Cyber Essentials in Durham

Practical support to get your Durham organisation through Cyber Essentials or Cyber Essentials Plus, from gap assessment to certification and renewal.

Government-Backed Scheme

Cyber Essentials is the UK's government-backed baseline for cyber security, built around five technical controls that stop the most common types of internet-based attack.

Two Levels, One Path

We support both the self-assessment Cyber Essentials certificate and the independently audited Cyber Essentials Plus, so you can start where you are and step up when you're ready.

Fixed-Quote Delivery

After a free consultation to understand your current setup, we give you a fixed quote for the work involved - no open-ended hourly billing.

Cyber Essentials support for organisations in Durham

Cyber Essentials certification is increasingly a condition of doing business - asked for by public-sector contracts, insurers and larger customers carrying out due diligence on their supply chain - and it is also simply a sensible baseline for any organisation that relies on email, cloud services or a shared network. We work with organisations in Durham to assess their current setup against the scheme's five technical control areas, close the gaps that would otherwise cause a failed submission, and take the paperwork off your hands. Whether you are certifying for the first time, stepping up from Cyber Essentials to Cyber Essentials Plus, or renewing a certificate that's about to lapse, we handle the assessment and remediation work so your team can stay focused on the day job.

Cyber Essentials in Durham

Durham is a compact cathedral city dominated by its world-renowned university, which drives a knowledge-intensive economy spanning education, research and development, professional services, tourism, the public sector and technology. That mix means a lot of organisations in the city handle sensitive research data, student and resident records, or public-sector contracts that increasingly list Cyber Essentials as a supplier requirement. The city's UNESCO World Heritage Site status - covering Durham Cathedral and Durham Castle - also underpins a strong tourism sector, and tourism and hospitality businesses are just as exposed to phishing, unpatched software and weak account access as any other organisation, even if cyber security isn't their day-to-day focus.

Who Needs It

Any organisation in Durham that wants to bid for public-sector or supply-chain contracts, or simply wants a recognised baseline for its cyber security, can apply for Cyber Essentials. In practice that spans university spin-outs and research groups, professional services firms, technology companies, tourism and hospitality operators trading on the back of the city's heritage status, and public-sector bodies themselves - each with a different starting point but the same five control areas to satisfy.

Reaching Durham

Durham's professional services and public-sector employers benefit from excellent East Coast Main Line connections, with journeys from Durham to London King's Cross taking around two hours fifty minutes. We deliver Cyber Essentials work remotely as standard - most of the assessment and remediation can be done over a call and a screen-share - with on-site visits arranged when hardware or network access genuinely needs someone in the room.

Our approach to Cyber Essentials certification

Five Controls, Properly Implemented

Cyber Essentials is built around five technical control areas: firewalls, secure configuration, security update (patch) management, user access control and malware protection. Rather than treating the questionnaire as a box-ticking exercise, we work through each control area against your actual devices, cloud services and accounts, so what you submit reflects what's genuinely in place.

Straightforward Application Support

The Cyber Essentials self-assessment questionnaire asks detailed technical questions that are easy to answer incorrectly if you're not familiar with the scheme's exact wording. We help you complete it accurately, and where Cyber Essentials Plus is the goal, we prepare your systems for the independent technical audit that level requires.

Ready to get Cyber Essentials certified?

How it works

From free consultation to a certificate in hand - our process keeps Cyber Essentials straightforward.

1

Free Consultation

We learn about your systems, devices and cloud services, and which level of certification - Cyber Essentials or Cyber Essentials Plus - fits your organisation.

2

Assessment

We review your setup against the scheme's five control areas and identify exactly what needs to change before you submit.

3

Remediation

We help you close the gaps - firewall rules, configuration, patching, access control and malware protection - ready for submission.

4

Certification & Renewal

We support you through submission and, for Cyber Essentials Plus, the independent audit, then help you renew each year as the scheme requires.

Organisations in Durham turn to us when

A client, insurer or public-sector tender asks for Cyber Essentials and they don't know where to start
They're not sure whether their current firewall, device and account setup would actually pass an assessment
Budget is limited and they need a fixed quote rather than open-ended consultancy hours
A certificate is about to lapse and renewal needs organising before it does
They want to move up from Cyber Essentials to the independently audited Cyber Essentials Plus
Staff and student or research devices are a mix of personally owned and organisation-owned, and access control needs sorting out first
A previous submission was rejected and they need help understanding why
They have no in-house IT team to interpret the questionnaire's technical wording
Cloud services and email are managed by more than one person and nobody's confident the configuration is consistent

Why choose Cloudswitched for Cyber Essentials?

We work through the Cyber Essentials questionnaire and its five control areas the same way for every client - methodically, and against what's actually installed and configured, not what a policy document says should be there.

