NCSC funded Cyber Essentials Plus certification for charities and legal aid businesses

Who wouldn't love a little bit of funding support? Especially in third sector and in 2022. This year has already been tough. However, we some great news for you. National Cyber Security Centre (NCSC) is funding 3 days worth of consultancy to implement controls for Cyber Essentials and achieve Cyber Essentials Plus certification for small charities and small businesses that offer legal aid services. Charities and businesses that employ up to 50 people are considered small businesses. More details please you ask and here they are.

TechForce is working with IASME & NCSC to offer funded support packages to businesses in targeted sectors to help them implement Cyber Essentials controls and achieve CE+ certification.

The funding will pay for 3 days of our time to help a small organisation put the CE controls in place and achieve CE+ certification.

All work on this project must be completed before the end of March 2023.

This Funded Cyber Essentials Programme is offered to:

  1. micro or small business that offer legal aid services.
  2. micro or small charities that processes personal data, as defined under GDPR. This applies to most charities as they process the employee data too.


Eligible organisations with a Cyber Essentials Certificate expiring before April 2023 can access the scheme, however CE+ renewals do not qualify.

  • The support does not include the provision or acquisition of additional software or hardware by the assessor on behalf of the organisation.
  • A micro or small business/charity is defined as 1-49 employees.
  • A firm that is in receipt of a legal aid contract, as contracted by the legal aid agency (LAA) in England or Wales, Legal Services Agency (LSA) in Northern Ireland or Scottish Legal Aid Board in Scotland
  • GDPR Article 4, the GDPR gives the following definition for “personal data”:
  • “Personal data” means any information relating to an identified or identifiable natural person (”data subject”) an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

TechForce is a Cyber Essentials Plus Certification Body and we can help with the funding as well as the certification process. We will start with a readiness check and pre-assessment to find any gaps you may have. Help you remediate the gaps then organise the final assessment to certify you for the CE plus. If you would like to educate your self what's involved in CE Plus process here are a few blogs we wrote for you.


So what details we need from you in order to claim the NCSC funded Cyber Essentials Plus voucher? Here they are

  • Organisation name
  • Company number or Charity number
  • Organisation address
  • Size of organisation
  • Confirmation that the organisation has never held CE+ certification and whether they currently have CE certification.
  • Contact email address

Get in touch today to find out more and get your voucher. There are only a limited number of vouchers available and the project work need to be completed by the end of March 2023. Gotta hurry up! Email us at Talk soon.

If you are an IT/MSP business and would like to offer this to your clients please get in touch to find out more about out partner incentives. We have been working with a few partners like you already and we would love to work with more.


Who is the NCSC funded Cyber Essentials scheme for?

It is for small charities and small businesses that offer legal aid services. Charities/Businesses that employ less than 50 are considered small.

How much funds do we get?

You will get 3 days worth of consultancy to implement security controls required for Cyber Essentials (CE) and get certified for CE plus. The consultant will get paid.

Can the work be carried out by any consultant?

Unfortunately, no. The consultancy has to be an NCSC approved and the consultant has to be qualified. Furthermore, the consultancy has to have an agreement with NCSC to deliver this work.

Is there a deadline for application?

You will have to complete the project work by March 2023. You are thinking you need to start the process soon.

We already have Cyber Essentials. Can we apply for it?

Yes, if you have Cyber Essentials you can apply and you will get certified for CE plus.

We already have Cyber Essentials Plus. Can we apply for it?

Unfortunately not. The scheme does not apply to the renewals.

Related Articles


Back to start
aberdeen skyline graphic