Cyber Essentials Certification Support
Cyber Essentials, without the guesswork.
Cyber Essentials is the UK government's baseline cybersecurity standard. Clients ask for it, insurers price around it, and public sector contracts increasingly require it. For a business on Google Workspace, most of the technical work sits in settings you already pay for.
GetBulwark prepares your environment against all five controls and works through the self-assessment questionnaire with you, question by question. You hold the certificate. We make sure you earn it.
Book a 15-Minute Discovery Call →No preparation needed. No obligation to proceed.
The Five Controls
Five controls. All of them live in your Google Workspace.
Control 01
Firewalls and internet gateways
For a cloud-native business this means securing the boundary you actually have: your accounts, devices, and the services between your team and the internet, configured deliberately rather than left on defaults.
Control 02
Secure configuration
Google Workspace defaults are built for convenience, not security. Admin Console settings, sharing controls, and Chrome browser policies are reviewed and locked to a defensible standard.
Control 03
Security update management
Every managed device patched, silently and on time, through remote patch management. No relying on staff to click update when they get a moment.
Control 04
User access control
MFA enforced on every account. Admin roles reduced to the minimum. Leavers revoked, starters scoped correctly, and nobody holding access they no longer need.
Control 05
Malware protection
Endpoint protection on every managed device, with 24/7 human-led monitoring behind it, plus Gmail and Chrome protections configured to stop what tries to get through.
The Point
Every GetBulwark service maps to these
The Security Assessment measures you against all five. The hardening project closes the gaps. Managed Monthly keeps you aligned with a quarterly posture check as the standard evolves.
The Route to Certification
How certification actually works.
Map where you stand
A 15-minute discovery call, then a fixed-price Security Assessment against the five controls. You get a written, risk-rated picture of exactly what would pass today and what would not.
Close the gaps
A fixed-scope hardening project brings your environment to the standard: MFA enforced, configuration locked down, patching automated, access governed, malware protection deployed.
Complete the self-assessment together
Certification runs through the IASME Portal. You create your own account and remain the applicant throughout. GetBulwark works through the questionnaire with you, question by question, so every answer is accurate and evidenced.
Certify, and stay certified
You submit, and you pay the certification body fee directly. The certificate renews annually. For managed clients, the quarterly posture check keeps the environment aligned so renewal is routine rather than a scramble.
How GetBulwark works on certification, stated plainly.
You are always the applicant. You hold your own IASME Portal account, and the certificate is issued to your business. The certification body fee is paid by you, directly to them.
GetBulwark assists with the self-assessment but never holds sole control of your account and never submits on your behalf. The certificate means something because your business earned it and can stand behind every answer.
Find out how far from certified you are.
A 15-minute call maps your environment against the five controls. Most businesses are closer than they think. Some are further. Either way, you will know.