The Cyber Essentials First Step Fund provides an opportunity for eligible UK businesses to make their digital environments more secure while reducing the initial cost of certification. Understanding how the programme operates is important for organisations planning to improve their security arrangements, and resources such as uk ncsc cyber essentials can help businesses explore the funding process and understand the available certification route. Within this initiative, IASME has an important administrative and delivery role, helping applicants access the scheme and proceed towards their Cyber Essentials assessment.
Understanding IASME's Position
IASME is the official delivery partner responsible for operating the National Cyber Security Centre's Cyber Essentials scheme. Its responsibilities include managing the certification framework and working with a network of approved Certification Bodies across the United Kingdom.
For the First Step Fund, IASME provides the route through which eligible organisations can access the government-supported discount. Rather than requiring businesses to navigate separate administrative arrangements, the process is organised through IASME's Supplier Assurance Tool and associated certification network.
This arrangement helps create a more straightforward experience for smaller organisations that may have limited resources for managing certification activities.
How the First Step Fund Works
The First Step Fund offers eligible micro, small and medium-sized organisations a 75% discount on the cost of a new Cyber Essentials certificate. Applicants are responsible for paying the remaining 25% of the assessment cost.
To qualify, an organisation generally needs to be registered in the UK, have fewer than 250 employees and meet the programme's certification history requirements. Businesses must also satisfy the applicable subsidy control conditions.
The funding is intended for organisations applying for a new certificate rather than those simply renewing an existing certification. Eligibility checks take place during the application process, helping determine whether an organisation meets the programme requirements.
The Application and Assessment Stages
Businesses can begin by creating an account through IASME's Supplier Assurance Tool. During registration, the organisation provides relevant information so its eligibility can be checked.
Once eligibility is established, the applicant can purchase the discounted assessment. Organisations should pay attention to the programme deadlines, as the assessment must be purchased by 31 March 2027, subject to funding availability. After purchasing, applicants have six months to complete and submit their assessment.
IASME also works with Certification Bodies that can guide businesses through the assessment process. These organisations help applicants understand the requirements and arrange the necessary certification activities.
What Businesses Need to Prepare
Before starting, organisations should review their existing IT arrangements and identify areas requiring improvement. Cyber Essentials focuses on five technical areas: firewalls, secure configuration, security update management, user access control and malware protection.
Preparing these areas in advance can make the assessment process more organised. Business owners should also ensure that the information supplied during registration is accurate and that the appropriate person is available to approve the assessment responses.
Conclusion
IASME plays a central role in making the Cyber Essentials First Step Fund accessible to eligible UK businesses. Through its administration, assessment network and certification arrangements, organisations have a defined route towards obtaining certification at a reduced cost. Understanding the eligibility conditions, application stages and technical requirements can help businesses approach the initiative with greater confidence and prepare effectively for certification.
Comments