Home How it works Resources About Contact Get in touch
Oxford-based · Cyber Essentials Readiness

Get ready to pass Cyber Essentials.

We help Oxfordshire small businesses get ready for Cyber Essentials — whether a customer, insurer, or supplier has asked for it, or you’d rather do the work now than deal with a breach later. We assess what you have, tell you what’s missing, and hand you a plan your IT provider can deliver. Our own Cyber Essentials Plus assessment is scheduled.

Get in touch — free scoping call How it works
Cyber Essentials (scheduled) Cyber Essentials Plus (scheduled) ICO (in progress)

Who this is for

If you’ve been asked for Cyber Essentials by a customer, supplier, or insurer — this is the practical way to get it.

Cyber Essentials is a UK government-backed certification that shows your business is doing the basics of cyber security. More and more contracts require it. More insurers ask about it. And once a client asks, the answer “we’re working on it” starts looking thin fast.

The scheme itself is public and free to read. The controls it asks about are sensible. But turning “we broadly do this” into “we can evidence it and pass the assessment” is a specific job that most small businesses don’t have time to work out on their own.

  • For businesses whose contract with a customer requires Cyber Essentials by a specific date.
  • For businesses whose insurer has asked security questions they can’t confidently answer.
  • For businesses who’ve meant to sort out CE for two years and are now finally being pushed to.
  • For businesses who want to stop the common attacks that hit small firms — before those attacks find them.

What we sell

Two ways in. One way to stay ready.

Fixed prices for small and standard organisations. Complex estates are quoted after a short scoping call.

Readiness Assessment

from £500 Small £500 · Standard £900 · Complex POA

One-day assessment plus written report. Direction, not delivery.

  • Gap analysis and readiness verdict
  • High-level remediation plan
  • Generic policy templates by reference from Resources
Learn more
Most chosen

Readiness + Policy Pack

from £1,500 Small from £1,500 · Standard £2,500 · Complex POA

Assessment + six policies tailored to your organisation + remediation plan.

  • Full readiness report
  • Six policies customised, adopted, and signed off
  • Prioritised remediation list your IT provider can quote from

Free generic templates are on Resources. This tier includes them tailored for your organisation.

Learn more

Once you’re certified — stay ready.

Cyber Essentials is annual. What matters more is what happens between certifications: new staff, new devices, new software, new supplier questions. The retainer keeps you compliant as your business changes.

from £200/month Small £200 · Standard £350 · Complex POA · After a Readiness engagement

Learn more about the retainer

Submission support (£250): we sit with you on the day you submit to IASME, review your answers before you click send, and help handle clarifications from the assessor. Recommended for first-time applicants.

How it works

A short, structured engagement.

Scoping call

30 minutes, free — so we can quote accurately and confirm we’re a fit.

Assessment

One day, on-site or remote — systems, setup, policies, and evidence.

Report

Five working days later — verdict, gaps, and a plan you can act on.

Handover

Your IT provider delivers from the report. We don’t do the remediation ourselves.

Total elapsed time from first call to report: typically 2–3 weeks.

The deliverable

A report you can actually use.

Every readiness engagement ends with a written report. Depending on the tier, it’s 15–25 pages and it includes:

  • A scope statement — what we looked at and what we didn’t
  • A per-control assessment against the five Cyber Essentials controls, plus BYOD if applicable
  • Verified evidence vs asserted items — flagged so you know what to firm up before submitting
  • A clear verdict — ready to apply, ready after specific remediations, or significant work required
  • A prioritised remediation plan with owner, effort estimate, and cost range
  • Recommended next steps

The report is a scope-of-work document. Your IT provider — whether it’s your existing one or someone we recommend — can quote directly from it.

Why Trinito

We practise what we assess.

We’re putting Trinito through the same Cyber Essentials Plus process we prepare clients for. Every control we recommend, every policy in our pack, we intend to run in our own business first.

We’re based in Oxford. We work with businesses across Oxfordshire and neighbouring counties. Most engagements are on-site.

  • Independent of delivery

    We advise; your IT provider remediates. Honest verdicts.

  • Fixed-price scoping

    Clear quotes after a free 30-minute call — no surprise invoices.

  • Local, hands-on

    Oxford-based. On-site when it helps; remote when it doesn’t.

Cyber Essentials assessment scheduled Cyber Essentials Plus assessment scheduled ICO registration in progress

Ready to talk?

Free 30-minute scoping call. We reply within one working day and quote a fixed fee.

Get in touch How it works

hello@trinito.co.uk · Based in Oxford — visits arranged by appointment