Official Cyber Essentials Certification Body
Getting certified shouldn't be stressful or complicated. As an official, licensed IASME Certifying Body, SafeWatch delivers your complete certification under one roof: we help you prepare, audit your systems, and directly issue your official certificate. Work directly with experienced Lead Assessors—zero third-party handoffs, zero reseller markups, and fast 24–48h audit turnaround SLA.
Certification Without the Pain
Under one roof: We Prepare You • We Audit Your Systems • We Issue Your Certificate.
We Prepare, Create the Assessment, Conduct the Audit & Issue Your Certificate
Because SafeWatch is an official, licensed IASME Certifying Body, you do not need to juggle multiple third-party consultants, brokers, and external audit houses. We deliver the entire certification process in-house from preparation to certificate delivery:
1. Help You Prepare
We work with your internal IT team or MSP to define your scope boundaries, conduct pre-audit gap diagnostics across the 5 NCSC controls, and provide clear remediation advice to eliminate failure risks before submission.
2. Create the Official Assessment
As an authorised Certifying Body, we provision and set up your formal organisation account directly on the official IASME assessment platform, registering your declared scope and questionnaire ready for evaluation.
3. Conduct the Technical Audit
Our accredited Lead Assessors rigorously evaluate your answers and evidence against NCSC v3.3 standards. For Cyber Essentials Plus, we conduct hands-on endpoint auditing and external network vulnerability scans.
4. Issue the Official Certificate
Upon audit sign-off, SafeWatch directly signs and issues your official UK Cyber Essentials or Plus certificate, registers your organisation on the NCSC National Database, and activates your £25,000 free cyber liability insurance.
Official IASME Certifying Body
SafeWatch is an official, licensed IASME Certifying Body authorised by NCSC to manage the end-to-end certification process and directly issue your official UK certificate:
- 1. Help You Prepare: Pre-submission gap diagnostics, scoping advice, and remediation checks so your systems pass first time.
- 2. Create Official Assessment: Provisioning your organisation on the IASME portal with verified scope parameters.
- 3. Conduct Technical Audit: In-house Lead Assessors audit your firewalls, devices, cloud services, and access controls (plus vulnerability scanning for CE+).
- 4. Issue Official Certificate: Formal sign-off and issuance of your NCSC Cyber Essentials certificate, listed on the UK national registry.
Continuous Cyber Essentials Compliance Retainer
Stop treating Cyber Essentials as a point-in-time annual rush. Security posture changes whenever you onboard new cloud services, roll out devices, or update firewall rules. SafeWatch offers a 365-day retainer providing continuous access to senior accredited assessors, structured quarterly reviews, and full certification included.
Watch: Cyber Essentials — Implementing the Firewalls Control
Learn how to satisfy the 5 mandatory NCSC v3.3 boundary firewall requirements, cloud security groups, and remote worker router scoping in this 90-second Industry Experienced Assessor guide.
UK Government Mandates Cyber Essentials Across Supply Chains (£90M Package)
The UK Government has announced a landmark £90 million national resilience package to establish Cyber Essentials as the non-negotiable security baseline across UK supply chains and critical sectors. Backed by the new Cyber Resilience Pledge and tightened procurement rules, organisations must demonstrate compliance to win public and enterprise contracts. As an accredited Certifying Body, SafeWatch helps businesses audit perimeters, implement MFA, and achieve certified status.
Cyber Essentials Requirements Checklist: The 5 Controls
Use this as your Cyber Essentials checklist. SafeWatch audits organisations against the five core technical requirements specified under the latest NCSC standard:
Boundary Firewalls & Internet Gateways
Enforce strict corporate firewall perimeters to protect all internal network segments, WAN gateways, and subnets. Any open ports or misconfigured router access lists represent immediate vulnerabilities and will result in automatic audit failure.
Secure Configuration
Eliminate security drift by enforcing corporate templates that disable default manufacturer accounts, enforce complex custom logins, shut down unnecessary auto-run properties, and lock down active protocols.
