Cybersecurity is no longer just an IT concern — it’s a business requirement.
With increasing pressure from clients, insurers and regulators, many UK organisations are now being asked to meet the standards set by Cyber Essentials.
But one of the most common questions businesses ask is:
“Would we actually pass Cyber Essentials?”
The good news is that you don’t need to guess.
This simple checklist will help you quickly assess whether your business is aligned with the key requirements of Cyber Essentials — and highlight any gaps that may need attention.
What Is Cyber Essentials?
Cyber Essentials is a UK government-backed scheme, supported by the National Cyber Security Centre, designed to help organisations protect themselves against the most common cyber threats.
It focuses on five key areas:
- Firewalls
- Secure configuration
- User access control
- Malware protection
- Security update management
This checklist is based on those core principles.
✅ Cyber Essentials Checklist
1. Firewalls & Internet Security
- Do you have a firewall protecting your network?
- Are default passwords on routers and firewalls changed?
- Is remote access to your network secured (e.g. VPN or similar)?
- Are unnecessary ports and services disabled?
👉 If you’re unsure, your network may be exposed to external threats.
2. Secure Configuration
- Are all devices configured securely (not using default settings)?
- Have unnecessary applications or services been removed?
- Are users prevented from installing unauthorised software?
- Are systems set up according to best practices?
👉 Many cyber attacks succeed because systems are left in default or insecure configurations.
3. User Access Control
- Do users only have access to what they need for their role?
- Are administrator accounts limited and controlled?
- Is multi-factor authentication (MFA) enabled for key systems?
- Are unused accounts removed promptly?
👉 Poor access control is one of the most common security risks.
4. Malware Protection
- Is antivirus or endpoint protection installed on all devices?
- Are systems protected against phishing and malicious emails?
- Are updates to security software automatic?
- Are users trained to recognise suspicious activity?
👉 Technology alone isn’t enough — user awareness plays a key role.
5. Security Updates & Patch Management
- Are operating systems kept up to date?
- Are security patches applied promptly?
- Are unsupported systems (e.g. old Windows versions) still in use?
- Is there a process for managing updates across all devices?
👉 Unpatched systems are one of the easiest ways for attackers to gain access.
6. Microsoft 365 & Cloud Security
Most businesses rely heavily on Microsoft 365, which must be properly secured.
- Is MFA enabled for all users?
- Are admin accounts protected with additional controls?
- Are data sharing and access permissions configured correctly?
- Are email security features enabled?
👉 Misconfigured cloud systems are a major source of risk.
7. Devices & Remote Working
- Are all company devices managed and monitored?
- Are personal (BYOD) devices controlled or restricted?
- Are remote workers connecting securely?
- Are mobile devices protected with security policies?
👉 Modern working introduces new risks if not properly managed.
🚨 What Your Results Mean
If you answered:
- ✅ “Yes” to most questions — your business is likely in a strong position
- ⚠️ “Not sure” to several — there may be gaps worth reviewing
- ❌ “No” to multiple areas — your business may not meet Cyber Essentials requirements
These gaps don’t just affect certification — they increase your exposure to cyber threats.
Why This Matters for Your Business
Failing to meet Cyber Essentials standards can lead to:
- Increased risk of cyber attacks
- Difficulty obtaining cyber insurance
- Lost opportunities for contracts
- Reduced trust from customers and partners
On the other hand, aligning with these standards improves both security and credibility.
How Indigo Unified Communications Can Help
At Indigo Unified Communications, we help businesses take a clear and practical approach to Cyber Essentials.
We don’t just focus on passing an assessment — we focus on making sure your IT environment is genuinely secure.
We support businesses with:
- Identifying gaps against Cyber Essentials requirements
- Securing devices, users and cloud platforms
- Configuring Microsoft 365 correctly
- Providing ongoing IT and security support
Our approach is straightforward, with a focus on real-world protection rather than unnecessary complexity.
Final Thoughts
Cyber Essentials doesn’t have to be complicated — but it does require the right foundations.
This checklist is a useful starting point, but if you’re unsure about any areas, it’s worth getting a clearer picture of your current setup.