Cyber Essentials, supported all year, not just at renewal
Your Cyber Essentials certificate is renewed annually, but your business systems change throughout the year. Telappliant helps you prepare for certification, identify gaps, review security controls and stay organised for renewal - while your existing IT support arrangements continue to manage technical operations.
Clear responsibilities | Practical certification guidance | Works alongside existing IT support
Why monthly assurance
Your certificate is annual. Your IT environment changes every day.
New starters, leavers, devices, applications and cloud services can alter your security posture between assessments. Our managed service helps you identify important changes, track gaps and plan improvements before renewal becomes urgent.
Clearer certification steps.
Practical identification of control gaps.
Better documented evidence.
Less last-minute renewal effort.
Monthly Managed Assurance helps you understand and manage readiness. It does not confer certification, guarantee a pass or replace your responsibility for keeping applicable controls effective throughout the year. Cyber Essentials Plus is a separate independent technical assessment, not a Managed Assurance edition.
Keeping up with scheme requirements
Assessments use the scheme requirements applicable to your assessment. Scope, cloud access, supported software and security update deadlines all need attention. We help you prepare; an authorised Certification Body decides certification.
Choose the level of support that suits your business
From help with your annual assessment to more frequent assurance and CE Plus preparation. These are Telappliant advisory subscriptions, not levels of official certification. Technical patching remains with the contracted IT provider.
Monthly starting prices exclude VAT. Certification, independent audits, licences, additional technical management and remediation are quoted separately unless expressly included. Scope, contract and onboarding terms are confirmed in a written quotation.
Certify
From £99/month + VAT
Practical support with Cyber Essentials certification and renewal for small organisations.
Up to 10 users, 10 devices, one site and one tenant, one legal entity, subject to scope confirmation.
One initial remote readiness review
One basic gap and action report
Guidance for one self-assessment cycle per contract year
Review of draft questionnaire answers
Up to four scheduled light-touch advisory check-ins per 12 months
Annual renewal planning
High-level review of available information about existing update-management arrangements
Quarterly light-touch advisory check-in, not a structured technical control review.
Patching: Reviews your update arrangements; deployment stays with your IT provider. Who handles updates?
What's not included
Independent certification fees, hands-on remediation, continuous technical security monitoring, server or network firmware work unless separately contracted, and a guaranteed certification outcome.
Assure
From £199/month + VAT
SMEs wanting structured control and evidence reviews through the year.
Up to 50 users, 75 devices, 2 sites and one tenant, subject to scope confirmation.
Everything in Certify
Quarterly structured reviews of the five controls
Available identity and device posture evidence
Review of security update exceptions where evidence is supplied
Quarterly action/evidence register
Customer assurance summary
Quarterly structured five-control review.
Patching: Quarterly review of update evidence; deployment stays with your IT provider. Who handles updates?
What's not included
Independent certification and audit fees, licences, additional technical management and remediation unless expressly included in your written quotation.
Assure Plus
From £399/month + VAT
Higher-assurance organisations and those preparing for Cyber Essentials Plus.
Up to 150 users, 200 devices, 5 sites and one tenant, subject to scope confirmation.
Everything in Assure
Monthly structured control reviews
Enhanced exception tracking
Management-oriented reporting
Remediation owner/action follow-up
Review of vulnerability findings where existing tooling and agreed access permit
Cyber Essentials Plus readiness guidance
Monthly structured assurance review, not continuous security incident monitoring.
Patching: Monthly review of update evidence; deployment stays with your IT provider. Who handles updates?
What's not included
Independent Cyber Essentials Plus audit, licences, security incident monitoring or response, and technical remediation unless expressly contracted.
Custom
From £699/month + VAT
individually scoped
Larger, multi-site or technically complex estates, including multiple entities, tenants, servers and specialist systems.
Users, devices, sites, tenants and legal entities agreed individually.
Individually agreed review cadence
Defined evidence model and reporting requirements
Written technical boundaries and action ownership
Any specialist management work expressly scoped
Agreed individually in a written quotation and service schedule.
Patching: Patching included only where agreed in your written scope. Who handles updates?
What's not included
Anything not expressly included in the written quotation and service schedule.
Indicative limits govern subscription pricing, subject to Commercial and delivery approval. They do not narrow the full applicable Cyber Essentials assessment scope. A laptop and smartphone count as two separate devices.
Find your starting point
Which edition suits me?
An indicative suggestion, not a compliance test or binding quotation. We confirm assessment scope and any technical service needs with you.