User Access Control & MFA Mandate
Limit administrative accounts exclusively to core needs and enforce least-privilege. Under the Danzell Standard, Multi-Factor Authentication (MFA) must be active across 100% of user and admin logins for cloud services (SaaS/PaaS/IaaS) holding corporate records.
Malware Protection
Protect organisational systems against malicious code. Audits verify that all endpoints run active anti-malware software, utilize application sandboxing, and configure strict code signing to block untrusted applications.
Security Patch Management
Establish strict administrative policies ensuring all operating systems, software packages, and firewalls are patched within 14 days of a critical or high-risk vulnerability release, mitigating zero-day exploits.
Frequently Asked Questions
Practical regulatory insights compiled by our accredited team of industry experienced assessors regarding UK Cyber Essentials certifications.
Can SafeWatch prepare us, create our assessment, conduct the audit, and issue our certificate?
Yes, absolutely. Because SafeWatch is an official, accredited IASME Certifying Body licensed by the UK National Cyber Security Centre (NCSC), we deliver the complete certification lifecycle in-house under one roof:
- 1. We Help You Prepare: Pre-submission gap diagnostics, scoping consultation, and remediation checks so your IT environment is 100% compliant.
- 2. Create Official Assessment: We provision and set up your formal organisation account directly on the official IASME platform.
- 3. Conduct Technical Audit: Accredited Lead Assessors evaluate your answers and evidence (plus hands-on endpoint and vulnerability scans for Cyber Essentials Plus).
- 4. Direct Certificate Issuance: We formally sign off and issue your official UK NCSC Cyber Essentials certificate, register you on the national database, and activate £25,000 free cyber insurance.
This direct certifying body model means zero middleman delays, statutory IASME base rates from £320 + VAT, and direct telephone access to qualified Lead Assessors (07920 151412) throughout.
How does Cyber Essentials certification work?
Cyber Essentials is a government-backed cyber security certification scheme designed to protect your business against up to 80% of common commodity cyber attacks (NCSC research). Guided by our accredited IASME team of industry experienced assessors, SafeWatch provides step-by-step auditing, technical verification, and official certification signing. You can review technical requirements in detail on the official NCSC Cyber Essentials standards, or prepare your answers using the official IASME Cyber Essentials question set.
How does SafeWatch help schools meet DfE Cyber Security Standards?
SafeWatch aligns school and academy trust systems with the UK Department for Education (DfE) Digital Standards. Our accredited team of industry experienced assessors guides school IT teams through segmenting student subnets, BYOD boundary controls, and achieving official certification.
Do I need Cyber Essentials for UK government tenders?
Yes, under Procurement Policy Note PPN 09/14, any supplier bidding for UK central government contracts that involve handling personal, sensitive, or public data must hold a valid Cyber Essentials certification.
Where can I find the official Cyber Essentials standard?
The official Cyber Essentials requirements and framework standards are published directly by the UK National Cyber Security Centre. You can access the complete overview and download the technical infrastructure guidelines on the official NCSC Cyber Essentials standards page.
Where can I download the Cyber Essentials self-assessment question set?
You can download the latest official Cyber Essentials self-assessment questions for preparation. Simply visit the IASME Cyber Essentials Question Set Download page to retrieve the current requirements document in PDF or Excel formats.
What is SafeWatch and is it related to safewatch.exe?
SafeWatch (safe-watch.co.uk) is an accredited UK Cyber Essentials Certifying Body licensed by IASME and the NCSC. We are a professional cybersecurity auditing and compliance advisory service. SafeWatch does not produce, distribute, or require downloadable consumer executable software such as safewatch.exe. If you find a file named safewatch.exe on a personal computer, it is unrelated third-party software or adware and should be examined with standard antivirus tools.
Are you a Midlands MSP? Partner with SafeWatch
Managed Service Providers (MSPs) across Oxfordshire, Warwickshire, and the Midlands partner with SafeWatch to deliver independent compliance checks for their clients. Because we focus 100% on auditing (and do not sell competing IT support or management services), your client relationships remain completely secure. We scope and assess the audits, while you manage the profitable hardware and software remediation upgrades.