--- title: Everyone Begins Cyber Essentials from a Different Starting Point description: We discussed that there are many reasons to undertake the Cyber Essentials certification. Yet we have noticed some resistance within a few organisations. image: https://blog.grantmcgregor.co.uk/hubfs/CE%20logo.png --- [![Grant McGregor](https://blog.grantmcgregor.co.uk/hubfs/GRMC_blue_logo.svg "Grant McGregor")](https://www.grantmcgregor.co.uk/) - [Home](https://grantmcgregor.co.uk/) - About Us - [Our Story](https://grantmcgregor.co.uk/about-us/our-story) - [Meet the Team](https://grantmcgregor.co.uk/about-us/meet-the-team) - [Certifications](https://grantmcgregor.co.uk/about-us/certifications) - [Careers](https://grantmcgregor.co.uk/about-us/careers) - IT Support Services - [IT Support Services](https://grantmcgregor.co.uk/it-support-services) - [People Centric Support](https://grantmcgregor.co.uk/it-support-services/people-centric-support) - [Enhanced Security Service](https://grantmcgregor.co.uk/it-support-services/enhanced-security-service) - Professional IT Services - [Professional IT Services](https://grantmcgregor.co.uk/professional-it-services) - [Microsoft 365](https://grantmcgregor.co.uk/professional-it-services/microsoft-365-business-premium) - [Microsoft Copilot](https://grantmcgregor.co.uk/professional-it-services/microsoft-365-copilot) - [AI Adoption Services](https://grantmcgregor.co.uk/ai-adoption-services) - [Microsoft Azure](https://grantmcgregor.co.uk/professional-it-services/microsoft-azure) - [MDR](https://blog.grantmcgregor.co.uk/mdr-vs-soc-cyber-security-defence) - [Microsoft Teams Phone](https://grantmcgregor.co.uk/professional-it-services/microsoft-teams-phone) - [KnowBe4](https://grantmcgregor.co.uk/professional-it-services/knowbe4) - [DMARC](https://grantmcgregor.co.uk/professional-it-services/dmarc) - [Enclave Networks](https://grantmcgregor.co.uk/professional-it-services/enclave-networks) - [Cyber Security](https://grantmcgregor.co.uk/cyber-security) - Knowledge Hub - [Case Studies](https://grantmcgregor.co.uk/knowledge-hub/case-studies) - [Testimonials](https://grantmcgregor.co.uk/knowledge-hub/success-stories) - [Blog](https://grantmcgregor.co.uk/knowledge-hub/blog) - [Podcast](https://grantmcgregor.co.uk/knowledge-hub/podcast) - [Client Area](https://grantmcgregor.co.uk/client-area) - [Contact us](https://grantmcgregor.co.uk/contact-us) - [Home](https://grantmcgregor.co.uk/) - About Us - [Our Story](https://grantmcgregor.co.uk/about-us/our-story) - [Meet the Team](https://grantmcgregor.co.uk/about-us/meet-the-team) - [Certifications](https://grantmcgregor.co.uk/about-us/certifications) - [Careers](https://grantmcgregor.co.uk/about-us/careers) - IT Support Services - [IT Support Services](https://grantmcgregor.co.uk/it-support-services) - [People Centric Support](https://grantmcgregor.co.uk/it-support-services/people-centric-support) - [Enhanced Security Service](https://grantmcgregor.co.uk/it-support-services/enhanced-security-service) - Professional IT Services - [Professional IT Services](https://grantmcgregor.co.uk/professional-it-services) - [Microsoft 365](https://grantmcgregor.co.uk/professional-it-services/microsoft-365-business-premium) - [Microsoft Copilot](https://grantmcgregor.co.uk/professional-it-services/microsoft-365-copilot) - [AI Adoption Services](https://grantmcgregor.co.uk/ai-adoption-services) - [Microsoft Azure](https://grantmcgregor.co.uk/professional-it-services/microsoft-azure) - [MDR](https://blog.grantmcgregor.co.uk/mdr-vs-soc-cyber-security-defence) - [Microsoft Teams Phone](https://grantmcgregor.co.uk/professional-it-services/microsoft-teams-phone) - [KnowBe4](https://grantmcgregor.co.uk/professional-it-services/knowbe4) - [DMARC](https://grantmcgregor.co.uk/professional-it-services/dmarc) - [Enclave Networks](https://grantmcgregor.co.uk/professional-it-services/enclave-networks) - [Cyber Security](https://grantmcgregor.co.uk/cyber-security) - Knowledge Hub - [Case Studies](https://grantmcgregor.co.uk/knowledge-hub/case-studies) - [Testimonials](https://grantmcgregor.co.uk/knowledge-hub/success-stories) - [Blog](https://grantmcgregor.co.uk/knowledge-hub/blog) - [Podcast](https://grantmcgregor.co.uk/knowledge-hub/podcast) - [Client Area](https://grantmcgregor.co.uk/client-area) - [Contact us](https://grantmcgregor.co.uk/contact-us) [Contact Us](https://grantmcgregor.co.uk/contact-us) [Back to main](https://grantmcgregor.co.uk/knowledge-hub/blog) Digital Transformation, Cyber Security # Everyone Begins Cyber Essentials from a Different Starting Point Grant McGregor Team 8 October 2018 • 4 min read ![](https://blog.grantmcgregor.co.uk/hubfs/CE%20logo.png) # Everyone begins their Cyber Essentials certification process from a different starting point – but that’s what makes the scheme so important. We discussed