A1.10.1: Which commercial organisation asked for your certificate?
Who is the commercial contracting organisation?
Source: IASME Cyber Essentials Danzell question set v16.3
A1.10.1 appears when you chose 'required for a commercial contract' in A1.10. Give the name of the contracting organisation that asked for Cyber Essentials. If your contract requires the relationship to be kept confidential, do not name them; IASME's A1.10 guidance says so explicitly. The answer is not marked.
Is A1.10.1 an automatic fail?
No. A1.10.1 records information about your organisation and is not marked against a technical requirement, so no answer to it fails the assessment. Inaccurate or contradictory details may be returned by the assessor for correction.
- Answer type
- Notes a notes question, answered in free text
- IASME guidance
- Please provide the name of the contracting organisation.
- Requirement enforced
- Section A1 collects the details that appear on the certificate and shape which later questions are shown.
- Outcome if non-compliant
- Not marked against a requirement; inaccurate details may be returned for correction
What does A1.10.1 ask?
A1.10.1 asks: “Who is the commercial contracting organisation?”
A1.10.1 asks who the commercial contracting organisation is. The guidance asks for the name of the contracting organisation.
Read it with the caution in A1.10: do not share the names of customers who contractually require you to keep their relationship with your business confidential. In that case say that the customer is confidential.
What should you write in the notes field for A1.10.1?
Write two to four specific sentences for A1.10.1: what you do, who owns it, how often it happens and the record that proves it.
A model answer to adapt. Replace everything in square brackets with your own facts, and delete anything that is not true.
[Customer legal name] (or: a customer whose name is confidential under our contract)
What mistakes do applicants make with A1.10.1?
A common mistake with A1.10.1: naming a customer whose contract has a confidentiality clause.
- Leaving the field blank after selecting the commercial contract reason.
- Giving a project code instead of an organisation name.
- Listing every customer; one is enough.
How do you get A1.10.1 right?
Work through these steps before you enter A1.10.1 in the portal:
- Name the contracting organisation that asked for certification.
- If your contract requires the relationship to stay confidential, write that the customer is confidential instead of naming them.
How do assessors check A1.10.1?
Where to go next
- Who needs Cyber EssentialsContracts, insurers and sectors
- How to get certifiedThe application, step by step
- What Cyber Essentials costsIASME fee bands and assessor prices
- All A1 questionsYour organisation
- Cyber Essentials checklistThe evidence to gather for every question
- Check your readinessScore your answers, auto-fails first
Other A1 questions
- A1.9A1.9Renewal or first timeIs this application a renewal of an existing certification or is it the first time you have applied for certification?Renewal or first time
- A1.10A1.10Multiple choice + notesWhat are the two main reasons for applying for certification?Multiple choice + notes
- A1.10.2A1.10.2NotesWho is the government contracting organisation and the contract number?Notes
- A1.10.3A1.10.3NotesWho is the grant authority?Notes
Frequently asked questions
A1.10.1 in the 2026 Danzell Cyber Essentials question set asks: "Who is the commercial contracting organisation?" It is a notes question, answered in free text.
A1.10.1 appears when you chose 'required for a commercial contract' in A1.10. Give the name of the contracting organisation that asked for Cyber Essentials. If your contract requires the relationship to be kept confidential, do not name them; IASME's A1.10 guidance says so explicitly. The answer is not marked.
No. A1.10.1 records information about your organisation and is not marked against a technical requirement, so no answer to it fails the assessment. Inaccurate or contradictory details may be returned by the assessor for correction.
Do not name them. IASME's A1.10 guidance says not to share the names of customers who contractually require you to keep the relationship confidential. State that the customer is confidential instead.
Yes. Certificates are searchable by organisation name, so a customer can confirm your status without you naming them here.
Would you pass the 2026 question set?
Answer 24 yes or no questions, built by the assessors who mark Cyber Essentials, and get a readiness score in about five minutes, with any auto-fail questions you miss flagged first in your results.
- IASME Certification Body
- CREST accredited
- IASME fee included
- UK offices in Leeds, Newcastle, London and Edinburgh