UK offers small businesses 75% off Cyber Essentials certification from 3 November

Updated 3 November 2026. This original news explainer was prepared with AI assistance using the dated official announcement and independent reporting listed below. Human editorial review has not been confirmed. The UK government announced a new 75% discount on

What happened and why it matters

Updated 3 November 2026. This original news explainer was prepared with AI assistance using the dated official announcement and independent reporting listed below. Human editorial review has not been confirmed. The UK government announced a new 75% discount on Cyber Essentials certification on Tuesday 3 November 2026, aimed at eligible micro, small and medium-sized businesses. The offer is part of the Cyber Essentials First Step Fund, supported by £2.4 million of public funding. It is not an across-the-board reduction for every company or for all cyber-security services: organisations must meet the programme rules and the discounted places are limited. The UK government's announcement of 3 November (https://www.gov.uk/government/news/new-government-backed-cyber-security-protections-could-save-uk-businesses-thousands) provides the full policy details, while ITV News independently reported the launch that morning (https://www.itv.com/news/2026-11-03/vulnerable-smes-to-get-discount-on-government-backed-cyber-security-scheme).

Who qualifies for the new discount?

The announced 75% discount applies to eligible UK-based micro, small and medium-sized businesses purchasing a new Cyber Essentials certification. A key rule is that a business must not have held Cyber Essentials certification during the previous four years. An organisation that was recently certified should not assume it can claim this introductory offer, and an applicant should check that its business size and other circumstances satisfy the conditions shown in the official application process. The government says the discounted assessment will cost £80 to £125 plus VAT, depending on the size of the business. This is not a free certification under the First Step Fund. The discount operates on a first-come, first-served basis and is planned to be available until March 2027 or until the allocated funding is exhausted, whichever happens first. The published estimate of about 6,000 businesses benefiting is an estimate, not an assurance that a particular applicant will secure funding. No specific final day in March is stated in the announcement.

Where businesses can start and what certification covers

The government points applicants to the official IASME First Step application portal (https://firststep.iasme.co.uk/), linked directly from the government's release. The portal returned an HTTP 200 response when checked on 3 November, but this does not establish that every individual applicant will qualify or that discounted capacity will remain available. Businesses should read the portal's live eligibility declarations and price before submitting an application or payment. Cyber Essentials is a UK government-backed security standard, developed with the National Cyber Security Centre. Its five core areas are intended to reduce exposure to common internet-based threats. Obtaining a certificate is different from buying a complete managed security service and does not guarantee that an organisation cannot be attacked. Smaller firms should still review device security, software updates, account access and basic recovery plans.

A separate fully funded route exists for certain suppliers

The announcement also describes a distinct Cyber Essentials for suppliers programme. Eligible UK SME suppliers may obtain fully funded first-time certification, alongside tailored Cyber Advisor assistance, if nominated by an organisation that has signed the Cyber Resilience Pledge. The government has earmarked up to £7 million through March 2029 for this separate route and estimates that about 8,000 businesses could benefit. These two routes should not be confused. The 75% First Step Fund discount is a direct offer to eligible businesses; the supplier programme depends on a qualifying pledge signatory nominating an SME. A supplier should speak to the relevant customer or contracting organisation rather than treating the second programme as an unrestricted open application. Figures on funding and potential reach describe government commitments and estimates, not completed awards.

Why this matters to independent firms and community organisations

Local traders, independent service providers and small employers increasingly rely on online booking, business email, payment systems and client records. A discounted entry point for a recognised security baseline could help qualifying firms assess basic safeguards at a lower cost. However, the amount saved will depend on an organisation's eligibility and actual assessment price; certification is not a promise of protection or future contracts. A practical first step is to check when the business was last certified, identify who manages the firm's devices and accounts, and read the government guidance before using the official IASME application site (https://firststep.iasme.co.uk/). Organisations already working with larger customers can also ask whether their customer participates in the Cyber Resilience Pledge and can nominate eligible suppliers. This information is about the government's programme, not a Match2Go grant, affiliation or application service.

Sources, chronology and editorial disclosure

• UK Department for Digital, Culture, Media and Sport: New Government-backed cyber security protections could save UK businesses thousands (https://www.gov.uk/government/news/new-government-backed-cyber-security-protections-could-save-uk-businesses-thousands). Published 3 November 2026. Primary source for the 75% rate, eligibility, £2.4 million fund, programme dates, pricing and separate supplier scheme. • ITV News: Vulnerable SMEs to get discount on Government-backed cyber security scheme (https://www.itv.com/news/2026-11-03/vulnerable-smes-to-get-discount-on-government-backed-cyber-security-scheme). Published 3 November 2026, 08:00 UK time. Independent confirmation of the new offer and the initial funding rules. • IASME: First Step portal (https://firststep.iasme.co.uk/). Official application route linked by the government; its public endpoint returned HTTP 200 on 3 November 2026. Live applicant eligibility and remaining capacity have not been independently verified. • Event and publication date: 3 November 2026. Sources checked and article updated: 3 November 2026. Original reporting summary and editorial explanation drafted with AI assistance. No human editorial review is claimed. This is an application and certification opportunity, not a physical public event with a published venue and fixed start and end times. No map event is proposed.

Prepared with AI assistance; independent human editorial review has not been confirmed.