Cyber Essentials Plus
Certification & assessment schemes · awarded by IASME on behalf of NCSC · serves: Cyber security consultants
- Notices demanding it
- 130
- a floor
- Said “must”
- 23
- explicit obligation
- Open right now
- 0
- Value gated
- £2.5bn
- a floor
Published values on the notices that demand it — a floor, not a total.
The demand curve
Notices demanding it per 10,000 published, by year — rate-normalised so corpus growth never masquerades as demand. Complete years only.
The pale bars are 2025 onward. The Procurement Act went live on 24 February 2025 and changed how notices are written, so the step across that date is partly a change in convention and not only a change in demand. We have not measured how much of it is which, so please do not read this as a trend.
The receipts
Notices that demand it, and the sentence each demand was found in. Nothing is counted here without one.
- Telephonymandatory
THE EXTRACARE CHARITABLE TRUST
The supplier shall hold ISO 27001 (preferred) or Cyber Essentials Plus certification at the time of bidding and maintain certification for the duration of the contract.
- Modular Building Constructionmandatory
KBS Maritime Ltd
Bidders must have SC Clearance and Cyber Essentials Plus to proceed to Tender stage.
Natural History Museum
Any supplier would need to be certified to ISO27001 and Cyber Essentials Plus.
Driver and Vehicle Standards Agency
Cyber Security - ISO27001 and Cyber Essentials Plus where applicable (Must Have)
- Data Protection Officer as a Servicemandatory
The Police and Crime Commissioner for Humberside
We also require security certification at both ISO 27001 and Cyber Essentials Plus levels, and staff security clearance must conform to BS7858:2019.
- Firewall Support and Maintenancemandatory
THE UNIVERSITY OF CHICHESTER
The University is amongst the first of HEIs to achieve institution wide ISO27001, and also has Cyber Essentials and Cyber Essentials Plus Accreditation, where this is required (with additional security protocols) for Defence Contactor work.
- Leisure Management System - AWARDmandatory
University of Cumbria
The solution must be PCI DSS compliant, and the vendor must hold Cyber Essentials Plus accreditation or comparable certification.
- Welsh Examinations Databasemandatory
Llywodraeth Cymru / Welsh Government
(g) The contractor must possess a current Cyber Essentials Plus accreditation or equivalent for the full duration of the contract.
- Nacro Housing Systems projectmandatory
NACRO
All prospective suppliers must hold accreditation in either Cyber Essentials Plus or ISO27001.
AWE PLC
Furthermore, the supplier must be able to match or be willing and able to demonstrate the ability to match Cyber Essentials Plus by scheduled award date.
- GB-Edinburgh: Website Supportmandatory
Northern Lighthouse Board
Data Security - is an important part of this contract and Suppliers must hold either Cyber Essentials, Cyber Essentials Plus or ISO27001 certification, to be considered for this quotation.
- Enforcement Servicesmandatory
Crown Commercial Service
To participate in this procurement, bidders will be required to demonstrate that they are Cyber Essentials Plus certified for the services under and in connection with the procurement.
See it live
No open tenders demand it at this moment — the list updates continuously.
Browse the tenders →Tell us what you already hold and we will show you which of these notices you were already eligible for — and what one more certificate would open.
Get set up free →Method: Every count here is a floor. We match the text of the notice, and a notice description is a summary — most tender packs demand things it never mentions.“Said must” counts only explicit obligation language in the matched sentence itself; anything ambiguous is counted as a mention, never as mandatory. Trend compares rates per 10,000 notices per complete calendar year.