We support both certification levels. For Cyber Essentials, that means preparing your self-assessment answers so they're accurate first time. For Cyber Essentials Plus, we prepare your systems for the independent technical audit that level requires - the audit itself is carried out by the certification body, not by us, but the groundwork is ours to get right.

Everything is quoted on a fixed basis after a free consultation, so you know the cost before any work starts, and there's no ongoing contract tying you in once your certificate is issued.

Delivery is remote-first, which suits organisations in Durham well given our City of London base - most assessment and remediation work happens over a call and a screen-share, with on-site visits arranged only where hardware genuinely needs hands on it.

We also support renewal. Cyber Essentials certificates need renewing annually, and we can pick that up each year so it doesn't become a last-minute scramble.

Cyber Essentials support for Durham organisations

What we deliver for Cyber Essentials in Durham

01

Gap Assessment & Readiness Review

A structured review of your firewalls, device configuration, patching, user access and malware protection against the Cyber Essentials requirements, so you know exactly what needs fixing before you submit.

02

Technical Remediation Support

Practical help closing the gaps the assessment finds - firewall rules, secure configuration, update and patch management, access control and malware protection - across your existing devices and cloud services.

03

Cyber Essentials Application Support

Help completing the self-assessment questionnaire accurately, in the scheme's own terms, to reduce the chance of a rejected or queried submission.

04

Cyber Essentials Plus Preparation

Preparing your systems and evidence ahead of the independent technical audit that Cyber Essentials Plus requires, so the audit itself goes smoothly.

05

Annual Renewal & Ongoing Compliance

Cyber Essentials certificates last a year. We can manage the annual renewal cycle for you, re-checking your controls against any changes to your setup since the last submission.

Why Cloudswitched for Cyber Essentials?

Certification is a means to an end - a safer, more trusted organisation. Here's how we approach it.

Straightforward, jargon-free process

We explain what each control area means in plain English before we ask you to change anything, so you understand what you're certifying, not just that you passed.

Both levels covered

Whether you need the self-assessment Cyber Essentials certificate or the independently audited Cyber Essentials Plus, we prepare you for the right level for your contracts and customers.

Practical technical remediation

We don't just hand you a list of failures - we help you fix firewall rules, tighten configuration and sort out patching and access control on the devices and services you already use.

Thorough gap assessment

We assess before you apply, not after a rejection, so problems get found and fixed while there's still time to submit with confidence.

One point of contact throughout

From your first consultation to a certificate in hand, you deal with the same team - no re-explaining your setup to a new person at every stage.

Built around the actual questionnaire

Our assessment work maps directly onto the Cyber Essentials questionnaire's control areas and wording, so what we fix is exactly what you'll be asked about.

No ongoing contract required

Certification is a defined piece of work with a fixed quote. Once your certificate is issued there's no tie-in - though we're here for renewal when the time comes.

Support through renewal

Cyber Essentials lapses after a year. We can manage your renewal cycle so certification stays current rather than becoming an annual scramble.

Transparent, fixed-quote pricing

We quote a fixed price after understanding your setup at a free consultation, so there are no hourly-billing surprises part-way through the work.

Cyber Security for Organisations in Durham

Organisations in Durham depend on properly configured firewalls, patched devices and controlled account access to keep email, research data, resident and student records and everyday cloud services running securely. The city's mix of university research groups, professional services firms, technology companies and public-sector employers means Cyber Essentials requests increasingly come from customers, funders and public-sector tenders rather than being optional. Getting the five control areas right also reduces the everyday risk from phishing and unpatched software that affects any organisation with email and internet access, regardless of sector.

About Durham

Durham is a compact cathedral city built around Durham University, one of the UK's leading research and teaching institutions, which drives a knowledge-intensive local economy spanning education, research and development, professional services, tourism, the public sector and technology. Durham Cathedral and Durham Castle together form a UNESCO World Heritage Site at the heart of the city, and that heritage status underpins a strong tourism sector alongside the university's research and teaching activity.

The local economy: Between the university's research groups, professional services firms serving the wider area, technology companies, tourism and hospitality operators trading on the city's heritage status, and public-sector employers, Durham has a broad base of organisations that increasingly need to demonstrate a recognised cyber security baseline - whether that's requested by a funder, a customer or a public-sector contract.

Getting here: We support Cyber Essentials work for organisations across Durham, delivered remotely as standard from our City of London base, with on-site visits arranged where hardware or network access genuinely needs someone in the room. Durham's East Coast Main Line connections put London around two hours fifty minutes away by train, which keeps in-person visits practical when they're needed.

City

Durham

You'll know Durham by its cathedral and castle, standing together as a UNESCO World Heritage Site above the city, with Durham University's research and teaching activity running through the local economy alongside professional services, tourism and public-sector employers. It's a small, connected city, and the same handful of technical control areas apply whichever part of that economy an organisation sits in.

