A1.5.1: What are your operational addresses?
Please provide the operational addresses, if different to your registered address.
Source: IASME Cyber Essentials Danzell question set v16.3
A1.5.1 needs the address of every location where your organisation operates, if any differ from the registered address in A1.5: offices, shops, warehouses, clinics and branch sites. Do not include home or remote workers' addresses. The locations you give here are the ones A2.3 later asks about when it checks where in-scope networks are used.
Is A1.5.1 an automatic fail?
No. A1.5.1 records information about your organisation and is not marked against a technical requirement, so no answer to it fails the assessment. Inaccurate or contradictory details may be returned by the assessor for correction.
- Answer type
- Notes a notes question, answered in free text
- IASME guidance
- Please provide the address or addresses of the locations where your organisation operates. This does not include the addresses of home/remote workers.
- Requirement enforced
- Section A1 collects the details that appear on the certificate and shape which later questions are shown.
- Outcome if non-compliant
- Not marked against a requirement; inaccurate details may be returned for correction
What does A1.5.1 ask?
A1.5.1 asks: “Please provide the operational addresses, if different to your registered address.”
A1.5.1 asks for the operational addresses, if different to your registered address. The guidance says to give the address or addresses of the locations where your organisation operates, and that this does not include the addresses of home or remote workers.
These locations matter for scope. A2.3 asks whether the networks in scope are used at the locations you gave here, A2.3.1 asks whether each site has its own internet connection, and A2.4 lists the networks at each site. A site you forget here is a network the assessor cannot see.
What should you write in the notes field for A1.5.1?
Write two to four specific sentences for A1.5.1: what you do, who owns it, how often it happens and the record that proves it.
A model answer to adapt. Replace everything in square brackets with your own facts, and delete anything that is not true.
[Site name]: [full address]. [Site name]: [full address]. Serviced or shared offices: [address, and whether you use the landlord's network]. Home workers are not listed; see A2.4.1.
What mistakes do applicants make with A1.5.1?
A common mistake with A1.5.1: leaving out a small branch, a warehouse or a serviced office desk, so its network is never declared.
- Listing home workers' addresses, which the guidance excludes.
- Writing 'same as registered address' when staff actually work from a different building.
- Forgetting a site that is about to open or close before the certificate is issued.
How do you get A1.5.1 right?
Work through these steps before you enter A1.5.1 in the portal:
- List every office, shop, warehouse, clinic and serviced desk your organisation operates from, using the finance or lease records as a check.
- Leave out home and remote workers' addresses.
- For each site, make sure A2.3 to A2.5 will account for its network and boundary device.
How do assessors check A1.5.1?
What evidence should you keep for A1.5.1?
The self-assessment does not ask you to upload evidence, but the assessor can ask for clarification, a director signs the attestation, and Cyber Essentials Plus tests the same controls. Keep this on file for A1.5.1:
- A list of operational sites from lease or finance records.
Where to go next
- Home and remote workingScope rules
- Scope checklistBuild the A2 inventory
- How to get certifiedThe application, step by step
- What Cyber Essentials costsIASME fee bands and assessor prices
- All A1 questionsYour organisation
- Cyber Essentials checklistThe evidence to gather for every question
- Check your readinessScore your answers, auto-fails first
Other A1 questions
- A1.4A1.4NotesWhat is your organisation's registration number?Notes
- A1.5A1.5NotesWhat is your organisation's registered address?Notes
- A1.6A1.6Yes/NoDo you have more than one legal entity, including subsidiaries, within the scope of this assessment?Yes/No
- A1.6.1A1.6.1Multiple choice + notesPlease provide the name, company number and registered address of any additional legal entities that are included.Multiple choice + notes
Frequently asked questions
A1.5.1 in the 2026 Danzell Cyber Essentials question set asks: "Please provide the operational addresses, if different to your registered address." It is a notes question, answered in free text.
A1.5.1 needs the address of every location where your organisation operates, if any differ from the registered address in A1.5: offices, shops, warehouses, clinics and branch sites. Do not include home or remote workers' addresses. The locations you give here are the ones A2.3 later asks about when it checks where in-scope networks are used.
No. A1.5.1 records information about your organisation and is not marked against a technical requirement, so no answer to it fails the assessment. Inaccurate or contradictory details may be returned by the assessor for correction.
Yes, if your organisation operates from it. State whether you use the landlord's network, because that affects how your devices are protected and what goes in A2.4 and A2.5.
Say so. If every person works from home, state that there are no operational sites other than the registered address. Home workers are then covered by software firewalls and device controls rather than a site network.
Would you pass the 2026 question set?
Answer 24 yes or no questions, built by the assessors who mark Cyber Essentials, and get a readiness score in about five minutes, with any auto-fail questions you miss flagged first in your results.
- IASME Certification Body
- CREST accredited
- IASME fee included
- UK offices in Leeds, Newcastle, London and Edinburgh