How much does Cyber Essentials cost?
Cyber Essentials certification fees are set by organisation size. Below are the official IASME fee bands, what SimpleCyber charges, and the costs people often forget to budget for.
Written by SimpleCyber, an IASME-certified Cyber Essentials assessment body based in Wigan.
Official IASME certification fees
IASME is the NCSC's delivery partner for Cyber Essentials. These fees apply to the self-assessed Cyber Essentials certification and exclude VAT.
| Organisation size | Headcount | Certification fee |
|---|---|---|
| Micro | 0–9 staff | £320 + VAT |
| Small | 10–49 staff | £440 + VAT |
| Medium | 50–249 staff | £500 + VAT |
| Large | 250+ staff | £600 + VAT |
Fees are reviewed by IASME from time to time — always confirm the current price before you budget.
Certifying with SimpleCyber
£600–£750 + VAT
Your exact price depends on the size and complexity of your organisation. If you have 250 or more users, get in touch and we'll quote for your setup.
Every price includes unlimited support — we stay with you until you're certified.
- Unlimited support from an IASME-certified assessor while you complete your certification
- Help interpreting the question set and scoping your devices, cloud services and network
- A review of your answers before submission so avoidable failures are caught early
- A clear explanation of anything that needs fixing, in plain English
Common questions about Cyber Essentials pricing
How much does Cyber Essentials cost in the UK?
IASME sets the certification fee by organisation size: £320 + VAT for micro organisations (0–9 staff), £440 + VAT for small (10–49), £500 + VAT for medium (50–249) and £600 + VAT for large (250+). Assessment bodies may charge more where they include support.
How much does SimpleCyber charge?
SimpleCyber certification typically costs between £600 and £750 + VAT, depending on the size and complexity of your organisation. Every price includes unlimited support to help you get certified. If you have 250 or more users, contact us for a tailored quote.
Are there any hidden costs?
The certification fee is not the only cost to plan for. Closing gaps found during the assessment — replacing unsupported devices, adding multi-factor authentication or anti-malware — may have its own cost. Our self-assessment shows you those gaps before you pay for certification.
How long does certification last?
Cyber Essentials certification lasts 12 months, so the fee is an annual cost.
Prices on this page are a guide and exclude VAT. IASME fee bands are published by IASME and may change. This page is not an official IASME/NCSC price list.
See also: the Cyber Essentials checklist.