Home / Certifications / IASME Cyber Assurance Level 1
IASME-assured Certification Body · NCSC-assured Cyber Advisor

IASME Cyber Assurance Level 1

Goes beyond Cyber Essentials to cover governance, risk management and data protection, giving customers a fuller picture of how you manage security.

Get certified from £395Book a free call
What's included

Everything you need to get certified

  • Assessment against the IASME Cyber Assurance Level 1 standard
  • A self-managed or assisted route, with CCS support to keep you on track
  • Certification from an IASME Certification Body

Who it's for

Organisations that want to show customers and partners more than the technical basics.

Good to know

  • Level 2 adds an independent audit. If you expect to need it, you can order Level 1 and Level 2 together on the Level 2 page.
About the certification

What is IASME Cyber Assurance?

IASME Cyber Assurance is a UK cyber security and data protection standard designed to be achievable for organisations of every size, from sole traders to large companies. It is widely used to give customers and supply chain partners confidence in how you manage cyber risk.

Level 1 is a verified self-assessment: you answer the questions online, a board member (or equivalent) signs to confirm they are accurate, and an independent assessor reviews and marks them. The questions are scaled to the size of your organisation.

Risk, policies and training

Risk assessment and management, practical policies and procedures, and staff awareness training.

Resilience

Data backup, business continuity planning and incident response, so you can keep operating when something goes wrong.

Suppliers and the law

Managing risk from third-party suppliers, and meeting legal requirements including UK GDPR and the Data Protection Act.

How it works

A straightforward route to certification

  1. Cyber Essentials

    You need a valid Cyber Essentials certificate covering your whole organisation. If you don't have one, we can certify you first.

  2. Answer the questions

    Complete the online assessment. With your information to hand, it can take around an hour.

  3. Sign-off and review

    A board member signs off your answers, and an independent assessor marks them, usually within a few days.

  4. Certificate

    Once you pass, you're certified. Level 1 is renewed each year, alongside Cyber Essentials.

Questions

IASME Cyber Assurance Level 1 FAQs

What's the difference between Level 1 and Level 2?
Level 1 is a verified self-assessment. Level 2 adds an independent audit.
Which service level should we choose?
Self-managed suits teams confident handling the requirements and evidence. Assisted gives you CCS support to avoid delays.
Do we need Cyber Essentials first?
Yes. You need a valid Cyber Essentials certificate covering the whole organisation, with at least a month left before it expires.
How long is the certificate valid?
Level 1 is renewed every year with a fresh verified self-assessment, and you need to keep Cyber Essentials current too.
What happens if something doesn't meet the standard?
The assessor tells you what needs to change. You then have a short window to fix it and resubmit.
Is it an alternative to ISO 27001?
It covers similar ground in a way that's proportionate for smaller organisations, and some sectors accept the audited Level 2 certification as an alternative to ISO 27001 for small companies.
Let's Talk Security

Not sure which certification you need?

Talk to one of our team, who will be happy to talk through your requirements.

IASME Cyber Assurance Level 2Cyber EssentialsBook a free call