A practical Cyber Essentials readiness programme - gap assessment, remediation backlog, and evidence support aligned to the five technical controls.
Cyber Essentials is a UK government-backed scheme designed to help organisations protect themselves against common internet-based threats by ensuring five technical controls are implemented: firewalls, secure configuration, security update management, user access control, and malware protection. The National Cyber Security Centre (NCSC) publishes the requirements and supporting resources used by applicants and assessors.
LW IT Solutions delivers Cyber Essentials readiness using a Microsoft-first approach where appropriate (Microsoft 365, Entra ID, Intune, Defender, and Azure). We baseline your current posture against the NCSC requirements, identify gaps, and create a prioritised remediation plan. Where you want hands-on delivery, we implement changes safely with pilots and change control, and we produce an evidence pack aligned to the scheme requirements - so you can progress toward Cyber Essentials and prepare for Cyber Essentials Plus testing with confidence.
Talk through your requirements and leave with a clear next-step plan.
Book a discovery call
Service Overview
Highlights
- Aligned directly to NCSC Cyber Essentials requirements
- Clear mapping to the five technical control areas
- Microsoft-first delivery where suitable for efficiency and clarity
- Evidence-focused approach to reduce assessor queries
- Designed to scale from small organisations to growing estates
Business Benefits
- Clear readiness position and an actionable path to certification
- Reduced risk from common internet-based attack paths via practical baseline hardening
- Improved customer assurance and supply-chain credibility
- Sustainable controls through governance, documentation, and drift prevention
Typical use cases
- Preparing for first-time Cyber Essentials certification
- Recovering from a failed or deferred Cyber Essentials assessment
- Responding to customer or supply-chain security requirements
- Establishing a baseline security posture for a growing organisation
- Laying the groundwork for Cyber Essentials Plus readiness
Objectives & deliverables
What Success Looks Like
- Confirm readiness for Cyber Essentials certification
- Identify and prioritise gaps across the five technical controls
- Prepare defensible evidence aligned to scheme requirements
- Reduce the risk of assessment failure or rework
- Support a sustainable security baseline beyond certification
What You Get
- Cyber Essentials readiness report (gaps mapped to the five controls)
- Prioritised remediation backlog (risk/effort/dependencies/sequencing)
- Evidence pack (configuration proof, exports/screenshots, and exception decision log where relevant)
- Optional remediation delivery + validation evidence
- Handover session and a light governance cadence to maintain compliance over time
How It Works
- Scope - confirm organisational scope, in-scope systems, and certification target
- Assess - review current controls against Cyber Essentials requirements
- Analyse - identify gaps, risks, and evidence shortfalls across the five controls
- Plan - produce a prioritised remediation and evidence preparation backlog
- Support - optional remediation delivery, validation, and readiness sign-off
Engagement Options
- Readiness Assessment - gap analysis and remediation plan only
- Assessment + Evidence - readiness review with evidence pack preparation
- Assessment + Remediation - implement required changes and validate outcomes
- Plus Preparation - extended support aligned to Cyber Essentials Plus testing
Common Bundles
Customers who use this service often bundle with these services
Defender Vulnerability Management
Continuous vulnerability discovery and risk-based prioritisation with Defender Vulnerability Management, supported by remediation workflows and reporting that drive accountability.
Defender for Endpoint (EDR)
Deploy and operationalise Defender for Endpoint with phased onboarding, tuned policies, and clear triage workflows across managed device estates.
CIS Microsoft 365 Foundations Benchmark Assessment
Assess Microsoft 365 configuration against CIS Benchmark guidance, identifying posture gaps and producing a prioritised, evidence-ready remediation backlog.
CIS Intune Benchmark Assessment
Assess Microsoft Intune against CIS Benchmark guidance, identifying configuration gaps and delivering a prioritised hardening backlog with staged remediation.
Compliance Manager Assessments
Configure Microsoft Purview Compliance Manager assessments with clear ownership, prioritised improvement actions, managed evidence, and reporting that supports audits.
CIS Remediation Program & Evidence Pack
CIS remediation programme delivering controlled hardening, agreed baseline alignment, and an evidence pack to support audits and ongoing governance.
Frequently Asked Questions
Get an expert-led assessment with a prioritised remediation backlog.
Request an assessment
