Cyber Essentials Certification Application Service
Guided Cyber Essentials application support for law firms
RACO assists law firms with applications for Cyber Essentials certification, a UK Government-backed scheme designed to help organisations establish a security baseline against common online threats, including malware and phishing.
Our service provides hands-on guidance throughout the application process, from initial discovery and infrastructure review through to questionnaire completion, submission and post-submission follow-up.
We help your firm identify where current systems may fall short, make recommendations before submission, and manage the work required to support a successful certification application.
Enquire Now
View Brochure
Benefits of Cyber Essentials Certification
Cyber Essentials certification can help your firm:
- Gain confidence that it is protected against common online threats
- Meet key regulatory expectations, including GDPR and the Data Protection Act 2018
- Build customer trust by demonstrating that cybersecurity is taken seriously
- Access government and public-sector contracts where certification may be mandatory
- Build a foundation for a stronger cybersecurity strategy
Why Cyber Essentials Matters
Cyberattacks are an increasing risk for law firms of all sizes. Law firms hold sensitive client data and may also handle client money, making them a target for cyber criminals.
Cyber Essentials helps firms protect against common internet-based threats and demonstrate that cybersecurity is taken seriously. It is the minimum recognised cybersecurity standard recommended by the UK Government and was developed by experts at the National Cyber Security Centre.
Enquire Today
Download the Full Service Brochure
For more information and costings
What is included?
RACO guides your firm through the Cyber Essentials application process, including:
Discovery
Consulting with your firm and collating the information required to complete the application.
Guidance
Advising where your firm may fall short and making recommendations to resolve issues before the application is submitted.
Completion and Submission
Completing the application form and submitting it using the self-led route, including selecting a Cyber Advisor.
Engagement
Liaising with the Cyber Advisor to answer questions that may arise.
Certification Finalisation
Supporting the final steps required to complete certification.
The Five Key Technical Controls
To achieve Cyber Essentials certification, firms must address the required technical controls:
Firewalls and secure configuration
Device unlocking method
Security update management, including software updates
Password-based authentication
Malware protection
How the Application Process Works
1. Discovery Call & Infrastructure Review
We review your firm’s IT infrastructure and cybersecurity arrangements, including networks, Wi-Fi, BYOD controls, hardware and software controls, firewall controls, access permissions, endpoint security, malware protection and patch management.
2. Self-Assessment Questionnaire Support
We use the information gathered to complete the Self-Assessment Questionnaire on your behalf, clarifying technical terminology and ensuring responses are completed accurately. A Cyber Security Policy tailored to your firm is also provided.
3. Certification Submission
Once the information is complete, we submit the certification request on your behalf.
4. Follow Up
If follow-up is required after assessor review, this will take place within two days of receiving the feedback report.
Pricing
The service is offered at a fixed price of £2,000 + VAT.
If additional work is required beyond the stated scope, this will be notified at the discovery phase.
Latest Insights
Money Mules: The FCA Says Closing Suspicious Accounts Isn’t Enough
238,000 Suspected Mule Accounts Closed, and It Is Still Not Working In a recent update, the Financial Conduct Authority (FCA) published findings of its latest multi-firm review on money mules. The initial figures seem impressive: regulated firms closed 238,000 suspected mule accounts in 2025, up from 184,935 in 2023 and…
FCA Warning to Senior Managers: Fitness and Propriety Can Follow You Across Sectors
Understanding Your Obligations – It Is Not Just About Regulatory Breaches Two recent actions by the Financial Conduct Authority (FCA), taken weeks apart, make the same point from very different angles. In the first case, a former law firm owner has been banned from financial services after misappropriating more than…
RACO Compliance Roundup: October 2026
Welcome to the Latest Roundup September proved to be one of the busiest months for regulatory news in recent memory. The SRA has paused the COLP and COFA separation, published a formal warning notice on AI misuse, and updated its Sectoral Risk Assessment. The Budget is approaching with two proposals…
SRA Pauses COLP and COFA Separation: What This Means for Firms
SRA Confirms Pause on COLP and COFA Separation Rules On 30 September, the Solicitors Regulation Authority (SRA) confirmed it is pausing implementation of the COLP and COFA separation rules, which were due to take effect from January 2027. The plans were attracting growing criticism for the regulator’s proposal to prevent…
Client Account Interest and the Upcoming Budget: What Firms Should Be Aware Of
Two Proposals Firms Need to Watch On 28 October 2026, Chancellor of the Exchequer John Healey will deliver the Autumn budget, and with that date fast approaching, two proposals affecting law firms’ finances are in circulation, and both could have a material impact on how firms manage their income. The…
Complaints as a Risk Signal: What Your Complaints Data Tells the SRA, and Your Firm
Gaining Vital Insights from Client Complaints We have previously written about the regulatory focus on complaints handling, first on the Legal Ombudsman’s proposed reforms and then on the SRA’s supplementary consultation on first-tier complaints. Both articles focused on what the rules are changing and the heightened scrutiny on the way.…
The ICO Becomes the Information Commission on 30 September
What Law Firms Need to Know About ICO Governance Changes On 30 September 2026, the Information Commissioner’s Office will formally become the Information Commission. The change is made under the Data (Use and Access) Act 2025 and marks a shift from the current model, in which statutory powers rest…
High Court Rules SRA Cannot Compel Privileged Material: What Firms Need to Know
What Was the Recent Ruling Against the SRA? On 21 September 2026, the High Court handed down judgment in Carter-Ruck Solicitors & another v Solicitors Regulation Authority,. Mr Justice Butcher ruled that the SRA cannot use section 44B of the Solicitors Act 1974 to compel solicitors to produce documents or…
RACO Compliance Update – September 2026
Latest from RACO: What We’ve Published This Month It has been a busy few weeks for regulatory developments, and we have been covering them as they land on our news and insights page. Here is a summary of the most recent articles, each with a link to read the articles…
COLP and COFA Split: Growing Pushback from Smaller Firms, But Preparation Should Continue
What Has Happened Since Our Last Article When we published our practical guidance on the COLP and COFA changes in early September, the Legal Services Board (LSB) had just approved the new COLP and COFA changes and the SRA was preparing for phased implementation from January 2027. More recently, opposition…
Contact Our Team
To ask any questions about the Regulation and Compliance Office and how we can support your Law Firm, please call us on 0203 985 8550, complete the online enquiry form below, or email us info@regulationandcomplianceoffice.co.uk