in a recent article that there are many reasons to undertake the UK Government’s Cyber Essentials certification: • Build trust • Increase credibility in eyes of new or potential clients • Demonstrate commitment to good cyber security principles • Gain access to tenders where PQQs require certification • Fulfil obligations under GDPR , and • Not least, to protect your business’ assets and reputation. #### Going for Cyber Essentials certification Many businesses agree: in the four years since the scheme launched, [more than 9,000 British businesses](https://www.cyberessentials.ncsc.gov.uk/2017/11/26/Future-of-Cyber-Essentials.html) have gained a Cyber Essentials certification. However, we have noticed some resistance within a few organisations when it comes to pursuing the certification. When we’ve dug down into why this is the case, we’ve heard comments to the effect of “it’s too basic for us” or “we’re already doing all the essentials”. In many cases we agree – we know the organisation has implemented good security processes. However, as a Cyber Essentials Certification Body we also know this isn’t the whole story: just because you have implemented good security processes, this doesn’t mean your organisation can’t benefit from following the certification process. For one thing, as we’ve noted, achieving the certification is a good way to demonstrate your organisation’s commitment to good cyber security principles and processes. This isn’t only important from a PR point of view; being able to demonstrate this may help to protect the organisation from some of the risk associated with GDPR or cyber vulnerabilities. Second, and perhaps more importantly, we’ve worked with organisations that have discovered some surprising gaps in their existing processes while pursuing the certification. #### A moveable feast Every IT Manager knows that cyber security is a movable feast; with new applications and devices being added to the environment, new employees joining and often leaving, exposing new vulnerabilities, and new threats emerging as old threats evolve on an almost daily basis. Worse, while good cyber security processes may well be documented, articulated and communicated around the business, how many IT Managers can honestly say they know these processes are being implemented all day, every day, by all staff? All these factors add up to a changing landscape of changing threats and changing vulnerabilities. It is also important to understand that everyone is starting from a different place. While some organisations might have excellent malware protection in place, they may not have considered the need to create a comprehensive asset register. And while some organisations might have created an asset register, it may be many months since it was last comprehensively updated. As a [Cyber Essentials Certification Body](https://www.grantmcgregor.co.uk/it-software-and-solutions/cyber-essentials/), we understand that organisations have very different starting points – and, therefore, need very different assistance. For some organisations, it might be as simple as a little guidance when completing the questionnaire and then acting as the assessing and certifying body. For others, more work may be required. #### Raising the security agenda internally Cyber Essentials brings all the different strands of cyber security together to ensure a comprehensive view of all the different moving IT security parts. As well as providing a comprehensive framework that covers all the essentials, going through the certification process is a good way to focus attention across the business on the issue of cyber security. We’ve found that the prospect of gaining a certification which has implications for the business in terms of reputation and risk management does help to focus minds that might otherwise turn off at the words “cyber security”. So, wherever you are starting from, the process of certification has much to offer.   To find out more, get your FREE Introduction to Cyber Essentials guide [here.](https://grantmcgregor.lpages.co/cyber-essentials-guide/) Or, for specific advice or help with your Cyber Essentials certification, contact Grant McGregor’s consultants today on 0808 164 4142. Grant McGregor Team 8 October 2018 • 4 min read ## Recent Posts ![](https://blog.grantmcgregor.co.uk/hubfs/Shadow%20AI%20-%20Is%20Your%20Business%20Ready%20for%20AI%20Adoption.png) ### Shadow AI: Is Your Business Ready for AI Adoption? Understand shadow AI's impact on your business. Discover how to assess risks, improve processes, and adopt AI securely w... [Read More](https://blog.grantmcgregor.co.uk/shadow-ai-is-your-business-ready-for-ai-adoption) ![Our Net Zero Target for 2040 - What Can We Change](https://blog.grantmcgregor.co.uk/hubfs/Our%20Net%20Zero%20Target%20for%202040%20-%20What%20Can%20We%20Change.png) ### Our