Checklist

Cyber Essentials internal review checklist

Before you click submit, walk through the same checks an assessor will. This internal review catches the avoidable issues.

Why internal reviews are skipped

Most SMEs go straight from ‘we think we're ready’ to submission. A simple internal review halves the surprises.

Things to check before submission

  • Asset register matches reality
  • Admin accounts list matches MFA evidence
  • Patch report covers all in-scope devices
  • No unsupported software remains
  • Each policy has a current review date
  • Open tasks and known gaps are documented

How Evaud helps

Readiness view

See gaps in one place before submission.

Internal comments

Keep reviewer notes private to the workspace.

Tasks for follow-ups

Anything flagged becomes a tracked task with an owner.

Frequently asked questions

Start building your Cyber Essentials evidence today.

Free to try. No credit card required.