: IASME Cyber Assurance
IASME Cyber Assurance is a cyber security and data protection standard, available in two levels. A valid Cyber Essentials certificate, with at least a month before it expires, is a prerequisite, and the scope must cover the whole organisation. The standard is tailored to organisation size: 1 to 2 people, 3 to 9, 10 to 49, and 50 or more.
STEP 01
Cyber Essentials
The prerequisite: a valid Cyber Essentials certificate with at least a month before it expires.
STEP 02
Level One: Verified Assessment
You answer the question set on IASME's assessment platform, a board member (or equivalent) e-signs to confirm the answers, and an independent qualified Assessor reviews and marks them.
STEP 03
Level Two: Audited
An independent IASME-assured Assessor audits your processes, procedures and controls, looking at documentation, interviewing key staff and observing activities, in person or sometimes remotely. Level One must be passed first.
Goldline gets you ready for IASME Cyber Assurance: we work through the question set with you, put the policies and evidence in place, and prepare your team for the Level Two audit. The assessment and the audit are carried out by an independent IASME Assessor.
IASME Cyber Assurance (iasme.co.uk)How it works
STEP 01
Free 45-minute diagnostic
STEP 02
Scope and gap check against the scheme
STEP 03
Fix and evidence the five controls
STEP 04
You apply to an IASME-licensed certification body
The certification body assesses and issues the certificate. Goldline is not a certification body.
Is this you?
- A customer, a tender or a framework has asked for Cyber Essentials or Cyber Essentials Plus
- Any size of organisation, one legal entity per certificate
- Microsoft 365 or Google Workspace, laptops, phones and cloud services
- Someone who can give it two hours a week
Frequently asked questions
Goldline is not a certification body. An IASME-licensed certification body assesses your application and issues the certificate.