What's included
Compare the editions
Capability
Certify
Assure
Assure Plus
Custom (scoped)
Initial readiness review
One remote review
Included
Included
Scoped
Questionnaire / renewal guidance
One self-assessment cycle per contract year
Included
Included
Scoped
Quarterly light-touch advisory check-in
Up to four per 12 months
Structured quarterly review
Structured monthly review
Scoped
Structured five-control review
Not standard
Quarterly
Monthly
Scoped
Evidence / action register
Basic gap and action report
Quarterly
Enhanced tracking
Scoped
Available patch evidence review
High-level arrangements review
Quarterly; evidence supplied
Monthly; evidence supplied
Scoped
Vulnerability findings oversight
Not standard
Not standard
Where tooling and agreed access permit
Scoped
CE Plus readiness
Not standard
Optional add-on
Readiness guidance
Scoped
Independent certification / audit fees
Separate - see note 2
Separate - see note 2
Separate - see note 2
Separate - see note 2
Active patch deployment
Not included - see note 1
Not included - see note 1
Not included - see note 1
If scoped - see note 1
Manual remediation
Not included - see note 1
Not included - see note 1
Not included - see note 1
If scoped - see note 1
Certify - From £99/month + VAT
Initial readiness review
One remote review
Questionnaire / renewal guidance
One self-assessment cycle per contract year
Quarterly light-touch advisory check-in
Up to four per 12 months
Structured five-control review
Not standard
Evidence / action register
Basic gap and action report
Available patch evidence review
High-level arrangements review
Vulnerability findings oversight
Not standard
CE Plus readiness
Not standard
Independent certification / audit fees
Separate - see note 2
Active patch deployment
Not included - see note 1
Manual remediation
Not included - see note 1
Assure - From £199/month + VAT
Initial readiness review
Included
Questionnaire / renewal guidance
Included
Quarterly light-touch advisory check-in
Structured quarterly review
Structured five-control review
Quarterly
Evidence / action register
Quarterly
Available patch evidence review
Quarterly; evidence supplied
Vulnerability findings oversight
Not standard
CE Plus readiness
Optional add-on
Independent certification / audit fees
Separate - see note 2
Active patch deployment
Not included - see note 1
Manual remediation
Not included - see note 1
Assure Plus - From £399/month + VAT
Initial readiness review
Included
Questionnaire / renewal guidance
Included
Quarterly light-touch advisory check-in
Structured monthly review
Structured five-control review
Monthly
Evidence / action register
Enhanced tracking
Available patch evidence review
Monthly; evidence supplied
Vulnerability findings oversight
Where tooling and agreed access permit
CE Plus readiness
Readiness guidance
Independent certification / audit fees
Separate - see note 2
Active patch deployment
Not included - see note 1
Manual remediation
Not included - see note 1
Custom - From £699/month + VAT
Initial readiness review
Scoped
Questionnaire / renewal guidance
Scoped
Quarterly light-touch advisory check-in
Scoped
Structured five-control review
Scoped
Evidence / action register
Scoped
Available patch evidence review
Scoped
Vulnerability findings oversight
Scoped
CE Plus readiness
Scoped
Independent certification / audit fees
Separate - see note 2
Active patch deployment
If scoped - see note 1
Manual remediation
If scoped - see note 1
Patch deployment and fixing failed updates are delivered by your IT support provider or a separately agreed service, or under Custom where expressly scoped. Existing Telappliant Managed IT customers keep patching under their current agreement with no duplicate charge.
Independent certification and audit fees are quoted separately unless expressly included in your written quotation.
Monthly starting prices exclude VAT. Certification, independent audits, licences, additional technical management and remediation are quoted separately unless expressly included. Scope, contract and onboarding terms are confirmed in a written quotation.
Clear operational ownership
Who manages your updates?
Already using Telappliant Managed IT Support?
Where your existing IT Support agreement includes automated security updates, Telappliant continues to manage the supported devices and software covered by that contract. Your Managed Assurance subscription adds certification guidance and review of control evidence. We will not charge again for patching that is already included in your existing agreement.
Technical coverage, management responsibilities, available updates and manual remediation depend on the relevant IT Support agreement and managed-device inventory.
Your IT is managed by another provider
You can still use Telappliant Managed Assurance. Your IT provider remains responsible for deploying security updates, monitoring failures and resolving technical issues under your existing arrangement. Telappliant helps you review available evidence and identify apparent gaps for Cyber Essentials readiness.
Your organisation manages IT internally
Your internal team is responsible for operating suitable security update processes and tools, maintaining supported software and addressing patch failures. We can advise on what evidence and controls are needed for Cyber Essentials and flag areas needing attention.
Telappliant cannot undertake patch deployment on systems we are not contracted and authorised to manage. Certify does not independently transfer technical management responsibility for the customer's IT environment.
Which updates are covered?
Routine covered endpoint operating-system security updates are managed by whoever holds the relevant technical support agreement, on supported and enrolled devices.
Supported mainstream business application updates are managed only if the agreed software catalogue and support agreement cover them.
Unsupported or bespoke applications, servers, routers, firewalls, switches and specialist firmware require separate technical coverage or customer/provider action.
Offline devices, failed updates and incompatible software may require manual intervention. Engineering charges depend on the technical support agreement.
The 14-day deadline applies to security updates - not to customer review meetings.
Cyber Essentials requires applicable high-risk, critical and other specified security fixes to be installed within the scheme's required timescales, including the relevant 14-day deadline. Automated updates can help, but exceptions still need attention. Regular Managed Assurance meetings are separate from technical update deployment and do not remove your responsibility for meeting the certification requirements.
We first check what your existing support agreement covers. Recurring management, one-off remediation and external audit fees are distinct and confirmed in your quotation.
Managed endpoint security updates
A separately scoped service for organisations without appropriate technical cover, using approved automated patch-management tools on supported devices.
Supported business application patching
Agreed software coverage, including extensions beyond a standard supported catalogue. This may already be covered by your existing IT support agreement.
Managed server updates
Separately contracted server coverage and scheduled change windows.
Network firmware review and maintenance
Maintenance under separately contracted managed network services.
Vulnerability assessment
Assessment, prioritisation and remediation tracking within an agreed scope.
Security configuration and identity hardening
Separately scoped improvement projects, with agreed actions and owners.
Cyber Essentials Plus readiness and audit coordination
Preparation and coordination for the independent technical assessment. External audit fees remain separate unless expressly included.
Security incident monitoring or response
Only where sold under a suitable separate service, with defined coverage and responsibilities.
Practical security controls built around your existing IT
Appropriately licensed business security services can provide a helpful foundation for identity, managed devices and general business security. Equivalent technical management environments can be reviewed within the agreed scope. No particular licence is required for Cyber Essentials, and a licence alone does not confer compliance.
