Searching…
28 April 2025 – All new Cyber Essentials and Cyber Essentials Plus assessments move to v3.2 / Willow. Before 28 April 2025 – You may still begin certification under Montpellier, but submissions must be made by 28 Octo...
As of 28th April 2025, several updates have been made that will impact both Cyber Essentials (CE) and Cyber Essentials Plus (CE+) applicants. Here’s a breakdown of what’s changed and what you need to do next.
The Cyber Essentials scheme changed on 28 April 2025 with the new Willow question set and a brutal shakeup to CE Plus audits. No more cherry-picking your “golden device” for the test. Here’s what the changes actually ...
CE+ assessments may start soon after a 72-hour notice. CE+ requires the completion of technical audits within 30 days of a notice being served.
We aim to ensure that everyone who is applying for Cyber Essentials certification is given adequate time to preview any planned updates to the scheme. The next annual update will not ‘go live’ until April 2025.
All CE+ applicants must complete a pre-engagement readiness check before an audit can be booked. This involves: Submitting key evidence (e.g. endpoint lists, thin clients, servers & mobiles, and verification of the in...
There has also been additional changes to the Cyber Essentials Plus audit specifically this year, which we have detailed below. If your organisation is working towards Cyber Essentials certification, here’s everything...
With the hot-topic Willow changes like reducing assessment windows, new technical verification requirements, and expanding definitions to match modern working practices, it’s clear the NCSC and IASME are working to me...
From April 2025, new changes will be made to Cyber Essentials and Cyber Essentials Plus to ensure their continuing relevance. These changes are fairly modest, with many relating to updated terminology, but in this blo...
Cyber Essentials Plus builds on the Cyber Essentials Verified Self-Assessment with a hands-on audit of your IT systems. To apply for Plus, your organisation must hold a Cyber Essentials Verified Self-Assessment dated ...
