How to certify in 6 hours
A practical preparation sequence for submitting a complete, assessment-ready application.
Read the guideSpeed
Cyber Essentials, in 6 working hours.
The fastest Cyber Essentials certification in the UK. Compliant submissions received before midday on a UK business day are assessed and certified the same day. Same NCSC-backed certificate, same IASME scheme, faster workflow.
6 working hours
Eligible complete, compliant Basic submissions before midday UK time on a UK business day
24-72 hrs
Industry typical turnaround at other CBs
100%
Pass rate (three free feedback rounds; certification requires compliant controls)
Why we are the fastest
Speed comes from operating differently
Most certification bodies sit Cyber Essentials inside a weekly consultancy queue. We built the assessment as a software-first workflow with dedicated assessors - so the clock actually starts when your submission lands.
01 · Dedicated assessors
No queue, no batching
IASME-licensed assessors are assigned to your submission as soon as it lands - not batched into a weekly review window. The six-working-hour guarantee applies to complete, compliant Basic submissions before midday UK time on a UK business day; clarification and remediation are excluded.
02 · Pre-submission readiness
Compliant on first send
Our free readiness checker walks you through every v3.3 control before you submit, so the first review is final review for most applicants. Three assessor-feedback rounds are included if it isn't.
03 · Software-first workflow
No paperwork bottleneck
Most CBs sit assessments inside a consultancy workflow that batches tasks and waits on humans. We run a software-first assessment that surfaces gaps to the assessor immediately.
The 6-hour clock
What happens between submission and certificate
Four phases for a complete, compliant Basic submission through the prescribed process before midday UK time on a UK business day. Clarification and remediation are excluded.
Hour 0
Submission received
You submit a complete, compliant Basic questionnaire through the prescribed process before midday UK time on a UK business day. The six-working-hour guarantee applies; clarification and remediation are excluded.
Hour 0-2
Automated pre-checks
The platform validates scope, completeness, and obvious gaps so the assessor opens a clean submission.
Hour 2-5
Assessor review
Your dedicated IASME-licensed assessor reviews each control and confirms scheme conformance.
Hour 5-6
Certificate issued
Pass: certificate issued via Blockmark, verifiable through the IASME Certificate search tool within 24 hours. Fail: structured feedback returned, three free assessor-feedback rounds available.
What counts as compliant
Make the first submission the final submission
The 6-hour guarantee runs against compliant submissions. Five things must be in place before you upload - all checked free in the readiness checker.
MFA enforced on every cloud account that handles organisational data
All operating systems and applications on supported, patched versions
Anti-malware running on every in-scope endpoint
Secure configuration applied to firewalls and internet-facing devices
Documented user-access process with prompt removal when staff leave
When speed matters
Three reasons buyers come to Fig
Tender deadline this week
Check the tender’s certification, scope, equivalent-control and timing requirements under PPN 014. Eligible complete, compliant Basic submissions before midday UK time on a UK business day receive our six-working-hour guarantee.
New client requirement
A buyer needs proof of Cyber Essentials as a contract precondition. Reach the procurement bar without slowing the deal.
Renewal lapsed
Your existing certificate expired and a customer audit is mid-flight. Re-certify in hours, not days.
FAQ
Speed questions answered
Can Cyber Essentials be completed the same day?
Yes - for complete, compliant Basic submissions through the prescribed process before midday UK time on a UK business day. The guarantee is six working hours; submissions requiring clarification or remediation and Plus assessments are excluded. Later submissions require the applicable assessment schedule.
Is the 6-hour turnaround limited to micro-sized organisations?
No. Our 6-working-hour turnaround applies to Cyber Essentials certification for organisations of all sizes, including micro, small, medium and large organisations. The turnaround is measured from receipt of your compliant submission to certificate issue, regardless of your company size. The same submission timings and eligibility conditions apply to every size tier.
Does fast certification change the scheme rules?
No. The same NCSC-backed IASME Cyber Essentials v3.3 requirements apply. Speed changes our internal assessment workflow, not what the scheme demands. Your certificate is identical to one issued under any other timeline.
What happens if my submission is not compliant?
You receive structured feedback identifying the controls that need attention, then re-submit. Three assessor-feedback rounds are included in the certification fee at no extra cost - so the feedback loop is not a hidden charge.
How do I know my submission will be compliant?
Run the free readiness checker on /cyberessentials before you submit. It walks through every v3.3 control with plain-English questions and outputs a readiness score plus the specific gaps to close.
Does the 6-hour guarantee apply to Cyber Essentials Plus?
No. Cyber Essentials Plus adds an independent technical audit with sampled device testing and external vulnerability scanning. Plus typically completes in 2-3 working days. The 6-hour guarantee is for Cyber Essentials self-assessment certification only.
Supporting evidence
Compare the routes before choosing a deadline
These guides explain the preparation, provider turnaround, and common causes of delay behind the same-day certification route.
Compare provider turnaround
A like-for-like view of published certification timelines and what each promise covers.
Read the guideWhat causes certification delays
The workflow and submission issues that turn an assessment into a multi-day process.
Read the guideCyber Essentials trust evidence
The buyer evidence to check before you purchase
This block keeps the commercial claims close to the final decision point: licence, speed, pricing, reviews, and the important difference between Cyber Essentials and Cyber Essentials Plus.
Licence
IASME-licensed certification body
Fig Group publishes its IASME licence evidence, operating entity, and external verification route so buyers can check the certification body before purchase.
Verify IASME licenceSpeed
6-hour CE guarantee
The 6-hour assessor turnaround applies to eligible Cyber Essentials submissions received before midday on a UK business day. It does not apply to Cyber Essentials Plus.
Review speed evidencePricing
Below standard IASME fee
Cyber Essentials pricing is published by tier and mapped against the standard IASME certification body fee, with no mandatory consultancy add-on.
Review price evidenceReviews
Public review evidence
Google review signals and Fig claim evidence are separated from sales copy so procurement teams can verify trust claims independently.
Review rating evidencePractical rule: buy Cyber Essentials when the requirement asks for baseline certification. Buy Cyber Essentials Plus only when the buyer, insurer, or framework specifically asks for the audited technical verification layer.
Submit before midday. Certify the same day.
Run the free readiness checker, then buy your tier. Compliant submissions before midday on a UK business day are certified within 6 working hours.