Cyber Essentials changed in April 2026. MFA is now pass or fail.
Version 3.3 landed on 27 April 2026. Missing MFA on a cloud service is now an automatic fail — no warnings, no exception for paid-only tiers.
Category
Cyber Security
The ordinary controls that stop the things that actually happen.
3 articles
The three attacks that actually hit small businesses
Not zero-days and not nation states. The things that genuinely happen to small firms are ordinary, preventable, and rarely discussed at the right level.
Your backups are not backups until you have restored one
Most businesses that lose data had backups. What they did not have was a restore anyone had ever watched work. How to find out before it matters.
Let's work together
Ready to put this into practice?
Book a free call and we'll give you honest advice tailored to your business — no pressure, no jargon.
What you get from the call
Free- 01Honest, practical advice
- 02A clear fixed-price quote
- 03A realistic timeline
- 04No pressure, no jargon