Procurement Policy Note – Updates to the Cyber Essentials Scheme

  1. Home
  2. /
  3. Library
  4. /
  5. Procurement Policy Note – Updates to the Cyber Essentials Scheme

The “Procurement Policy Note: Updates to the Cyber Essentials Scheme” introduces the UK Government-backed Cyber Essentials scheme, designed to help businesses safeguard against common cyber threats. Since 2014, certain public contract bidders are mandated to have Cyber Essentials or its advanced version, Cyber Essentials Plus certification. This note, replacing PPN 09/14, provides guidelines for organizations to identify and counteract cyber threats in contracts, especially those handling personal data. While the scheme establishes a foundational cybersecurity measure, it doesn’t guarantee specific products/services and isn’t tailored for advanced threats. The document also touches upon the G-Cloud Framework Agreements and includes annexes with contract examples, key features of the scheme, and FAQs.