Cyber Essentials readiness check

    Check how prepared you are across the five Cyber Essentials controls. Your answers identify work to discuss before an application, not an audit result or a certificate.

    Five control areas

    Choose the answer that best describes what is in place today. Choose “No / not sure” when you cannot confirm a control.

    Firewalls
    Are firewalls enabled on your internet connection and devices?

    Check business and home-working equipment within scope.

    Have default router and firewall administrator passwords been changed?

    Remove unused administration accounts and unneeded remote access.

    Are incoming connections limited to the services you need?

    Record who approves each exposed service and review it.

    Secure configuration
    Are unused accounts and software removed?

    Check new devices as well as older machines.

    Are screen locks and suitable authentication configured?

    Apply the settings consistently, including mobile devices.

    Are automatic execution and unnecessary services restricted?

    Check the configuration baseline rather than relying on staff memory.

    Security update management
    Is every in-scope operating system and application supported?

    Include browsers, add-ons, mobile devices and remotely used equipment.

    Are high-risk and critical updates applied within 14 days?

    Use evidence from reports, not just automatic-update settings.

    Are available automatic updates enabled where appropriate?

    Record any exceptions and who checks them.

    User access control
    Does each user have their own account with only needed access?

    Check contractors, shared devices and old group memberships.

    Is second-step sign-in applied to cloud accounts where available?

    Check all relevant users, especially administrators.

    Are administrator accounts separate from everyday accounts?

    Use elevated permissions only when needed.

    Malware protection
    Is appropriate malware protection active on every in-scope device?

    Coverage may involve protection software or tightly restricted application use.

    Are protection updates and alerts checked?

    Know who acts when a protection service stops working.

    Are untrusted applications and harmful downloads restricted?

    Review the approved software list and browser protections.

    How to read your result

    Ready means no gaps were reported in these questions for that control; Nearly ready includes partially implemented controls; Work needed includes a No or not-sure answer. This short check is not the complete certification questionnaire. A certification body issues the certificate; we prepare you and manage the application with our certification partner.

    Questions about this service

    Do I need to give contact details?

    No. The full result appears on this page. Any supported PDF or Word download is also free without contact details. The report email form is optional and appears after the result.

    What happens to my entries?

    Calculations and worksheets run in your browser without saving entries to our server. The domain checker sends your domain to our server and a public DNS resolver. The password checker sends only a five-character hash prefix directly to the range service. If you explicitly request an email, your full report is emailed to you; your contact details, tool name and result summary go to support@cloudss.co.uk.

    Is the result a guarantee or a quote?

    No. Use it as a starting point for a practical review. Recommendations depend on what you enter, and any service scope, licence or price is confirmed in writing.

    Keep control of your information

    Do not enter passwords, recovery codes or confidential customer records into a worksheet. The dedicated password check is the only tool designed to process a password, entirely in your browser. You can refresh the page to clear entries.

    Related information

    Talk to us about your business

    Call 01494 866668

    Prefer us to contact you? Request a call back.