Net Zero Target for 2040: What Can We Change? From company vehicles and travel to suppliers and technology, see how Grant McGregor is working towards its net zero tar... [Read More](https://blog.grantmcgregor.co.uk/our-net-zero-target-for-2040-what-can-we-change) ![](https://blog.grantmcgregor.co.uk/hubfs/What%20Is%20Penetration%20Testing%3F%20A%20Guide%20for%20Businesses.png) ### What Is Penetration Testing? A Guide for Businesses Learn what penetration testing is, how it works, what the report should include and when your business should consider a... [Read More](https://blog.grantmcgregor.co.uk/what-is-penetration-testing-a-guide-for-businesses) ![Grant McGregor named 2026 Top Managed Service Provider](https://blog.grantmcgregor.co.uk/hubfs/Social/MSP%20501%202026%20Winner.png) ### Grant McGregor Recognised as a Leading Global MSP in the 2026 MSP 501 Grant McGregor has been named a Top Global Managed Service Provider in the 2026 MSP 501, ranking #1 Scotland-based MSP a... [Read More](https://blog.grantmcgregor.co.uk/grant-mcgregor-recognised-as-a-leading-global-msp-in-the-2026-msp-501) Union ## Empower your business with secure, expert-led solutions. Talk to us about people-focused technology that drives results. [Start a conversation](https://grantmcgregor.co.uk/contact-us) ![](https://blog.grantmcgregor.co.uk/hubfs/Woman%20in%20White%20longsleeve%20polo.png) ![Divider Footer](https://blog.grantmcgregor.co.uk/hubfs/footer.svg) ![GrantMcGeregor Logo White](https://blog.grantmcgregor.co.uk/hubfs/McGregor%20Theme%20Assets/GRMC_white_logo-cropped.svg "GrantMcGeregor Logo White") Premium IT Services Tailored for Leading Brands [Follow us on LinkedIn](https://www.linkedin.com/company/grant-mcgregor-ltd/) [Follow us on Facebook](https://www.youtube.com/itgrantmcgregor) [Follow us on Facebook](https://www.facebook.com/grantmcgregorltd/) [Follow us on Twitter](https://x.com/GrantMcGregorIT) Quick Links - [Home](https://grantmcgregor.co.uk) - [About us](https://grantmcgregor.co.uk/about-us/our-story) - [Knowledge Hub](https://grantmcgregor.co.uk/knowledge-hub/blog) - [Contact us](https://grantmcgregor.co.uk/contact-us) Services - [People Centric Support](https://grantmcgregor.co.uk/it-support-services/people-centric-support) - [Enhanced Security Service](https://grantmcgregor.co.uk/it-support-services/enhanced-security-service) - [Professional IT Services](https://grantmcgregor.co.uk/professional-it-services) - [Cyber Security](https://grantmcgregor.co.uk/cyber-security) Edinburgh – Chesterfield ![Phone icon](https://blog.grantmcgregor.co.uk/hubfs/raw_assets/public/GrandMcGregor_climb/images/tel.png "Phone icon") [0131 603 7910](tel:+441316037910) ![Email icon](https://blog.grantmcgregor.co.uk/hubfs/raw_assets/public/GrandMcGregor_climb/images/mail.png "Email icon") [info@grantmcgregor.co.uk](mailto:info@grantmcgregor.co.uk) ![Location icon](https://blog.grantmcgregor.co.uk/hubfs/raw_assets/public/GrandMcGregor_climb/images/loc.png "Location icon") **Main Office:** The Merchants' Hall, 22 Hanover St, Edinburgh EH2 2EP © 2026 Grant McGregor. All rights reserved. [Privacy and Cookie Policy](https://blog.grantmcgregor.co.uk/hubfs/UsefulDownloads/Policies/GRMC-SEC-Privacy-and-Cookie-Policy.pdf) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Grant McGregor Team", "url" : "https://blog.grantmcgregor.co.uk/author/grmc-team" }, "dateModified" : "2020-10-28T11:21:07.924Z", "datePublished" : "2018-10-08T07:30:01.000Z", "headline" : "Everyone Begins Cyber Essentials from a Different Starting Point", "image" : [ "https://blog.grantmcgregor.co.uk/hubfs/CE%20logo.png" ], "mainEntityOfPage" : { "@id" : "https://blog.grantmcgregor.co.uk/2018/everyone-begins-cyber-essentials-from-a-different-starting-point", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.grantmcgregor.co.uk/hubfs/GRMC_blue_logo.svg" }, "name" : "Grant McGregor" } } ``` ```json { "@context" : "https://schema.org", "@id" : "https://grantmcgregor.co.uk/", "@type" : "LocalBusiness", "address" : { "@type" : "PostalAddress", "addressCountry" : "GB", "addressLocality" : "Edinburgh", "postalCode" : "EH2 2EP", "streetAddress" : "22 Hanover Street" }, "geo" : { "@type" : "GeoCoordinates", "latitude" : 55.9526313, "longitude" : -3.1970679 }, "image" : "https://grantmcgregor.co.uk/hubfs/GRMC_blue_logo.svg", "name" : "Grant McGregor", "openingHoursSpecification" : { "@type" : "OpeningHoursSpecification", "closes" : "18:00", "dayOfWeek" : [ "Monday", "Tuesday", "Wednesday", "Thursday", "Friday" ], "opens" : "08:00" }, "sameAs" : [ "https://www.facebook.com/grantmcgregorltd/", "https://x.com/GrantMcGregorIT", "https://www.youtube.com/itgrantmcgregor", "https://www.linkedin.com/company/grant-mcgregor-ltd/" ], "telephone" : "+441316037910", "url" : "https://grantmcgregor.co.uk/" } ```