EduAudit is a certified Cyber Smart reseller. We prepare your school for the NCSC-backed Cyber Essentials scheme, handle the assessment, and get you certified — baseline or Plus.
Cyber Essentials isn't a tick-box exercise — it's a baseline of controls that protects your school's data. The difference with EduAudit: we are certified resellers who can prepare, evidence, and submit your certification for you. And our audit platform means we usually already have the evidence collected.
The five universal controls of the NCSC-backed scheme: firewalls, secure configuration, user access control, malware protection, and patch management.
Baseline certification
The same controls, independently tested. An accredited assessor verifies your protections — so your certificate genuinely holds up to scrutiny.
Independently tested
Using our audit platform, we check firewalls, configuration, access control, malware protection, and patching against the five Cyber Essentials themes.
Where controls fall short, we give you clear, prioritised fixes — most are configuration changes, not big spending. For Plus, we harden everything before testing begins.
As a Cyber Smart reseller we prepare and submit your assessment. You don't fight the paperwork — we do.
You receive your Cyber Essentials or Cyber Essentials Plus certificate, display it with confidence, and keep it refreshed year on year.
| Cyber Essentials | Cyber Essentials Plus | |
|---|---|---|
| Verification | Self-assessment | Independent testing |
| External test | — | Yes |
| Internal test | — | Yes |
| EduAudit reselling | Yes | Yes |
| Best for | Single schools | Academies & MATs |
Schools are increasingly expected to hold Cyber Essentials — by insurers, DfE guidance, and accreditation bodies. It's becoming the floor, not the ceiling.
The scheme's controls stop around 80% of common attacks — phishing, credential theft, and ransomware that routinely target schools.
A certificate is deliverable evidence for governors, parents, insurers, and inspectors that you take cyber security seriously.
A certified reseller is authorised to prepare, submit, and support a school's Cyber Essentials assessment on their behalf. EduAudit holds that status, so we handle the whole process for you.
No — but it helps. If you're starting from scratch we can certify from an assessment alone. If we've already audited your school, we usually have most of the evidence collected.
We remediate gaps before testing starts so you're in the strongest position to pass first time. If anything surfaces, we fix it and retest.
Not yet a legal requirement, but it is an increasingly embedded expectation. Many trusts, insurers, and accreditation frameworks reference it, and the DfE has signalled it expects schools to be moving this way.
