Can you buy Cyber Essentials directly from IASME? (2026)

Yes. You can buy a self-led Cyber Essentials assessment through IASME or choose a supported route through a licensed certification body. IASME is the NCSC's delivery partner; licensed assessors mark the verified self-assessment. Cyber Essentials Plus needs direct contact with a certification body for its technical audit. Compare the service and package conditions as well as the assessment fee.

• Runs the Cyber Essentials scheme on behalf of the National Cyber Security Centre (NCSC)
• Delivers the scheme with the NCSC, which owns the technical requirements; the account version depends on when the application started
• Licences certification bodies and supervises their quality
• Maintains the directory of licensed CBs
• Operates the scheme certificate records and certificate search
• Audits certification bodies and handles customer complaints

• Perform the assessment - review your self-assessment questions and evidence
• For CE Plus, conduct the vulnerability testing
• Pass approved assessments to IASME, who issues the certificate

Fig Group is one such IASME-licensed CB. Our licence is verifiable directly on the IASME directory.

Yes for the self-led Basic route. IASME's scheme page offers direct online purchase by organisation size, with access to the assessment portal. A licensed assessor marks the submission. For Plus, contact a certification body directly to arrange the technical audit. Buying direct and choosing an assessment body are different decisions.

Yes - substantially. CBs set their own commercial terms. IASME and Fig Group publish their own size-tier prices; supported packages can include different preparation or consultancy. Compare the current pages and VAT before purchase. The scheme requirements do not change with the route.

Yes. Turnaround depends on the chosen route, preparation, submission quality and assessor terms:

• Platform-first bodies (e.g. Fig Group) offer 6-working-hour SLAs on clean Micro-tier submissions
• Other routes should be checked against their own current written review commitment; no market-wide time range is assumed here

Ask any CB for their SLA in writing before paying.

• The certificate: IASME-issued, 12-month validity
• The directory listing: your award can be checked through the IASME certificate search
• The scheme requirements: the applicable current account version; pre-27-April-2026 applications can continue under v3.2
• Acceptance: depends on the buyer's legal-entity, scope, level and contract requirements; an insurer makes its own decision

1. Verify the licence on the IASME directory. This is non-negotiable.

2. Get the price in writing with VAT shown.

3. Ask for an SLA - submission to review.

4. Ask about resubmission policy if the first review fails.

5. Ask about additional services - some CBs offer training or monitoring. Any eligible cyber-liability benefit is arranged separately at scheme level by IASME and its insurance partner.

You can buy self-led Basic directly through IASME, or choose a supported certification-body route. Plus needs direct contact with a certification body. The certificate is identical across all licensed CBs - what varies is price, speed, and additional services. Fig Group offers £299.99 + VAT for Micro, a 6-working-hour SLA, and insurer-grade compliance evidence exports. Any eligible cyber-liability benefit is arranged separately by IASME and its insurance partner; Fig Group does not provide or arrange it.

Start Cyber Essentials - from £299.99 + VAT | All pricing tiers | Verify our IASME licence