Cyber Essentials Update: key changes from April 2026

From 27th April 2026, a new set of refinements to the Cyber Essentials and the Cyber Essentials Plus certifications will officially come into effect. Leaving no grey areas or room for interpretation, here are the coming 2026 updates to the Cyber Essentials scheme.

What's changing in 2026?

The document breaks down the updated certification criteria by exploring:

  • The conversion of the 14-day high-risk patch window into a strict mandate and the requirement for universal multi-factor authentication across all cloud applications
  • The removal of network scope exemptions alongside tougher secondary random-sample testing parameters for Cyber Essentials Plus audits
  • The critical preparation strategies for corporate networks, focusing on automated patch management systems and the structural isolation of uncertified devices

Download resource

Cyber Essentials Update: key changes from April 2026

Latest in Resources

Defence, protection, security. We've got you covered.

Whether you need to enhance your approach to cyber threats, overhaul your IT infrastructure or improve your communications, we’re here to help and advise. Talk to a specialist today and take the next step towards being a stronger, more resilient business.

Speak to us today

Need support? Take Control.

The button below is to be used when instructed by our technical support team. This will allow a file to be downloaded to your device for them to take control and help solve the issues you are having.

ND Take Control

exe · 7.70MB

Please note: only to be used when instructed by a member of our support team. Windows devices only.