Cyber Essentials Certification Richmond upon Thames
6-Hour Guarantee · From £299.99 + VAT

Yes. Fig Group is an IASME-licensed Cyber Essentials and Cyber Essentials Plus certification body and works with organisations across the whole of Richmond upon Thames and the wider London region. Our central-London office at 167-169 Great Portland Street is a short journey from anywhere in outer london, and most engagements run remotely so location is rarely a factor. We apply our published flat fee (from £299.99 + VAT for Cyber Essentials, from £1,499 + VAT for Cyber Essentials Plus) regardless of where in Richmond upon Thames your organisation is based.

For self-assessed Cyber Essentials, Fig Group guarantees certification within six hours of a compliant submission landing in our portal. If anything needs adjusting we include three free review rounds. Cyber Essentials Plus takes one to three working days because it includes an external technical audit and vulnerability scan. The same SLAs apply whether your business is in Richmond or anywhere else in Richmond upon Thames.

Fig Group guarantees Cyber Essentials certification within 6 hours of self-assessment submission for orders placed before midday, provided the submission is compliant. If corrections are needed, up to three rounds of structured feedback are included at no extra cost. Cyber Essentials Plus takes 1-3 working days due to the external technical verification requirement.

Cyber Essentials costs from £299.99 + VAT (micro, 1-9 employees) to £549.99 + VAT (large, 250+ employees). Cyber Essentials Plus costs from £1,499 + VAT to £4,499 + VAT. Fig Group pricing is fully inclusive — no hidden fees, no assessment surprises, no mandatory add-ons.

Cyber Essentials is required under PPN 014/21 for certain UK central-government contracts that handle sensitive or personal data. It is also increasingly required by NHS supplier frameworks, local authorities, and private-sector enterprise procurement teams as evidence of foundational cybersecurity.

The five controls are: firewalls and internet gateways, secure configuration, security update management (patching within 14 days), user access control, and malware protection. Under v3.3, multi-factor authentication (MFA) becomes mandatory for all user accounts in scope. This applies to assessment accounts created from 28 April 2026 onwards.