Cyber Essentials Certification Application Service
Guided Cyber Essentials application support for businesses
RACO assists businesses with applications for Cyber Essentials certification, a UK Government-backed scheme designed to help organisations establish a security baseline against common online threats, including malware and phishing.
Our service provides practical support throughout the application process, from initial discovery and infrastructure review through to questionnaire completion, submission and post-submission follow-up.
We help businesses identify where current systems may fall short, make recommendations before submission, and manage the work required to support a successful certification application.
Enquire Now
View Brochure
Benefits of Cyber Essentials Certification
Cyber Essentials certification can help your organisation:
- Gain confidence that it is protected against common online threats
- Meet key regulatory expectations, including GDPR and the Data Protection Act 2018
- Build customer trust by demonstrating that cybersecurity is taken seriously
- Access government and public-sector contracts where certification may be mandatory
- Build a foundation for a stronger cybersecurity strategy
Why Cyber Essentials Matters
Cyberattacks are an increasing risk for organisations of all sizes. From data loss and operational disruption to reputational damage and regulatory scrutiny, cyber threats are now a significant business risk.
Cyber Essentials helps organisations protect against common internet-based threats and demonstrate that cybersecurity is taken seriously. It is the minimum recognised cybersecurity standard recommended by the UK Government and was developed by experts at the National Cyber Security Centre (NCSC).
Enquire Today
Download the Full Service Brochure
For more information and costings
What is included?
RACO guides your firm through the Cyber Essentials application process, including:
Discovery
Consulting with your business and collating the information required to complete the application.
Guidance
Advising where your organisation may fall short and making recommendations to resolve issues before the application is submitted.
Completion and Submission
Completing the application form and submitting it using the self-led route, including selecting a Cyber Advisor.
Engagement
Liaising with the Cyber Advisor to answer questions that may arise.
Certification Finalisation
Supporting the final steps required to complete certification.
The Five Key Technical Controls
To achieve Cyber Essentials certification, organisations must address the required technical controls:
Firewalls and secure configuration
Device unlocking method
Security update management, including software updates
Password-based authentication
Malware protection
How the Application Process Works
1. Discovery Call & Infrastructure Review
We review your organisation’s IT infrastructure and cybersecurity arrangements, including networks, Wi-Fi, BYOD controls, hardware and software controls, firewall controls, access permissions, endpoint security, malware protection and patch management.
2. Self-Assessment Questionnaire Support
We use the information gathered to complete the Self-Assessment Questionnaire on your behalf, clarifying technical terminology and ensuring responses are completed accurately. A Cyber Security Policy tailored to your organisation is also provided.
3. Certification Submission
Once the information is complete, we submit the certification request on your behalf.
4. Follow Up
If follow-up is required after assessor review, this will take place within two days of receiving the feedback report.
Pricing
The service is offered at a fixed price of £2,000 + VAT.
If additional work is required beyond the stated scope, this will be notified at the discovery phase.
Latest Insights
FCA Says 238,000 Mule Accounts Closed, and It Is Still Not Working
Money Mules: The FCA Says Closing Suspicious Accounts Isn’t Enough The Financial Conduct Authority (FCA) has recently published the findings of its latest multi-firm review on money mules, highlighting some initially impressive figures. Regulated firms closed 238,396 suspected mule accounts in 2025, up from 184,935 in 2023 and 233,269 in…
FCA Warning to Senior Managers: Fitness and Propriety Can Follow You Across Sectors
Understanding Your Obligations – It Is Not Just About Regulatory Breaches Two recent actions by the Financial Conduct Authority (FCA), taken weeks apart, make the same point from very different angles. In the first case, a former law firm owner has been banned from financial services after misappropriating more than…
ACSP Registration: Why Accountancy Firms Should Register Now, Whatever the Deadline
The Requirement Is Confirmed, the Date Is Not If your firm files information at Companies House on behalf of clients, you will need to be registered as an Authorised Corporate Service Provider (ACSP). However, while that requirement has been confirmed, the exact date it becomes mandatory has not, and Companies…
FCA Non-Financial Misconduct Rules Now in Force
What Regulated Firms Must Have in Place The FCA’s new rules and guidance on non-financial misconduct came into effect on 1 September 2026. If your firm operates under the Senior Managers and Certification Regime, these changes apply to you now. Non-financial misconduct (NFM) covers behaviour that is not of a…
When Your Buyer’s Deposit Comes from Crypto: What Estate Agents Need to Know
Crypto Is No Longer a Niche Risk in Property The 2025 National Risk Assessment states that property transactions appear in almost every money laundering typology and predicate offence, and the property sector overall is assessed as high risk. This is nothing new; estate agents sit at the front of that…
The £10,000 Cash Trigger: What the 2026 Threshold Change Means for HVDs and Art Market Participants
Cash Thresholds and AML Compliance Obligations for High-Value Dealers and Art Market Participants When we published our previous guide on the Money Laundering Regulations 2026 changes now in place, one of the amendments we flagged was the switch from euro-denominated thresholds to sterling. For high-value dealers and art market participants,…
Do You Need a Regulation 21 AML Audit? Most Regulated Businesses Do
There is often the misconception among regulated businesses that a Regulation 21 audit is something only large organisations need to worry about. Banks, large national corporations, and businesses with a dedicated compliance department. For smaller businesses, there is sometimes a myth that they are too small for these requirements to…
Preparing for an HMRC AML Inspection: An Audit-Ready Checklist for Accountants
HMRC Anti-Money Laundering Inspection An HMRC anti-money laundering inspection can feel daunting, particularly for an independent accountancy practice without a large compliance function. The good news is that HMRC inspections are rarely about catching out sophisticated criminals. They are about whether your paperwork holds together and whether what you do…
Source of Funds vs Source of Wealth: Where Estate and Letting Agents Are Still Getting It Wrong
In our recent article, Cash Buyers and Property Transactions: The Due Diligence Your Agency Needs to Be Doing, we looked at why funding routes that sit outside the mortgage system carry elevated money laundering risk. In follow-up, this guide focuses on the part of that process estate and letting agents…
AML Failures Catching Regulated Businesses Out – HMRC Penalties by Sector
In an earlier article, we highlighted how it is often the fundamentals, rather than complex laundering schemes, that bring regulated businesses to HMRC’s attention. Read that article here, ‘Recent AML Fines: Why Regulated Businesses Are Still Getting the Basics Wrong’. Recent HMRC Enforcement Data – Important lessons for Regulated Businesses…
Contact Our Team
To ask any questions about the Regulation and Compliance Office and how we can support your business, please call us on 0203 985 8550, complete the online enquiry form below, or email us info@regulationandcomplianceoffice.co.uk