Free Cyber Essentials Readiness Checker | Enhance Security Today: Check Readiness

1. Organisation Context

Who you are, your size, and what you want to certify.

Organisation Name *

Type of Organisation

Total Employees (Inc. contractors)

Main Business Sector

Is this assessment for your whole organisation or a subset?

Whole Org Partial / Subset

Please describe the excluded networks/subsets (if any)

2. IT Asset Inventory

Tell us about your devices, cloud services, and remote workers.

Laptops / Desktops (Quantity) *

Primary OS Version *

Mobile Devices (Tablets / Phones) (Quantity & OS)

Servers / Hypervisors (Qty & OS)

Cloud Services in use (e.g., M365, AWS, Salesforce)

Number of Home / Remote Workers

3. Boundary Firewall Security

Your first line of defence against external threats. *All required

Do you have firewalls at your internet boundary?

Yes No

Are software firewalls enabled on all laptops/servers?

Yes No

Have you changed all default administrator passwords on firewalls/routers?

Yes No

How is your firewall admin password configured?

MFA + 8+ chars Block common + 8+ chars 12+ chars (no max) Other / None of the above

Are inbound firewall rules documented and reviewed annually?

Yes No

4. Endpoint Hardening & Malware

Device security settings and protection against malicious software. *All required

Have you removed/disabled unused software & services on devices?

Yes No

Is autorun/autoplay disabled (to prevent automatic file execution)?

Yes No

Are devices locked (password/PIN/biometric) when unattended?

Yes No

How are your desktops/laptops protected against malware?

Anti-virus (e.g., Defender) App Allow-listing (approved apps only) Both Anti-virus + Allow-listing None / Not sure

5. Vulnerability Management

Are you keeping systems patched against known exploits? *All required

Are all operating systems supported by the vendor (e.g., no end-of-life Windows 10 without ESU)?

Yes No (unsupported OS in use)

Are critical/high-risk OS & firmware updates applied within 14 days?

Yes No

Are critical application updates applied within 14 days?

Yes No

Are automatic updates enabled where possible?

Yes No (manual process)

If unsupported software is essential, is it isolated in a sub-set with no internet?

Yes No

6. Identity & Access Control

Who has access, and how do they prove who they are? *All required

Are accounts created with a formal approval process, and are leavers disabled promptly?

Yes No

Are standard (non-admin) accounts used for daily work (email/web)?

Yes No (we use admin daily)

Do you track which users have admin privileges?

Yes No

Is Multi-Factor Authentication (MFA) enforced for all cloud services that support it?

Yes No

How are passwords protected against brute-force?

MFA in use Throttling (max 10 guesses/5 mins) Account lockout after 10 attempts None of these

Your Readiness Summary

✅ Assessment Completed

We've analysed your responses. Fill in your details below to receive your full Security Posture Report.

Full Name *

Email Address *

Phone Number

Anything else you'd like us to know?

📩 What happens next?

We will review your posture and contact you to discuss certification.

Cyber Essentials Readiness Checker

Is your IT security compliant?

✅ Assessment Completed

DeboSecure Limited