Small and medium-sized businesses in the UK can get Cyber Essentials certification at a 75% discount from Tuesday 3 November. The government has set aside £2.4m for the discounts, allocated on a first come, first served basis.
How the scheme works
The new Cyber Essentials First Step Fund, announced by the UK government, is open to UK micro, small and medium-sized businesses that have not been certified in the past four years. After the discount, certification will cost between £80 and £125 plus VAT. Applications are made at firststep.iasme.co.uk. The fund runs until March 2027 or until the money runs out. The government estimates about 6,000 businesses could benefit.
A second scheme – a grant for suppliers worth up to £7m and running until March 2029 – offers fully funded certification and an adviser. Firms cannot apply directly: they must be nominated by a large customer that has signed the government’s Cyber Resilience Pledge. More than 230 organisations have signed.
What certification gives you
Cyber Essentials is the government’s minimum standard for protection against internet-based attacks, developed by the National Cyber Security Centre (NCSC). It covers five basic technical controls. Certified organisations with turnover under £20m receive cyber liability insurance of up to £25,000.
Cyber security minister Liz Lloyd said small businesses are particularly vulnerable as threats rise. The Evening Standard points to recent attacks, including the theft from the Binance exchange and last year’s attack on Jaguar Land Rover, which halted production for several weeks.
What it means for Polish businesses in the UK
Thesis: for a small Polish business in the UK – in construction, transport, accounting or e-commerce – this is a cheap way to improve security and win contracts.
Evidence:
- Contracts: Pledge signatories commit to a risk-based approach to requiring Cyber Essentials in their supply chains. Subcontractors to large firms may soon be asked for a certificate.
- Cost: £80–£125 plus VAT is small compared with the up to £25,000 of insurance that comes with certification for firms with turnover under £20m.
- Risk: the government says a significant attack could cost a business around £195,000 on average. This is an indicative estimate based mainly on US data, as the release itself notes.
In practice: check whether your business has been certified in the past four years (if so, the discount does not apply). Before applying, list the computers, phones and software the business uses. Funding is limited, so delay may mean the money runs out.
Sources:
We assess factual corrections and substantive responses. Verified changes are reflected in our reporting.
Contact the editorial desk →
