Cyber Essentials for UK accountants and accountancy practices Certified by Fig Group.
Fig Group certifies UK accountancy practices - from sole practitioners to 400-staff multi-office firms - for Cyber Essentials and Cyber Essentials Plus. Tailored to the HMRC AML supervisory context, Xero / Sage / QuickBooks practice management, and the practice-management reality of moving between client books daily. IASME-licensed, from £299.99 + VAT, with a six-working-hour Basic guarantee for complete, compliant submissions before midday on a UK Business Day, subject to terms.
Sector-specific
Tailored to accountants and accountancy practices
The scheme requirements apply across sectors; implementation and contractual context differ. These are the scope, regulatory, and supplier-cascade points Fig Group assessors check first.
- 01HMRC AML supervision overlap with cyber posture.
- 02Client tax data, payroll, and statutory accounts - all sensitive.
- 03Xero, Sage, QuickBooks, FreeAgent, IRIS, and BTC Software practice-management systems.
- 04Self-assessment season remote-working pressure.
- 05Insurer CE / CE Plus requirements for professional indemnity cover.
- 06Multi-office and partner-home working.
Pricing at a glance
Below the standard IASME fee at every tier
Three free rounds of Basic assessor feedback included. Published pricing - no gated forms or consultancy add-ons. If gaps remain after the included rounds or assessment period, agree any further support or new purchase before incurring a charge. Read the assessment terms.
Turnaround
6 working hours
Complete, compliant Basic submissions before midday on a UK Business Day; terms apply.
Cyber Essentials
£299.99 - £549.99
+ VAT, by organisation size.
Cyber Essentials Plus
£1,499.99 - £4,499.99
+ VAT, third-party verified.
Common questions
Frequently asked questions
Is Cyber Essentials required for accountants?
Not directly by HMRC or ICAEW, but insurers and large corporate clients increasingly require it. AML-supervised firms should treat CE as aligned with the HMRC risk-based approach to cybercrime prevention.
What scope should a 20-person accountancy practice use?
Include laptops, work mobiles, cloud email and accounting services used for organisational data. Personal devices used for work are generally included; Conditional Access alone does not exclude them. Record the cloud provider/customer control split and apply the home-router ownership rules.
Can CE Plus evidence be shared during a PI insurance review?
Yes. A practice can choose to share its certificate and supporting evidence with its insurer, broker, or underwriter. The recipient sets its own requirements and decides any pricing, terms, or coverage outcome.
What about partners working from second homes?
Apply the same remote-working controls at either location. Work devices remain subject to the requirements; worker- or ISP-supplied home routers are excluded, while organisation-supplied routers are included. Document the actual firewall and access arrangements.
Sources: NCSC requirements v3.3, PPN 014, certification terms.
Deep-dive articles
Long-form guidance for accountants and accountancy practices
Technical guidance written by an IASME-licensed assessor - scope edge cases, supplier cascade, and regulatory overlap that the scheme guidance does not cover.
Next step
Ready to certify?
From £299.99 + VAT. IASME-licensed. Typically within 6 working hours. No consultancy add-ons.