Cyber Essentials Pack
Let us help you pass Cyber Essentials the first time
Cyber Essentials is as much a documentation exercise as a technical one, and that is where most first attempts stall. We give you every policy, register, and piece of evidence the IASME self-assessment asks for, written and ready to adapt, with a mapping that ties each document to the question it answers.
Cyber Essentials is a self-assessment. Passing it is a documentation exercise.
The questionnaire is short. The catch is that every "yes" has to be true and you have to be able to show it: a documented firewall standard, a secure-configuration baseline, evidence that updates get applied inside the deadline, accounts that follow least privilege. Most organizations stall not on the controls but on writing down the controls they already half-run.
This pack is that written layer. You answer the IASME self-assessment from a documented position instead of improvising, and you can show your working when a customer or insurer asks.
The five technical controls
What the assessment checks, and the documents in the pack that cover each one.
The governance behind the answers
A credible "yes" assumes a program around those controls. The pack carries the policies, registers, and plans that program needs.
From documents to a submission you can defend
The pack is built to move you through the assessment in order, then keep you certified.
The Self-Assessment Question Mapping ties each document to the IASME question it answers.
The Readiness Checklist walks the current question set so you find gaps before the assessor does.
The Implementation Guide and Evidence Pack help you apply each control and assemble what you submit.
A Maintenance Calendar and Compliance Matrix make next year's recertification a review, not a rebuild.
What this looks like in practice
You complete the self-assessment from documented controls and answer the procurement questionnaire the same week, instead of stalling for a fortnight.
You point to the risk register, access controls, and patching records that already exist, rather than writing them under deadline.
You reopen the same pack, check the maintenance calendar, and refresh the evidence, instead of starting over.
Walk into the self-assessment already able to answer it.
Editable Word and Excel · Worked examples, not placeholders · Buy once, and we send you every future update
What you are actually getting
Every policy is content you can adopt and edit, not a skeleton with "insert text here." The Excel registers and trackers open with sample rows, scoring, and the columns an assessor expects to see. You can read a complete answer before you adapt it to your own organization.
Certification itself is carried out by an IASME-appointed certification body and is not included. This pack gets you ready to pass it the first time.
Who it's for
Organizations going for Cyber Essentials for the first time, anyone re-certifying who would rather not rebuild the evidence every year, and consultants or MSPs who need a consistent, editable baseline to deploy across clients. No prior certification experience is assumed. Every document is written to be read, edited, and used.
Going for the audited tier? The Cyber Essentials Plus Pack is this full set plus the runbooks and evidence for the hands-on assessment.
See inside
Real pages from the documents
A free sample from the Cyber Essentials Pack. No email required, open it and judge the quality for yourself.
What is inside
Every document in the pack
60 documents, mapped to Cyber Essentials (five technical controls). Buy once, and every future update is included.
Want to see the quality behind the titles? Preview a sample document →
Document Customization
Need this customized to your organization?
Complete an intake form. We customize every document: industry context, regulatory mapping, calibrated parameters. Delivered in 7-10 business days.
Need the skills to operate the program? Our training platform builds the capability. Explore courses →
