Estimate the total investment needed to achieve Cyber Essentials Plus certification based on your organisation size, current security posture, and IT infrastructure.
| Component | What It Covers | Typical Cost Range (DIY) | Included with Cloudswitched |
|---|---|---|---|
| Gap Assessment | Review of current controls against Cyber Essentials requirements, identifying gaps and remediation steps | £500 – £1,000 | ✓ Included |
| Remediation | Fixing identified gaps - patching, firewall configuration, access controls, device hardening | £1,000 – £5,000+ | ✓ Included |
| Licensing & Registration | IASME certification body registration and Cyber Essentials scheme fees | £300 – £500 | ✓ Included |
| Vulnerability Testing | External vulnerability scan, internal device sampling, and technical verification | £500 – £1,500 | ✓ Included |
| Examination | Formal CE Plus assessment by an accredited certification body assessor | £1,500 – £3,000 | ✓ Included |
| Ongoing Support | Post-certification guidance, annual renewal preparation, and compliance monitoring | £200 – £500/year | ✓ Included |
Cost ranges are approximate and based on typical UK market rates for SMBs. Actual costs vary based on organisation size and complexity. Contact Cloudswitched for an all-inclusive fixed-price quote.
Explore our other free IT planning and security assessment tools.
Cyber Essentials Plus typically costs £1,000-£4,000 for a UK SME, depending on organisation size and number of devices in scope, covering the certification body fee and technical audit. On top of that, most businesses spend a further £500-£5,000 on remediation such as patching, MFA rollout, and firewall configuration before they're ready to be assessed.
Yes - Cyber Essentials basic (self-assessment) typically costs £300-£500, while Plus adds an independent technical audit and usually costs £1,000-£4,000 depending on device count and complexity. Plus is the version most public sector contracts and larger clients actually require, so the extra cost is often unavoidable for growth.
Beyond the certification fee, most UK SMEs underestimate remediation costs - replacing unsupported operating systems, adding endpoint protection licences, and staff time spent gathering evidence. This calculator factors in typical remediation spend alongside the audit fee so you get a realistic total rather than just the headline certification price.
Yes, certification lapses after 12 months and must be renewed annually, with each renewal requiring a fresh technical audit. Annual renewal costs are usually similar to or slightly lower than the first certification since major remediation work is typically already done, so budget £800-£3,000 per year going forward.
Powered by industry-leading technologies including SolarWinds, Cloudflare, BitDefender, AWS, Microsoft Azure, and Cisco Meraki to deliver secure, scalable, and reliable IT solutions.
14 Sep, 2026
Serious VoIP provider comparison starts with the things that are hardest to reverse, not the number on the front of the quote. Price per seat is the easiest...
13 Sep, 2026
Almost every UK business sizes its internet connection exactly once. Someone signs a lease, an installer quotes what is available at the postcode, a number is...
12 Sep, 2026
Most UK businesses do not choose a data warehouse architecture deliberately. They arrive at one by accident, usually at the point where a monthly management...