Compliance We Support
Cyber EssentialsCyber Essentials PlusGDPRUK Electronic Commerce RegulationsConsumer Rights Act 2015
Service

Cyber Essentials Certification Support

Cyber Essentials certification

Assessment, remediation and application support for the UK's government-backed Cyber Essentials and Cyber Essentials Plus schemes, delivered on a fixed quote after a free consultation.

Location

Cyber Essentials in Durham

Cyber Essentials Durham

Supporting organisations across Durham - from the university's research groups to professional services, technology and tourism businesses - through Cyber Essentials and Cyber Essentials Plus, delivered remotely with on-site visits where needed.

Frequently Asked Questions

Got questions about Cyber Essentials? We've answered the most common ones below. If you need more detail, get in touch.

What is Cyber Essentials and do we need it?

Cyber Essentials is a UK government-backed certification scheme that checks five basic technical controls - firewalls, secure configuration, security update management, user access control and malware protection - are in place. Many public-sector contracts, insurers and larger customers now ask suppliers to hold it, and it's a sensible baseline even where it isn't a contractual requirement.

What's the difference between Cyber Essentials and Cyber Essentials Plus?

Cyber Essentials is a self-assessment questionnaire, verified by a qualified reviewer. Cyber Essentials Plus covers the same five control areas but adds an independent technical audit of your systems, offering a higher level of assurance. We support you through either, or through stepping up from one to the other.

How long does certification take?

It depends on how close your current setup is to the requirements and how quickly any gaps can be closed. We give you a realistic timeline once the initial assessment is complete, rather than a generic estimate before we've looked at your systems.

What does the gap assessment involve?

We review your firewalls, device and cloud configuration, patching and update process, user account and access setup, and malware protection against the scheme's requirements, then give you a clear list of what needs to change before you submit.

We're a small team with no in-house IT - is that a problem?

No - it's one of the more common reasons organisations come to us. We explain each requirement in plain terms and carry out the technical remediation ourselves, so you don't need in-house expertise to get through the process.

Do you carry out the Cyber Essentials Plus audit yourselves?

The Cyber Essentials Plus audit is carried out independently by the certification body as part of the scheme's assurance process. Our role is to assess and remediate your systems beforehand so the audit goes smoothly, and to support you through the submission.

Will we need to buy new hardware or software?

Usually not. Most gaps are configuration issues on equipment you already have - firewall settings, update schedules, account permissions - rather than missing hardware. Where something genuinely needs replacing, we'll tell you plainly and explain why.

How much does it cost?

Cyber Essentials work is quoted on a fixed basis after a free consultation, once we understand your current setup and which level of certification you need. There's no generic price list - you'll know the fixed cost before any work begins.

Technology Stack

Powered by industry-leading technologies including SolarWinds, Cloudflare, BitDefender, AWS, Microsoft Azure, and Cisco Meraki to deliver secure, scalable, and reliable IT solutions.

SolarWinds
Cloudflare
BitDefender
AWS
Hono
Opus
Office 365
Microsoft
Cisco Meraki
Microsoft Azure

Latest Articles

12
  • Database Reporting

Custom Reporting & Dashboard Development Cost in the UK in 2026

12 Apr, 2026

Read more
18
  • Internet & Connectivity

How to Set Up Quality of Service for Business Applications

18 Mar, 2026

Read more
27
  • Cloud Backup

Multi-Cloud Backup: Spreading Risk Across Providers

27 Feb, 2026

Read more

Technology Stack

Powered by industry-leading technologies including SolarWinds, Cloudflare, BitDefender, AWS, Microsoft Azure, and Cisco Meraki to deliver secure, scalable, and reliable IT solutions.

SolarWinds
Cloudflare
BitDefender
AWS
Hono
Opus
Office 365
Microsoft
Cisco Meraki
Microsoft Azure

Latest Articles

20
  • Microsoft 365 Copilot

Measuring Microsoft 365 Copilot ROI: A UK Business Guide to Proving the Licence Cost Is Worth It in 2026

20 Sep, 2026

Copilot ROI measurement is the conversation that arrives about ten months after the licences do. The rollout went well enough, people say they like it, and...

Read more
19
  • Penetration Testing

What Happens During a Penetration Test: A UK Business Guide to the Process Start to Finish in 2026

19 Sep, 2026

The penetration test process is opaque to most of the people who commission it. A UK business signs off a quote, agrees some dates, and then waits. Somewhere...

Read more
18
  • Cloud Backup

Backup Retention Policy: A UK Business Guide to How Long You Should Actually Keep Your Data in 2026

18 Sep, 2026

A backup retention policy is the answer to a question most UK businesses have never actually been asked: how far back do you need to be able to go? In the...

Read more

Enquiry Received!

Thank you for getting in touch. A member of our team will review your enquiry and get back to you within 24 hours.