Cyber Resilience
Protect your business from cyber risk.
View Services
Cyber Essentials Update: key changes from April 2026 for the engineering sector
From 27th April 2026, a new set of refinements to the Cyber Essentials certifications will officially come into effect. For the engineering sector, these updates arrive at a time when digital transformation is rapidly reshaping how manufacturing and production environments operate.
Inside 2026 updates
The document breaks down the updated technical thresholds by exploring:
- The transition of the 14-day critical patch window into an absolute ‘auto-fail’ requirement alongside mandatory multi-factor authentication across all cloud services
- The expansion of assessment scopes to eliminate cloud exclusion loopholes and introduce stricter random-sample retesting for Cyber Essentials Plus audits
- The unique operational vulnerabilities created by linking legacy factory-floor machinery to corporate networks, emphasizing the need for robust technical segregation
