🇬🇧 UK NCSC — CYBER ESSENTIALS

Automate Cyber Essentials
compliance assessment

📜Official source: NCSC Cyber Essentials (UK)

SBCMSP maps 673 external and 200 internal security checks to all 5 Cyber Essentials technical controls. Generate audit evidence, compliance reports, and remediation roadmaps — ready for certification bodies.

Start Free Trial See All Frameworks
5 Technical Controls

Every control. Automated.

Cyber Essentials defines 5 technical control areas. SBCMSP checks every one — automatically, on every scan, with evidence captured for your certification body.

CONTROL 01
Firewalls
Verify boundary firewalls are in place and configured to block unauthenticated inbound traffic. SBCMSP checks for exposed services, open dangerous ports, and missing firewall protections.
PORT-001→025 NET-013 SVC-021 NET-018
CONTROL 02
Secure Configuration
Default credentials changed, unnecessary software removed, auto-run disabled. The SBCMSP Agent runs 200 checks across 14 modules covering Windows, Active Directory, encryption, patching, and applications.
WIN-021→050 REG-001→020 SVC-001→025
CONTROL 03
User Access Control
Accounts use least privilege, admin accounts are protected with MFA, and standard accounts are not granted admin rights unnecessarily.
USR-001→030 AD-023→052 M365-015→039
CONTROL 04
Malware Protection
Anti-malware solutions are installed, active, and up to date. SBCMSP verifies AV registration, real-time protection status, and definition age across all agent-monitored endpoints.
APP-012 APP-013 CVE-032 WIN-034
CONTROL 05
Patch Management
Operating systems and software are patched within 14 days of a security update. SBCMSP tracks OS EOL status, software versions, pending reboots, and Windows Update health.
CVE-020→050 CVE-040 CVE-041 WIN-042
Evidence Vault

Audit-ready evidence, automatically captured

Every scan generates timestamped compliance artifacts stored in the SBCMSP Evidence Vault — ready for Cyber Essentials assessors and certification bodies.

  • ✓Timestamped scan results for every check in every control area
  • ✓White-labeled PDF compliance report with CE framework mapping
  • ✓Remediation audit trail — who fixed what, and when
  • ✓Evidence export package (ZIP) for assessor submission
  • ✓Historical score trend showing compliance improvement over time
Cyber Essentials — Compliance Report
PASS
FrameworkCyber Essentials
Domainclient-domain.co.uk
Score84 / 100 — Grade B
Controls Passing4 of 5 (Firewalls, Config, UAC, Malware)
Open Findings3 (1 High, 2 Medium)
Evidence Captured247 artifacts
Scanned2 Jan 2026 · 09:14 UTC
Manual vs Automated

Stop doing this manually

😤 Manual Cyber Essentials Assessment
❌Spreadsheet checklists filled in manually per client
❌Screenshots and manual evidence collection taking days
❌No continuous monitoring — compliance drifts between assessments
❌Reassessment from scratch every 12 months
❌No remediation tracking — findings get lost in email
⚡ SBCMSP Automated Assessment
✅673 external + 200 internal checks run automatically daily across all 5 controls
✅Evidence captured automatically — timestamped, exportable
✅Continuous monitoring — know about drift before auditors do
✅Historical trend shows compliance improvement over time
✅Remediation tracking with SLA enforcement and assignees

UK government contracts require Cyber Essentials

All suppliers bidding for UK central government contracts involving sensitive data or systems must be Cyber Essentials certified. SBCMSP gives MSPs the automated tooling to prove it.

Start Free Trial