What usually blocks assessment
The practical blockers are unclear scope, unmanaged or unsupported devices, update evidence that cannot be reproduced, weak access control, missing malware protection and proof with no named owner.
Cyber Essentials Plus readiness sprintCyber Essentials Plus readiness
Find Cyber Essentials Plus blockers before assessment week
Find assessment blockers across scope, endpoints, updates, access and malware protection, then leave with an evidence tracker and ordered remediation plan. £2,500 to £5,000; usually 2 to 3 weeks.
Scope, output and handover
Confirm the assessment boundary, review the five technical control themes across the agreed Microsoft 365 and endpoint scope, rank remediation, and leave an evidence list, tracker and internal handover notes.
Common questions
Can you certify Cyber Essentials Plus?
No. Readiness and remediation only — certification stays with an authorised Certification Body.
What does the sprint cost and take?
The fixed-scope readiness sprint is £2,500 to £5,000 and usually takes 2 to 3 weeks, depending on access, device scope and change approval.