March 2026: EBM has re-secured Cyber Essentials Plus, the highest level of the UK Government-backed Cyber Essentials scheme.
What is Cyber Essentials Plus?
Cyber Essentials is overseen by the National Cyber Security Centre (NCSC) and sets five technical controls that defend against the most common internet-based attacks: firewalls, secure configuration, user access control, malware protection and security update management.
The standard certificate is a verified self-assessment. Plus goes further. An independent assessor tests our systems hands-on. They scan our internet-facing services, sample our laptops and devices, and confirm critical patches are applied within 14 days. They check multi-factor authentication on our cloud services and verify that everyday accounts cannot perform administrator tasks. Any gap must be fixed before a certificate is issued.
Why it matters
The controls work. The NCSC reports that organisations with Cyber Essentials are 92% less likely to make a cyber insurance claim than those without. Certification is also required for many UK central government contracts that handle sensitive and personal information.
What it means for our clients
Our clients work across government, regulated and the private sector, where a supplier's weakness quickly becomes their risk. We help organisations build AI agents that are safe by design, and we hold ourselves to the same principle: control built in, independently checked, renewed every year.
Re-certification is not a one-off badge. It confirms that good security practice is part of how EBM runs, every day.