Cyber Essentials certificate
A Cyber Essentials certificate is the digital record, issued through a Certification Body, that an organisation has passed Cyber Essentials or Cyber Essentials Plus. It names the legal entity given at A1.1 and any added at A1.6.1, shows whole or partial scope, lasts 12 months from issue and appears on the IASME certificate search.
- Term
- Cyber Essentials certificate
- Also known as
- CE certificate, Cyber Essentials Plus certificate
- Category
- Scheme and certification
- Requirement area
- Scheme vocabulary
- Reviewed against
- Requirements v3.3
What does the term Cyber Essentials certificate mean in Cyber Essentials?
A Cyber Essentials certificate is the digital record, issued through a Certification Body, that an organisation has passed Cyber Essentials or Cyber Essentials Plus.
How does Cyber Essentials certificate apply to Cyber Essentials?
In plain terms
The certificate is like a driving licence for your IT basics: a dated document that says you met the standard when you were tested. As with a licence, what matters is whether it is current, and the official record counts for more than the copy in your inbox.
What the question set says about it
A1.1 asks for the name of "just one legal entity, which will be displayed on your certificate", up to 150 characters, with a trading name allowed alongside it. If other legal entities share the same IT infrastructure and board sign-off, A1.6.1 lists them. They appear on the primary entity's certificate and "share the same certification expiry date", and if the primary certificate is revoked, theirs are revoked too. For a partial scope, A2.2 says the certificate will read "Partial Organisation, see certificate platform for details".
Common mistakes
Entering a trading name where the legal entity should be, so the certificate does not match the party named in the contract. Forgetting a subsidiary at A1.6: the guidance says legal entities not listed there "cannot be added after the certification process is complete".
Some people call it a certificate of assurance. The scheme documents simply call it a certificate.
See certificate expiry, the certificate register and how to verify a certificate.
Related terms
- Certificate expiryCertificate expiry is the date, 12 months after issue, when a Cyber Essentials certificate stops being current.
- Certificate registerThe certificate register is the public online record of Cyber Essentials certificates, where anyone can check whether an organisation is currently certified.
- Cyber Essentials PlusCyber Essentials Plus is the higher level of Cyber Essentials, where an assessor independently tests your systems instead of relying only on your written answers.
- Cyber Essentials Readiness ToolThe Cyber Essentials Readiness Tool is a free online questionnaire from the NCSC, run with IASME, that asks about your IT and gives a personalised action plan for meeting Cyber Essentials.
- Cyber insuranceCyber insurance is a policy that pays towards the costs of a cyber incident, such as a data breach or ransomware.
- Danzell question setThe Danzell question set is the current list of questions every Cyber Essentials applicant answers, published by IASME and used for assessments from 27 April 2026.
Frequently asked questions
A Cyber Essentials certificate is the digital record, issued through a Certification Body, that an organisation has passed Cyber Essentials or Cyber Essentials Plus.
In the 2026 Danzell question set, Cyber Essentials certificate comes up at A1.1, A1.6.1, A2.2. Read those questions against the definition above so your answers use the term the way the assessor will.
Would you pass the 2026 question set?
Answer 24 yes or no questions, built by the assessors who mark Cyber Essentials, and get a readiness score in about five minutes, with any auto-fail questions you miss flagged first in your results.