The Cyber Essentials Toolkit: Pass Self-Certification, No Consultant Required

About this guide

Been told you need Cyber Essentials — and have no idea where to start?

You're not alone. A client, a tender, or your insurer has asked for it, you've looked at the official self-assessment, and it's full of jargon that assumes you already know what a "secure baseline configuration" means. This toolkit is the plain-English version — built by a working UK IT/cybersecurity professional, not a compliance consultancy charging by the hour.

What's inside:

A 53-page case file laid out to actually get you through the assessment, not just explain the theory.

🎯 The Scoping Worksheet — get this wrong and nothing else matters; most failed assessments start here
🛡 The Five Controls, in plain English — firewalls, secure configuration, updates, access control, malware protection — each with a worked example from a real 6-person business
⚡ A "quick wins" page — if you've only got one afternoon before a deadline, do these four things first
📄 7 ready-to-adapt policy templates — fill in the brackets, don't write from scratch
✅ A RAG-rated Gap-Analysis Workbook — your honest self-audit before you touch the live questionnaire
📋 An Evidence Log — what to screenshot now so renewal next year takes an hour, not a day
🧭 A full submission walkthrough — choosing a certification body through to what happens if you don't pass first time
📖 Glossary + annual maintenance checklist — the scheme updates every April, so this tells you what to re-check

Who this is for: UK business owners, office managers, and "IT department of one" staff at businesses with 1–49 people who need to self-certify without hiring a consultant.

Format: Instant PDF download. Print-ready. Editable policy sections you can copy straight into Word or Google Docs.

Important: This toolkit is educational preparation material. It does not guarantee certification — Cyber Essentials is assessed and awarded by an IASME-licensed Certification Body, not by this document. Always check current requirements at ncsc.gov.uk before submitting.