Am I Ready for Cyber Essentials? Try Our Free Self-Assessment First
28 August 2026
Most businesses that fail their Cyber Essentials assessment don't fail because their security is bad — they fail because nobody checked the detail before applying. A firewall rule left too open. An old admin account that never got removed. A patch that's four weeks overdue instead of two. Small things, but Cyber Essentials marks on them strictly, and a failed first attempt costs you time, a re-assessment fee, and momentum.
So we built a way to check before you apply, not after: the SimpleCyber Self-Assessment — a free, guided tool that walks you through the same five control areas an assessor will actually test.
What it does
The tool takes 20–40 minutes and covers:
- Firewalls and internet gateways
- Secure configuration
- Security update management (patching)
- User access control
- Malware protection
You answer in plain English — no jargon, no assumption you already know the standard inside out — and at the end you get a report showing what's solid and what needs sorting before you submit anything to a certification body. Sessions are anonymous and you can pause and resume, so you can go and check a setting on your firewall or ask your IT provider a question mid-way through without losing your progress.
There's a second pathway too, for anyone working toward Defence Cyber Certification (DCC) Level 0 — same format, mapped to the DCC control set instead.
Why we're giving it away
Because the alternative — finding out you're not ready when an assessor tells you — is expensive and avoidable. We'd rather you walk into a Cyber Essentials assessment already knowing where you stand. If the self-assessment turns up gaps, that's useful information either way: fix them yourself, or come to us and we'll help you close them before the formal assessment starts.
Try it
Start the free Self-Assessment →
If you'd rather talk it through first, or want a second opinion on your results, get in touch — we're based in Wigan and work with businesses across Lancashire and the North West.
Andy Amos is the founder of SimpleCyber, an IASME-certified Cyber Essentials assessment body. He holds OSCP, CRISC and CISM certifications and is a qualified CE, CE+ and DCC Assessor.
FAQ
Is the self-assessment the same as the official Cyber Essentials assessment? No. It's a free self-assessment tool that mirrors the same five control areas, so you can see where you stand before applying. It doesn't replace, and can't substitute for, the formal certification process with an accredited assessment body.
How long does it take? Around 20–40 minutes, depending on how much of the detail you already have to hand.
Do I need to give any personal details to use it? No — sessions are anonymous, and you can save your place and come back to it.
What happens after I finish? You get a report showing which of the five control areas are solid and which need attention before you apply for Cyber Essentials or DCC Level 0.