How it works
Cyber Essentials asks you to prove five basic controls are in place. Kept turns that into a short, repeatable routine.
01
Scan
Add your cloud services — Microsoft 365, Google Workspace, accounting, payroll — and record whether multi-factor authentication is switched on. Kept scores you against the five controls and lists what needs attention.
02
Fix
Work through plain-English fixes in priority order. Your patching policy, access-control policy and director's declaration are generated from your company details, so the paperwork is done as you go.
03
Evidence
Take a monthly snapshot of your register and policies. Each snapshot is dated and stored in the Evidence Vault, and renewal reminders tell you when your assessment is due.
The five controls we cover
- Firewalls and internet gateways
- Secure configuration
- Security update management (patching)
- User access control
- Malware protection