Research

Cyber Essentials research and data

Original, reproducible analysis of the official Cyber Essentials documents, starting with a count of all 106 questions in the IASME Danzell question set. Every figure is computed from the source, with the method and data published.

Updated 22 September 2026
Short answer

This section publishes counts and comparisons taken directly from the NCSC requirements and the IASME question set. Each study states its source document and version, the exact counting rules, and the date it was last updated, and offers the underlying data as JSON and CSV so anyone can check a figure against the original.

Key facts
Studies
Sources
Method
Reuse
Last updated

What standard does the research follow?

  • Every figure comes from a named official document and version. Nothing is estimated, surveyed or modelled.
  • The counting rules are published on each study so a reader can reproduce any number from the source.
  • Figures are computed from the same data file that drives the question pages, so the research and the reference pages cannot disagree.
  • Where a study includes our judgement as assessors, it is labelled as such and kept out of the counts. Pass rates are not published because neither IASME nor Precursor Security publishes them by question.
  • When the scheme changes, each study is re-run against the new version and its updated date changes. See the editorial policy.
Free readiness check

Would you pass the 2026 question set?

Answer 24 yes or no questions, built by the assessors who mark Cyber Essentials, and get a readiness score in about five minutes, with any auto-fail questions you miss flagged first in your results.

  • IASME Certification Body
  • CREST accredited
  • IASME fee included
  • UK offices in Leeds, Newcastle, London and Edinburgh