Reviewed and updated on 20 October 2026.
An engineering business working in high-tech manufacturing wanted to prepare for Cyber Essentials and Cyber Essentials Plus. Its commercial plans included pursuing customers in aviation and space-related industries, where supplier security requirements were part of the opportunity.
The starting point
The environment included older hardware, operating systems and SQL Server installations. These needed review and remediation as part of the certification preparation. The project also aimed to improve system performance and reduce recurring support issues.
The work
CIS planned the changes in stages to manage cost and disruption. The work included hardware and operating system upgrades, SQL Server updates, and revised configurations and security policies.
A CIS cyber analyst coordinated the technical work with the client and the engineers needed for each task. This gave the team a way to gather evidence while addressing the identified issues.
The reported results
The original project account reported improved system performance and fewer support tickets. The client’s stakeholder, responsible for supply chain logistics, commercial matters and site management, welcomed the operational improvements as the business prepared to pursue larger customers.
These were project-specific outcomes. Preparing the technology and evidence supports an assessment; the certification decision is made through the scheme’s assessment process.
Planning your own preparation
Start with an accurate inventory, the assessment scope and the technical gaps that need attention. See the NCSC’s Cyber Essentials overview for the scheme and CIS Cyber Essentials support for help with preparation.
