A1.8: What is your website address?
What is your website address?
Source: IASME Cyber Essentials Danzell question set v16.3
A1.8 asks for your organisation's website address, if you have one. IASME's guidance says a Facebook or LinkedIn page is acceptable instead. It is a contact detail, not a technical control. The accounts behind the site are different: a hosting control panel, website builder or content management platform is a cloud service for A2.9.
Is A1.8 an automatic fail?
No. A1.8 records information about your organisation and is not marked against a technical requirement, so no answer to it fails the assessment. Inaccurate or contradictory details may be returned by the assessor for correction.
- Answer type
- Notes a notes question, answered in free text
- IASME guidance
- Please provide your website address (if you have one). This can be a Facebook/LinkedIn page if you prefer.
- Requirement enforced
- Section A1 collects the details that appear on the certificate and shape which later questions are shown.
- Outcome if non-compliant
- Not marked against a requirement; inaccurate details may be returned for correction
What does A1.8 ask?
A1.8 asks: “What is your website address?”
A1.8 asks for your website address. The guidance says to provide it if you have one, and that it can be a Facebook or LinkedIn page if you prefer.
The answer is administrative. The hosting behind the website is a different matter: a hosted CMS, website builder or hosting control panel is a cloud service that stores or processes your data, so it belongs in A2.9 with MFA enforced on the admin login. Social media accounts are also cloud services under the A2.9 guidance.
What should you write in the notes field for A1.8?
Write two to four specific sentences for A1.8: what you do, who owns it, how often it happens and the record that proves it.
A model answer to adapt. Replace everything in square brackets with your own facts, and delete anything that is not true.
https://www.[yourdomain].co.uk (or: no website; LinkedIn company page at [URL])
What mistakes do applicants make with A1.8?
A common mistake with A1.8: leaving it blank when there is a social media page that would do.
- Giving the website here but forgetting its CMS or hosting control panel in A2.9.
- Forgetting that the social media page you list here is itself a cloud service needing MFA.
- A typo in the address, which makes the record harder to verify.
How do you get A1.8 right?
Work through these steps before you enter A1.8 in the portal:
- Enter your website address, or a LinkedIn or Facebook page if you have no website.
- Add the website's hosting panel, CMS or website builder to A2.9 and enforce MFA on its admin logins.
How do assessors check A1.8?
Where to go next
- Cloud serviceGlossary
- Software development and web appsScope rules
- How to get certifiedThe application, step by step
- What Cyber Essentials costsIASME fee bands and assessor prices
- All A1 questionsYour organisation
- Cyber Essentials checklistThe evidence to gather for every question
- Check your readinessScore your answers, auto-fails first
Other A1 questions
- A1.6.1A1.6.1Multiple choice + notesPlease provide the name, company number and registered address of any additional legal entities that are included.Multiple choice + notes
- A1.7A1.7Multiple choice + notesWhat is your main business?Multiple choice + notes
- A1.9A1.9Renewal or first timeIs this application a renewal of an existing certification or is it the first time you have applied for certification?Renewal or first time
- A1.10A1.10Multiple choice + notesWhat are the two main reasons for applying for certification?Multiple choice + notes
Frequently asked questions
A1.8 in the 2026 Danzell Cyber Essentials question set asks: "What is your website address?" It is a notes question, answered in free text.
A1.8 asks for your organisation's website address, if you have one. IASME's guidance says a Facebook or LinkedIn page is acceptable instead. It is a contact detail, not a technical control. The accounts behind the site are different: a hosting control panel, website builder or content management platform is a cloud service for A2.9.
No. A1.8 records information about your organisation and is not marked against a technical requirement, so no answer to it fails the assessment. Inaccurate or contradictory details may be returned by the assessor for correction.
No. IASME's A1.8 guidance asks for a website only if you have one, and accepts a Facebook or LinkedIn page instead.
The admin accounts for its hosting, CMS or website builder are cloud service accounts, so they belong in A2.9 and need MFA where it is offered. Under the software development section of v3.3, publicly available commercial web applications are in scope by default, while bespoke and custom components of web applications are out of scope.
Would you pass the 2026 question set?
Answer 24 yes or no questions, built by the assessors who mark Cyber Essentials, and get a readiness score in about five minutes, with any auto-fail questions you miss flagged first in your results.
- IASME Certification Body
- CREST accredited
- IASME fee included
- UK offices in Leeds, Newcastle, London and Edinburgh