Skip to main content
UK Cyber Essentials2026 question set

Prepare Cyber Essentials yourself, without the consultant price tag.

RightCyber walks you through the 2026 question set in plain English — scope, answers, evidence, and gaps — in a local-first desktop Evidence Builder that keeps everything on your machine. Next year you renew from this year's work instead of a blank page.

£149

First year, then £50/yr

£500+

Typical consultant fee

106

Questions covered

25

Guided missions

The RightCyber Builder overview showing readiness, open gaps, and next actions for a fictional company

Local-first trust

The website guides. The Builder stores.

Answers and evidence stay in your local workspace. The hosted site handles access, checkout, updates, and mission progress; it is not an evidence vault and it does not ask for private files.

Read the trust model

Website

Guides and gates

Account access, subscription state, operational logs, and lightweight mission progress.

Desktop Builder

Stores the work

Answers, evidence notes, attached files, screenshots, gaps, exports, and backups stay local.

Official portal

You submit

You choose what to send to your certification body; RightCyber does not decide the outcome.

Inside the Builder

The surfaces you will actually work in.

These panels are live re-creations of the Builder's real screens, using the demo workspace's fictional company. The screenshots further down are unedited captures of the same product.

Questions

Answer once, keep the evidence attached

Every question carries its answer, evidence notes, and status together — so next year starts from a real position.

A4.1

Boundary firewall coverage

Ready
Yes
No

[Evidence Snapshot NF-LAPTOP-01] Firewall profiles: domain, private, public - all enabled

Evidence note linkedSaved locally

Evidence Snapshot

Device facts, collected locally

Snapshot artefacts record update age, firewall state, and account posture per device — integrity-hashed and readable offline.

NF-LAPTOP-01Updated 3 days ago · Firewall on
NF-WORKSHOP-0142 days since last update
Snapshot integrity verified1 of 2 needs attention

Renewal Import

Last year's answers, mapped forward

Import last year's answers and the Builder maps them onto this year's question set — carrying unchanged answers, renumbering moved ones, and flagging real requirement changes for review.

A2.7A2.4Renumbered - answer carried
A3.2Requirement changed - review

62 answers carried unchanged in substance; nothing enters your workspace without a confirmation tick.

Tender Outputs

Documents buyers can verify

Generate tender-facing documents from the workspace, with certificate details a buyer can check on the official register.

Tender Security Pack

DOCX · HTML · MD
DEMO-CE-000000verifiable on the official register

States your preparation position as it is - never an assessment outcome.

Product proof

See the Builder before you buy.

Inspect the desktop Builder, the evidence workflow, and the export model before checkout. The website only tracks mission progress — everything you put into the Builder stays on your device.

Real Builder screens

Every screenshot is an unedited product screen from the demo Builder's fictional company — not a mockup.

Sample Evidence Pack outline

Shows how answers, evidence notes, actions, and final review material fit together.

No evidence upload

Evidence files stay on your machine. You never upload them to us, and we could not read them if you did not choose to share them.

Try it in two minutes

Download the demo Builder — no signup, no sales call.

The demo opens a fictional 12-person company, Norton & Frey Ltd, mid-way through preparation: answered questions, open gaps, device snapshots, and tender documents you can generate yourself. Everything runs locally and nothing leaves your machine. Buying unlocks your own workspace in the full Builder.

The Questions workbench showing grouped questions and guidance for a fictional company

Sample Evidence Pack outline

  • Question references mapped to answer notes.
  • Evidence file locations and owner actions.
  • Final review checks before the responsible-person declaration.
See the full product tour

Workspace contents

What you get.

The product is deliberately narrow: written guidance, a local Evidence Builder, template assets, and clear boundaries.

Guidance

25 guided missions

A single working route from Builder setup through scope, evidence, controls, gap closure, and local Evidence Pack review.

Core tool

Evidence Builder

Local desktop workspace mapped to A1–A8 with answer notes, attached evidence, action tracking, and checklist.

Assets

Template packs

Internal policy and SOP templates, plus Consultant deliverables on the higher licence.

Boundary

Preparation only

No certifying-body role, no guarantee, no managed remediation, no cloud evidence storage.

How it works

From first review to a submission-ready Evidence Pack.

  1. 01

    Understand the scheme

    Learn how the assessment works, what causes delays, and where Cyber Essentials Basic differs from Plus.

  2. 02

    Build the applicant profile

    Resolve legal entity, addresses, renewal status, insurance questions, and reason for applying.

  3. 03

    Define scope and inventory

    Map sites, networks, devices, cloud services, BYOD, and outsourced IT responsibilities.

  4. 04

    Evidence the five controls

    Work through firewalls, secure configuration, access control, malware protection, and security updates.

  5. 05

    Review the submission pack

    Use the final mission and Evidence Builder to close gaps and check answer consistency.

Latest Cyber Essentials updates

Current public guidance before you buy.

Start with the public changes, costs, and failure points. The customer area keeps the step-by-step mission route separate from local Builder work.

Cyber Essentials Tender Requirements: What PPN 014 Means for Your Bid

Government buyers must require Cyber Essentials on in-scope contracts under PPN 014, with evidence before contract award. This article explains the rule, the register buyers use to verify certificates, and how to keep the security section of every bid answerable from your own records.

Updated 2 Jul 2026

Independent preparation

Do the preparation once, properly. Renew from it every year.

Annual access to the guided missions, the desktop Builder, and the templates is £149 for the first year, then £50/year while you stay subscribed.

RightCyber provides independent Cyber Essentials preparation support. It is not affiliated with, endorsed by, or operated by NCSC or IASME.