Estimate the total investment needed to achieve Cyber Essentials Plus certification based on your organisation size, current security posture, and IT infrastructure.
| Component | What It Covers | Typical Cost Range (DIY) | Included with Cloudswitched |
|---|---|---|---|
| Gap Assessment | Review of current controls against Cyber Essentials requirements, identifying gaps and remediation steps | £500 – £1,000 | ✓ Included |
| Remediation | Fixing identified gaps — patching, firewall configuration, access controls, device hardening | £1,000 – £5,000+ | ✓ Included |
| Licensing & Registration | IASME certification body registration and Cyber Essentials scheme fees | £300 – £500 | ✓ Included |
| Vulnerability Testing | External vulnerability scan, internal device sampling, and technical verification | £500 – £1,500 | ✓ Included |
| Examination | Formal CE Plus assessment by an accredited certification body assessor | £1,500 – £3,000 | ✓ Included |
| Ongoing Support | Post-certification guidance, annual renewal preparation, and compliance monitoring | £200 – £500/year | ✓ Included |
Cost ranges are approximate and based on typical UK market rates for SMBs. Actual costs vary based on organisation size and complexity. Contact Cloudswitched for an all-inclusive fixed-price quote.
Explore our other free IT planning and security assessment tools.
Cyber Essentials Plus typically costs £1,000-£4,000 for a UK SME, depending on organisation size and number of devices in scope, covering the certification body fee and technical audit. On top of that, most businesses spend a further £500-£5,000 on remediation such as patching, MFA rollout, and firewall configuration before they're ready to be assessed.
Yes — Cyber Essentials basic (self-assessment) typically costs £300-£500, while Plus adds an independent technical audit and usually costs £1,000-£4,000 depending on device count and complexity. Plus is the version most public sector contracts and larger clients actually require, so the extra cost is often unavoidable for growth.
Beyond the certification fee, most UK SMEs underestimate remediation costs — replacing unsupported operating systems, adding endpoint protection licences, and staff time spent gathering evidence. This calculator factors in typical remediation spend alongside the audit fee so you get a realistic total rather than just the headline certification price.
Yes, certification lapses after 12 months and must be renewed annually, with each renewal requiring a fresh technical audit. Annual renewal costs are usually similar to or slightly lower than the first certification since major remediation work is typically already done, so budget £800-£3,000 per year going forward.
Powered by industry-leading technologies including SolarWinds, Cloudflare, BitDefender, AWS, Microsoft Azure, and Cisco Meraki to deliver secure, scalable, and reliable IT solutions.
20 Aug, 2026
Local SEO is the practice of making a business visible to the people searching for its services nearby the plumber a homeowner in Leeds needs today, the...
19 Aug, 2026
Core Web Vitals are the three field-measured metrics Largest Contentful Paint, Interaction to Next Paint and Cumulative Layout Shift that Google uses to score...
18 Aug, 2026
Virtual CIO services give a growing UK SME the board-level technology judgement of a chief information officer the roadmap, the governance, the vendor...