A cheaper route to cyber certification opens for small UK businesses
A government-backed discount lowers the entry cost. Founders still need to turn the assessment into everyday operating discipline.
The UK government has announced a 75% discount on new Cyber Essentials certification for eligible micro, small and medium-sized businesses. Its 3 November announcement says qualifying firms could pay between £80 and £125 plus VAT under the offer.
The First Step Fund targets eligible businesses that have not held certification in the previous four years. Support is first come, first served until March 2027 or until funding runs out. A separate programme offers funded certification and support to nominated suppliers in participating supply chains.
The operating question
Our analysis: a lower fee removes one reason to postpone security work, but it does not decide who owns that work inside the company. A useful starting point is assigning a named person to account access, device maintenance and the removal of permissions when somebody leaves.
Treat an assessment as a way to expose missing decisions. Can the team identify its business devices? Does somebody know which services hold customer information? Is there a process for reporting suspicious activity? Repeatable answers are more useful than a document prepared for one sales conversation.
A commercial conversation
For a small supplier, security questions can arrive during customer due diligence. Preparing accurate answers before that moment makes the discussion less disruptive. Certification can be one part of the evidence, alongside an honest explanation of the company’s actual operating controls.
Avoid promising more than the organisation can demonstrate. An assessment is not a guarantee that an incident cannot happen. Describe the scope of the work, who maintains it and how exceptions are handled. That makes the conversation more useful to both the buyer and the supplier.
Before applying
Check current eligibility and availability through the programme linked in the government announcement. Put the application alongside the work needed to meet the requirements, with an owner and an allocation of time. A reduced fee only delivers value when somebody follows through.
For a founder reviewing several operational priorities, the immediate task is small: establish the company’s current position and identify any gaps. Whether or not the business uses this offer, that inventory makes future decisions easier. The useful outcome is a maintained practice, rather than a completed application alone.