The number of Cyber Essentials badges issued through the National Cyber Security Centre (NCSC) continues to rise, although not as quickly as necessary to ensure the resilience of British businesses. New statistics for the January to March 2025 quarter show that 10,064 base-level Cyber Essentials certifications and 3,272 advanced Cyber Essentials Plus certifications were granted during this period. This marks a slight increase from the previous quarter, where 9,790 Cyber Essentials and 3,388 Cyber Essentials Plus certifications were awarded.
Microbusinesses and small enterprises accounted for the majority of certifications in Q1, with 5,988 Cyber Essentials certifications each. Medium-sized businesses received 1,780 certifications, while large enterprises received 916. However, the majority of awards in Q1 were recertifications by existing members, indicating the need for more awareness about the scheme.
Andy Kays, CEO of Socura, a managed security services provider, highlighted the importance of Cyber Essentials certification in today’s cyber threat landscape. He expressed concern that only a quarter of UK businesses with 250 or more employees are Cyber Essentials certified, emphasizing the need for all businesses to prioritize cyber hygiene.
Cyber Essentials, launched in 2014, focuses on five key technical controls to prevent cyber attacks: secure configuration, user access control, malware protection, security update management, and firewall implementation. These controls form the foundation of the certification, which has been instrumental in improving cyber security across various sectors.
Businesses seeking certain UK government contracts that involve sensitive data must hold Cyber Essentials certification. The scheme has proven effective in reducing cyber incidents and insurance claims among certified organizations. Cyber security experts have praised Cyber Essentials for its ability to strengthen defenses against common cyber threats, especially for small and medium-sized enterprises.
Overall, Cyber Essentials plays a crucial role in enhancing cyber resilience and signaling a commitment to cybersecurity best practices. As businesses face evolving cyber threats, maintaining Cyber Essentials certification is essential for safeguarding operations and building trust with stakeholders.
