24 plain-English questions on how your business and Microsoft 365 are set up. See where you stand on each of the five areas the scheme checks, and get a clear list of what to fix.
Your answers never leave this page. Not sure of one? Say so and we will flag it for you to check.
Across all five areas, with a plain-English explanation on every one. Pick “Not sure” and we will flag it to check.
How many requirements you already meet, and a result for each of the five areas.
Every gap listed, with plain steps to fix each one.
Cyber Essentials is a UK government backed scheme. It is often required to win public sector work and is increasingly requested by insurers. It covers five basic technical controls. Microsoft 365 is a cloud service, so it is always in scope.
A firewall on every device, such as Windows Firewall on laptops, and a properly set up office router.
Unneeded accounts and software removed, default passwords changed and every device locked behind a password, PIN or biometric.
MFA on every cloud service, separate admin accounts and access removed when people leave or change role.
Anti-malware such as Microsoft Defender on Windows and Mac, and approved app stores on phones and tablets.
Critical and high-risk updates installed within 14 days, and nothing unsupported left in use.