How do I check or verify a Cyber Essentials certificate?

Quick answer: Verify any UK Cyber Essentials or Cyber Essentials Plus certificate at the official IASME register: iasme.co.uk/cyberessentials/ncsc-certified-organisations-search. Search by company name, postcode or certification number — the register shows the live certification status, level (CE or CE+) and expiry date.

Why verify a certificate?

If a supplier or potential supplier claims they’re Cyber Essentials certified, the IASME register is the single source of truth. Reasons to check:

• Procurement / tender supplier vetting
• Confirming a partner’s claim before sharing data
• Insurance / underwriting due diligence
• Marketing / partnership claim verification

How to check on the IASME register

1. Go to iasme.co.uk/cyberessentials/ncsc-certified-organisations-search
2. Enter the company name, postcode or part of the certification number
3. Review the result: company, level (CE or CE+), expiry date, certifying body
4. If listed: certified and current
5. If not listed: either never certified or has lapsed

What the register shows you

• Company legal name (matches Companies House)
• Trading address / postcode
• Level: Cyber Essentials or Cyber Essentials Plus
• Certification expiry date (next renewal needed by)
• The certifying body (IASME or one of their licensed delivery partners)

What the register does NOT show

• The scope of the certification (whole org vs sub-set) — you have to ask the supplier directly
• The full certification number (only partial is exposed)
• Historical certifications that have lapsed
• Failed or rejected applications

Validating the certificate badge / image

If you’ve been sent a PDF certificate or seen a badge on a website, the certificate PDF itself contains the unique IASME certification number. Cross-reference that number against the register to confirm authenticity. Badge artwork on websites is not itself proof of certification — always check the register.

What to do if a supplier claims certification but isn’t on the register

• Most likely: the certification has lapsed and they haven’t renewed
• Possible: the certification was for a sub-set under a different legal name
• Possible: they were never certified and the badge is being misused

Ask for a copy of the current certificate PDF and cross-reference the cert number with the register. If they can’t produce one, treat the claim as unverified.