What Happens If I Fail Cyber Essentials Plus?

Quick answer: You'll receive a report detailing what failed. Fix the issues, then pay for a reassessment. There's no waiting period, but you'll pay additional fees. The better approach: get a gap analysis before your first assessment and pass first time.

What Failure Looks Like

The assessor will provide:

• Specific controls that failed
• Evidence of the failures
• Guidance on what needs fixing

Common failure reasons:

• Patching not current (14-day requirement for critical/high)
• MFA not enabled everywhere required
• Devices in scope that aren't compliant
• Firewall configuration issues
• Default passwords not changed

The Reassessment Process

1. Review the findings

Understand exactly what failed and why. Don't guess—the report tells you.

2. Remediate

Fix every issue identified. Don't assume "close enough" will pass.

3. Verify internally

Check your fixes actually work. Test the specific things that failed.

4. Book reassessment

Contact your certification body to schedule. No mandatory waiting period.

5. Pay reassessment fee

Typically £500-1,000 depending on certification body and scope. This is on top of your original assessment fee.

Costs of Failure

Direct costs:

• Reassessment fee: £500-1,000
• Remediation work: Variable
• Additional time and effort

Indirect costs:

• Delayed certification
• Contract at risk if deadline-dependent
• Staff time diverted
• Stress and frustration

Total cost of failure often exceeds £2,000+ when you factor everything in.

How to Pass Next Time

Fix everything in the report

Don't prioritise—fix all findings. Partial fixes = partial failure.

Verify before rebooking

Run your own checks. Better yet, get someone else to check.

Address root causes

Why did you fail?

• Patching process inadequate? Fix the process.
• Forgot about certain devices? Update your asset register.
• Misunderstood requirements? Get expert guidance.

Consider help

If you failed once, DIY clearly didn't work. Professional support for the remediation and reassessment may be worthwhile.

How to Avoid Failing in the First Place

Get a gap analysis first.

Before booking your assessment:

1. Professional gap analysis against CE Plus requirements
2. Remediation of all findings
3. Verification that you're ready
4. Then book the assessment

The gap analysis costs less than a failed assessment plus reassessment.

What We Offer

If you've failed:

• Review of assessment findings
• Remediation support
• Pre-reassessment verification
• Guidance through reassessment

To avoid failure:

• Pre-assessment gap analysis
• Remediation before you book
• Confidence you'll pass first time

A gap analysis costs £300-500. A failed assessment costs £1,500+ when you include reassessment. The maths is simple.

---

- we'll help you pass next time.

---