It is the same checks as the Cyber Essentials scope but also requires a technical audit of the systems. This includes a representative set of user devices, all internet gateways, and all servers with services accessible to unauthenticated internet users.
If you have achieved the basic level Cyber Essentials certification less than 2 months before certifying to Cyber Essentials Plus and nothing has changed you will not need to repeat the self-assessment questions stage.
Our assessor will check that you still meet the FIVE security requirements of Cyber Essentials before proceeding with Cyber Essentials Plus certification. If you don’t currently have Cyber Essentials then this question set will need to be submitted as well, and our auditor will then evaluate that against the requirements as well as completing the technical audit, assuming you meet the requirements for the self-assessment questionnaire and the technical audit, you will be awarded Cyber Essential Plus.