The IASME Portal is the online system IASME uses to run Cyber Essentials applications from start to finish. If you’re going for certification, this is where you’ll answer the self-assessment questions, upload evidence, pay the fee, and eventually download your certificate. Rather than a marketing dashboard, it’s the actual mechanism the whole scheme runs on, so understanding how it works saves a fair amount of confusion later.
What the IASME Portal Is For
Cyber Essentials is a UK government-backed scheme that checks whether an organisation has basic technical controls in place, things like firewalls, secure configuration, and patching. IASME is the body that manages delivery of the scheme on behalf of the National Cyber Security Centre. The IASME Portal is simply the platform where that process happens. You create an account, start an application, and everything from that point onwards lives inside the portal.
Setting Up Your Account
Getting started means registering with an email address and choosing whether you’re applying as a business, a sole trader, or a certifying body helping someone else through the process. Once registered, you’ll be asked to pick which certification you want. Most first-time applicants go for standard Cyber Essentials rather than the Plus version, since Plus involves an additional technical audit on top of the self-assessment.
One thing worth flagging early: the email address you register with becomes the main contact for renewals, so use one that’s actually monitored rather than a personal inbox that gets forgotten about after the certificate lands.
Filling In The Self-Assessment Questionnaire
The bulk of your time in the portal will go on the self-assessment questionnaire itself. It’s broken into sections covering firewalls, secure configuration, user access control, malware protection, and security update management (patching, in plain terms). Each section asks specific questions about how your organisation handles that area, and the answers need to reflect what’s actually happening on your network, not what you’d like to be happening.
Answers are then reviewed by an assessor at IASME or one of its certification bodies. If something doesn’t add up or needs more detail, you’ll get feedback through the portal and a chance to amend before final sign-off.
Tracking Progress And Fixing Rejections
The portal keeps a running status on your application so you can see where things stand without chasing anyone by phone or email. If an assessor sends something back for correction, that shows up as an action item inside the portal too. Assessor review, including on resubmissions, is generally completed within three working days, provided the fix is straightforward.
It’s worth checking the portal regularly during an active application rather than waiting for an email notification, since some organisations find notification emails land in spam folders or get filtered by overly aggressive mail rules.
What Happens After Certification
Once your application passes, the certificate becomes available to download directly from the portal, along with a certification mark you can use on your website and marketing materials. The portal also stores your certification history, so if you’re renewing next year, previous submissions are there for reference rather than starting completely from scratch.
Certification lasts twelve months, and the portal will prompt you when it’s time to renew rather than leaving you to track the date yourself.
Verifying Someone Else’s Certification
If you’re on the other side of this, checking whether a supplier or partner genuinely holds a valid certificate, that’s a separate process from logging into the portal yourself. There’s a public search tool for exactly that purpose, which is worth using before taking anyone’s word for it on a tender document or supplier questionnaire.
If you’re unsure whether a supplier’s certificate is current, it only takes a moment to check Cyber Essentials certification status before signing anything.
