M365 Security Health Check
£450 fixed
Know exactly where you stand
- Remote review of your Microsoft 365 tenant
- Checked against all five Cyber Essentials controls
- Written report with a prioritised fix list
Cyber Essentials · Microsoft 365
Get Cyber Essentials-ready on Microsoft 365, at a fixed price.
Tenders, councils, NHS commissioners, insurers and larger clients increasingly ask for Cyber Essentials. Most small organisations on Microsoft 365 already own the tools to pass. We switch them on, evidence them and get you ready for assessment.
- Fixed prices
- Fully remote
- Plain English
- No lock-in
Why it matters now
The bar went up in 2026. The fixes are usually already in your licence.
The current Cyber Essentials question set expects multi-factor authentication on cloud services, high-risk updates applied within 14 days, and proper control of the devices people use from home. On Microsoft 365, these are mostly settings you already pay for.
Win and keep contracts
Public-sector buyers, frameworks and many commissioners ask suppliers for Cyber Essentials. Without it, you can be screened out before anyone reads your bid.
Block the common attacks
The scheme targets the attacks that hit small organisations most: stolen passwords, unpatched devices and phishing. Getting ready is real protection, not just paperwork.
Pass first time
We configure, test and document before you book your assessment, so the certification body sees a clean set of answers and evidence.
Packages
Fixed prices, agreed before we start
For organisations with up to 25 users. Larger organisations get a fixed quote after a short scoping questionnaire.
Cyber Essentials Ready
£1,250 from
We fix the gaps for you
- Everything in the Health Check
- MFA and admin accounts set up properly
- Device compliance and patching in Intune
- Malware protection and firewall settings
- Short policy set and evidence pack
- Liaison with your certification body
Cyber Essentials Plus Ready
£2,250 from
No surprises at the audit
- Everything in Cyber Essentials Ready
- Pre-audit internal vulnerability scan
- Dry run of the Plus technical tests
Stay Certified
£250 / month
Keep it true all year
- Monthly patch and compliance check
- Quarterly summary report
- Renewal prepared each year
The certification body's own assessment fee (typically around £320–£600 + VAT, depending on size) is paid directly to them. Ready Cyber prepares you for assessment; certification is awarded by an accredited certification body.
How it works
Four steps, all by email and remote access
No site visits and no long meetings. Everything is agreed in writing.
- Get in touchSend an enquiry or request the free self-check below.
- Fixed quoteA short scoping questionnaire, then a fixed quote within two working days.
- Remote workWe work through a delegated admin account at times that suit you.
- AssessmentYou receive a report and evidence pack, then book your assessment.
Why Ready Cyber
Hands-on Microsoft 365 security, from people who do it every day
Deep Microsoft 365 skills
Day-to-day experience across Entra ID, Intune, Defender, Exchange Online and Teams: conditional access, MFA, device compliance, update rings and secure configuration.
Certification experience
Practical experience preparing organisations for Cyber Essentials Plus and supporting ISO 27001 information security management.
Engineering background
A degree in telecommunications systems engineering, so networks, firewalls and the technical tests are familiar ground.
You stay in control
Plain English and everything in writing. You keep the configuration, the documents and the evidence. No lock-in and no ongoing contract unless you want one.
Free resource
The free 10-minute Cyber Essentials self-check
Nineteen yes/no statements across the five controls. Send back your ticks and we will tell you in writing which gaps matter most. No charge and no call needed.
- Every user signs in to Microsoft 365 with MFA, not just admins
- Admin accounts are separate and not used for email or browsing
- High-risk updates reach laptops, including home-working ones, within 14 days
- Unsupported software and operating systems are removed
- Every device has malware protection switched on and updating
- Default passwords and unused accounts are removed or disabled
FAQ
Common questions
Do you issue the Cyber Essentials certificate?
No. Certificates are issued by accredited certification bodies. We get your organisation ready, help you complete the assessment questions accurately and liaise with the certification body you choose.
We don't have an IT department. Is that a problem?
Not at all. That is who this service is for. We do the technical work remotely and explain what changed in plain English.
What Microsoft 365 licences do we need?
Many organisations can meet the requirements with what they already have. Some controls are easier with Microsoft 365 Business Premium. The Health Check tells you whether any licence change is worth it before you spend anything.
How long does it take?
A Health Check is usually delivered within a week of access being granted. Readiness projects for small organisations typically take two to four weeks, depending on how many devices need attention.
Do you work with charities?
Yes. Charities delivering commissioned or NHS-funded services are often asked for Cyber Essentials. We understand tight budgets and keep prices fixed.
How do you access our systems?
Through a named, time-limited admin account that you create and can remove at any time. All work is logged and documented in your evidence pack.
Contact
Tell us where you are
Send a short message and we will reply by email within one working day, usually with a fixed quote or the free self-check.
Prefer email? Write to hello@readycyber.co.uk.