Check if you’d auto-fail

Priority 2 tool · 90, 60 & 30-day alerts

Never let your Cyber Essentials lapse

Cyber Essentials and Cyber Essentials Plus certificates last 12 months, and the NCSC updates the scheme rules every April. Enter your certification or expiry date below and we’ll calculate your renewal schedule and remind you at 90, 60 and 30 days before expiry — with a summary of what changed in the rules since you last certified.

Agreeing to the 90, 60 and 30-day reminders is the reminder service itself. If you would also like our April rule-changes briefing and occasional offers, tick the optional box below.

Why starting renewal 90 days before expiry matters

Renewing Cyber Essentials is not a rubber-stamp exercise: you pay the annual IASME fee again and answer whichever version of the question set is current on the day you renew. Because the NCSC updates the technical requirements each April, a configuration that passed 11 months ago can fail at renewal if a new rule (such as mandatory cloud MFA or an operating system reaching end of support) has come into force.

  • 90 days out: Check whether any laptops, servers, phones or routers have reached end of support over the past year, and review what changed in the scheme rules.
  • 60 days out: Audit your cloud services list and confirm MFA and 14-day patching are still holding across new starters’ devices.
  • 30 days out: Complete and submit the renewal assessment so it is marked and certified before your existing certificate expires.