A1.6.1: Which additional legal entities are included?
Please provide the name, company number and registered address of any additional legal entities that are included.
Source: IASME Cyber Essentials Danzell question set v16.3
A1.6.1 needs the name, company number and registered address of each additional legal entity in scope, entered one by one with the Add Entry button. Number formats follow A1.4. Each entity is listed on the primary entity's certificate, shares its expiry date and appears in certificate search. Separate certificates in each entity's own name are optional, at £10 per certificate.
Is A1.6.1 an automatic fail?
No. A1.6.1 records information about your organisation and is not marked against a technical requirement, so no answer to it fails the assessment. Inaccurate or contradictory details may be returned by the assessor for correction.
- Answer type
- Multiple choice + notes a notes question, answered in free text
- IASME guidance
- Please use the Add Entry button to add information for the additional legal entities. 4.
- Logic
- If ‘Yes’ to A1.6
- Requirement enforced
- Section A1 collects the details that appear on the certificate and shape which later questions are shown.
- Outcome if non-compliant
- Not marked against a requirement; inaccurate details may be returned for correction
What does A1.6.1 ask?
A1.6.1 asks: “Please provide the name, company number and registered address of any additional legal entities that are included.”
A1.6.1 only appears if you answered Yes to A1.6. It asks for the name, company number and registered address of any additional legal entities that are included, using the Add Entry button for each one.
IASME explains what happens next. Included entities are listed on the digital certificate of the primary legal entity and share its expiry date. Once the main certificate is issued, you are invited to buy separate certificates for each included entity at £10 per certificate. Each entity's name is added to the certificate search and the Cyber Essentials Supply Check Tool whether or not you buy individual certificates.
The entities are tied together: if the primary entity's certification is revoked, the certifications for all included entities are revoked too.
What should you write in the notes field for A1.6.1?
Write two to four specific sentences for A1.6.1: what you do, who owns it, how often it happens and the record that proves it.
A model answer to adapt. Replace everything in square brackets with your own facts, and delete anything that is not true.
Entry 1: [Legal name], company number [01234567], registered address [address]. Entry 2: [Legal name], company number [number or 'none'], registered address [address]. All entities share the IT infrastructure and network described in section A2 and are represented by [name and role of signatory].
What mistakes do applicants make with A1.6.1?
A common mistake with A1.6.1: entering several entities in one free-text box instead of one entry each.
- A company number in the wrong format, for example missing the leading zero.
- Including an entity that has its own network or a different board.
- Leaving out an entity that a customer contract requires, which cannot be added later.
How do you get A1.6.1 right?
Work through these steps before you enter A1.6.1 in the portal:
- Use the Add Entry button once per entity.
- Give the registered name, company number (formatted as in A1.4) and registered address for each.
- Remove any entity that runs its own network or has a different legally responsible person.
How do assessors check A1.6.1?
What evidence should you keep for A1.6.1?
The self-assessment does not ask you to upload evidence, but the assessor can ask for clarification, a director signs the attestation, and Cyber Essentials Plus tests the same controls. Keep this on file for A1.6.1:
- The register extract for each additional entity.
Where to go next
- Verify a certificateHow included entities appear
- How to get certifiedThe application, step by step
- What Cyber Essentials costsIASME fee bands and assessor prices
- All A1 questionsYour organisation
- Cyber Essentials checklistThe evidence to gather for every question
- Check your readinessScore your answers, auto-fails first
Other A1 questions
- A1.5.1A1.5.1NotesPlease provide the operational addresses, if different to your registered address.Notes
- A1.6A1.6Yes/NoDo you have more than one legal entity, including subsidiaries, within the scope of this assessment?Yes/No
- A1.7A1.7Multiple choice + notesWhat is your main business?Multiple choice + notes
- A1.8A1.8NotesWhat is your website address?Notes
Frequently asked questions
A1.6.1 in the 2026 Danzell Cyber Essentials question set asks: "Please provide the name, company number and registered address of any additional legal entities that are included." It is a notes question, answered in free text.
A1.6.1 needs the name, company number and registered address of each additional legal entity in scope, entered one by one with the Add Entry button. Number formats follow A1.4. Each entity is listed on the primary entity's certificate, shares its expiry date and appears in certificate search. Separate certificates in each entity's own name are optional, at £10 per certificate.
No. A1.6.1 records information about your organisation and is not marked against a technical requirement, so no answer to it fails the assessment. Inaccurate or contradictory details may be returned by the assessor for correction.
Including an entity in scope does not change the assessment. If you want a separate certificate in the entity's own name, IASME's A1.6.1 guidance says it is £10 per certificate, offered after the main certificate is issued.
Yes. IASME's guidance says each included entity's name is added to the certificate search and the Supply Check Tool automatically, whether or not you buy individual certificates.
Their certification is revoked too. IASME's A1.6.1 guidance says revocation of the primary entity revokes the certifications of all included entities.
Would you pass the 2026 question set?
Answer 24 yes or no questions, built by the assessors who mark Cyber Essentials, and get a readiness score in about five minutes, with any auto-fail questions you miss flagged first in your results.
- IASME Certification Body
- CREST accredited
- IASME fee included
- UK offices in Leeds, Newcastle, London and Edinburgh