Cyber Essentials
Certification & assessment schemes · awarded by IASME on behalf of NCSC · serves: Cyber security consultants
- Notices demanding it
- 291
- a floor
- Said “must”
- 75
- explicit obligation
- Open right now
- 2
- Value gated
- £4.0bn
- a floor
Published values on the notices that demand it — a floor, not a total.
The demand curve
Notices demanding it per 10,000 published, by year — rate-normalised so corpus growth never masquerades as demand. Complete years only.
The pale bars are 2025 onward. The Procurement Act went live on 24 February 2025 and changed how notices are written, so the step across that date is partly a change in convention and not only a change in demand. We have not measured how much of it is which, so please do not read this as a trend.
The receipts
Notices that demand it, and the sentence each demand was found in. Nothing is counted here without one.
Red Kite Community Housing
Patching (as a minimum to Cyber Essentials Plus standards)
- Telephonymandatory
THE EXTRACARE CHARITABLE TRUST
The supplier shall hold ISO 27001 (preferred) or Cyber Essentials Plus certification at the time of bidding and maintain certification for the duration of the contract.
- Asset Management Systemmandatory
PROGRESS HOUSING GROUP LIMITED
The supplier must comply with recognised security standards such as Cyber Essentials.
- Modular Building Constructionmandatory
KBS Maritime Ltd
Bidders must have SC Clearance and Cyber Essentials Plus to proceed to Tender stage.
Natural History Museum
Any supplier would need to be certified to ISO27001 and Cyber Essentials Plus.
Driver and Vehicle Standards Agency
Cyber Security - ISO27001 and Cyber Essentials Plus where applicable (Must Have)
Scottish Prison Service
This Framework Agreement shall be made up of up to three competent Suppliers who shall be responsible for carrying out annual IT Health Checks (ITHC) to maintain accreditation to PSN(P) and also carry out Cyber Essentials+ (CE+) accreditation.
- Data Protection Officer as a Servicemandatory
The Police and Crime Commissioner for Humberside
We also require security certification at both ISO 27001 and Cyber Essentials Plus levels, and staff security clearance must conform to BS7858:2019.
National Galleries of Scotland
It is a requirement that the Supplier as a minimum, hold or commit to obtain prior to the award of contract, a valid Cyber Essentials Basic Certification (or equivalent) in place throughout the duration of the contract.
DRIVER & VEHICLE LICENSING AGENCY
The provider must demonstrate compliance with Cyber Essentials, a UK government-backed certification scheme developed by the National Cyber Security Centre (NCSC), which helps organisations protect against common internet-based cyber threats
Ministry of Defence
The Contractor shall be expected to hold the following levels of insurance £10m Public Liability, £10m Product Liability, £5m Professional Indemnity, and if successful, to maintain JOSCAR registration and Cyber Essentials certificate.
- Risk Management System Projectmandatory
Royal Berkshire Fire and Rescue Service
12.1 Security: Must comply with ISO 27001 and UK Cyber Essentials standards.
See it live
2 open tenders demand Cyber Essentials right now.
Browse the tenders →Tell us what you already hold and we will show you which of these notices you were already eligible for — and what one more certificate would open.
Get set up free →Method: Every count here is a floor. We match the text of the notice, and a notice description is a summary — most tender packs demand things it never mentions.“Said must” counts only explicit obligation language in the matched sentence itself; anything ambiguous is counted as a mention, never as mandatory. Trend compares rates per 10,000 notices per complete calendar year.