Free tool

Do I need Cyber Essentials?

Answer six quick questions to find out whether Cyber Essentials is required for your work, or just a good idea. It takes about a minute.

Do you hold, or want to bid for, contracts with central government, the NHS or their agencies?
Would that work involve personal information, such as names, addresses or bank details, or providing IT systems or services?

Only matters if you answered yes above.

Do you supply councils, housing associations, schools or other public bodies?
Do you supply the Ministry of Defence, or a company that does?
Has a customer, main contractor or insurer asked about Cyber Essentials or your cyber security?

Including supplier forms and tender questions.

Do you hold customer or staff details, take card payments or handle client money?

This tool gives general guidance based on Procurement Policy Note 014 and common supplier requirements. Always check the requirements in the contract or tender itself.