April 28, 2026
Cyber Essentials v3.3: Review Your Evidence and Scope
A practical review for organisations using the Cyber Essentials requirements effective from 27 April 2026.
A new current version
The NCSC Cyber Essentials resources identify requirements version 3.3 as effective from 27 April 2026. Organisations should confirm which version applies before completing an assessment.
Refresh the technical picture
Review assets, cloud services, user access, unsupported software, firewall configuration and patch evidence. Make sure written answers match the systems in use.
Keep the control after certification
Assign owners and repeat checks through the year. Certification is most useful when its controls are embedded in normal operational processes.