Cyber Essentials & DCC Self-Assessment Tools
Free guided self-assessments for UK businesses preparing for Cyber Essentials certification or Defence Cyber Certification (DCC) Level 0. Work through the official controls in plain language and find out where you stand before you apply.
Built by SimpleCyber, an IASME-certified Cyber Essentials assessment body based in Wigan.
20 to 40 minutes
One question at a time, with guidance on what the assessor is actually looking for. You can stop and come back using your session link.
62 questions, five controls
The full Cyber Essentials question set. Follow-up questions only appear when your earlier answers make them relevant.
A readiness report
Your answers are scored against the certification rules and turned into a report: what you have covered, what needs work, and what would block you today.
What you will be asked about
- Firewalls
- Secure Configuration
- Security Update Management
- User Access Control
- Malware Protection
Want a quick overview first? Read the Cyber Essentials checklist or see how much Cyber Essentials costs.
Choose your assessment
Cyber Essentials Self-Assessment Tool
The full official Cyber Essentials question set across the five controls, scored against the certification rules. Start here if you are working towards Cyber Essentials, or renewing it. Takes 20 to 40 minutes.
DCC Level 0 Self-Assessment
Defence Cyber Certification is the certification scheme for suppliers in the MOD defence supply chain. Level 0 covers three controls — Cyber Essentials, UK GDPR compliance and resilient networks and systems — and a valid Cyber Essentials certificate is a mandatory prerequisite for every DCC level. Takes about 10 to 15 minutes.
Check DCC Level 0 readinessNo sign-up needed. Your answers are saved against an anonymous session so you can return to them with the link.
Already started? Resume where you left off
Paste the resume link or code you saved during your assessment.
What we store
We store your answers and how far through the assessment you are, tied to a random session code — nothing that identifies you or your business, unless you choose to type contact details into an answer. There is no account, no email address and no tracking of who you are. Anyone with your resume link or code can open the assessment and its report, so only share it with people you trust. Your answers are used to generate your readiness report and nothing else.
This tool estimates readiness against the published Cyber Essentials self-assessment question set. It is not an official IASME/NCSC assessment and passing it does not guarantee certification - only a licensed Certification Body assessor can award Cyber Essentials certification.