IASME-Licensed Certification Body
Cyber Essentials Plus - independent technical assessment and certification by NeedSec
Cyber Essentials Plus requires independent technical testing to verify that your controls are actually in place - not just documented. NeedSec is licensed by IASME to conduct this technical assessment and award Cyber Essentials Plus certification directly. We carry out all testing ourselves and issue the certificate upon successful completion - there is no third-party assessor.
Practical assessment
Testing and review work is hands-on and tailored to your environment - not a generic checklist.
Clear, evidence-led output
Every finding includes evidence, business context, and a concrete path to resolution.
Compliance-aware approach
Work is structured around real security improvement - and mapped to relevant frameworks where needed.
What We Assess
Practical testing aligned to business risk
NeedSec combines manual testing, technical validation, and clear reporting so your team understands what matters and how to fix it.
Full technical assessment - NeedSec tests controls directly against the CE Plus methodology
Firewall and network boundary testing - rule validation, default-deny verification, and exposure checks
Patch management assessment - OS and application patch currency across all in-scope endpoints
Secure configuration testing - default accounts, unnecessary services, and hardening baseline
User access control assessment - admin privilege usage, MFA enforcement, and account policies
Malware protection testing - AV/EDR deployment coverage, update status, and scan configuration
Endpoint assessment - managed and unmanaged devices within CE Plus scope
Cloud service controls - security settings for in-scope IaaS, PaaS, and SaaS platforms
Mobile device management assessment - MDM policy coverage and remote wipe capability
Home and remote working endpoint controls - VPN, split-tunnelling, and protection coverage
Assessment outcome - failing controls are recorded before certificate decision
Certificate awarded by NeedSec upon passing the technical assessment
What You Get
Clear deliverables for security, compliance, and remediation
Every engagement concludes with a structured deliverable package so your team can act on findings without guesswork.
Cyber Essentials Plus certificate awarded directly by NeedSec
Your Cyber Essentials Plus certificate, issued directly following successful technical verification by NeedSec.
Full technical assessment report
Complete technical detail from the on-site or remote verification testing.
Pass/fail findings per control area
A control-by-control breakdown of what passed and what needs remediation.
Endpoint and device assessment notes
Findings specific to endpoint configuration, patching, and device-level security controls.
Patch and configuration assessment evidence
Evidence of patch levels and configuration settings checked against the certification standard.
Cloud controls assessment
Verification that cloud service configurations meet the required security baseline.
Required action notes for any failing controls
Specific corrective steps needed to bring any failing control up to certification standard.
Re-assessment where certification requirements are not initially met
A follow-up assessment at no extra charge if any control needs correcting before certification is awarded.
Need help scoping this service?
Tell NeedSec about your environment, compliance goal, or security concern. We will help define the right assessment approach.