Cyber Essentials Plus Readiness Assessment
Find and fix likely Cyber Essentials Plus failures before the formal assessment, so a customer, tender or insurance deadline is not put at risk.
Book a Scoping CallA practical view of whether the systems and controls in your proposed certification scope are ready for an independent Cyber Essentials Plus assessment. We review the declared scope, examine the five Cyber Essentials control areas and run targeted technical checks that reflect the published CE Plus test pattern. You get a bounded remediation plan and a clearer go or defer decision.
This is a readiness service. Tarian Labs does not award Cyber Essentials or Cyber Essentials Plus certificates. Certification is carried out by an IASME-licensed Certification Body.
Who it is for
- Organisations that need Cyber Essentials Plus for a customer, tender, insurer or supply-chain contract.
- IT managers who own security alongside day-to-day operations and need a clear preparation plan.
- Compliance teams working to a fixed certification deadline.
- Organisations moving from Cyber Essentials self-assessment to CE Plus.
What we cover
- Scope and evidence review of the proposed certification boundary, including remote working, cloud services and devices.
- The five control areas: firewalls, secure configuration, security update management, user access control and malware protection.
- External review of internet-facing addresses and services.
- Authenticated vulnerability assessment of representative devices and servers.
- Malware protection, MFA and account separation checks on representative systems.
What you get
- Readiness report with executive summary and an overall readiness view.
- Prioritised findings with evidence and a practical fix for each.
- Scope and evidence checklist for the formal assessment.
- One 60-minute remote debrief.
- One verification review within 30 days, with a status note showing what is resolved.
Good to know
Remote. Report issued within five business days of completing the checks.
Exploitability, not a scanner dump
- Every finding is reproduced by hand before it reaches the report. Anything a tester cannot reproduce is discarded rather than passed on with a caveat.
- Findings are rated by what an attacker could actually do with them in your environment, not by the raw score a tool assigned.
- Where a route exists from a starting foothold to something that matters, we show the route rather than listing the steps as separate findings.
- Every report is independently quality reviewed by a second senior practitioner before it is issued.
Who tests
Testing is led by a UK Cyber Security Council Principal practitioner (Security Testing) holding CREST CRT, OSCP, OSEP and CyberScheme Team Leader. Every report is independently quality reviewed by a second senior practitioner before issue. Our founders bring over ten years each in UK defence and critical national infrastructure. Tarian Labs is Cyber Essentials certified and based in South Wales.
Fixed scope, fixed fee, agreed before work starts.
A short call with a practitioner is enough to size this accurately.
Book a Scoping Call