Skip to content

Compliance · UK · NCSC baseline

Cyber Essentials Plus v3.2

The NCSC's hands-on certification baseline (current v3.2, April 2025) covering the core technical controls every UK organisation should have.

All frameworks

Who's in scope

UK organisations — often a procurement prerequisite for public-sector and enterprise contracts.

What it requires

  • Enforce the five core controls: firewalls, secure configuration, access control, malware protection and patch management.
  • Pass hands-on technical verification, not just self-assessment.
  • Keep controls current between assessments.

How TrustQuant helps

  • Continuous checks mapped to the five controls so you stay assessment-ready.
  • Drift alerts that flag a lapsed control before it fails an audit.
  • Clear, exportable evidence for your assessor.

This guide is for preparation only and is not legal advice. Confirm your specific obligations with qualified counsel.

Demonstrate CE+ v3.2 with verified evidence

Continuous, real-time posture evidence — mapped to the standards your buyers ask about.