Last updated: 7 November 2026
Businesses most often fail Cyber Essentials on unsupported software, missing multi-factor authentication on cloud services, updates not applied within 14 days, weak admin account control, and a wrongly scoped assessment. Fixing these five before you submit is the simplest way to pass first time.
The five most common reasons for failing
| Failure | Why it fails | Fix |
|---|---|---|
| Unsupported software | Windows 10, Server 2016 and Office 2021 are or will be out of support | Upgrade or replace, see end of life dates |
| No MFA on cloud services | The 2026 rules require MFA wherever it is available | Turn on MFA for every cloud account |
| Updates not applied in 14 days | Critical and high-risk fixes must be installed within 14 days of release | Automate patching and check weekly |
| Admin accounts overused | Daily work done on accounts with admin rights | Separate admin accounts, least privilege |
| Wrong scope | Devices or cloud services left out that should be in | Document every in-scope device and service |
A pre-submission checklist
- Every device and operating system is still supported
- MFA is on for Microsoft 365, accounting and other cloud tools
- Firewalls and routers have no default passwords and no open admin pages
- Malware protection is installed and up to date on every device
- Staff accounts have only the access they need
How ABCOM helps
As an NCSC Assured Service Provider we run a readiness check, fix the gaps and guide you through the assessment so the first submission passes. See Cyber Essentials, the 2026 changes explained and the readiness quiz.
Quick answers
What is the difference between Cyber Essentials and Cyber Essentials Plus?
Cyber Essentials is a verified self-assessment. Cyber Essentials Plus adds an independent technical audit of your devices and configuration, so it carries more weight with larger customers and insurers.
How long does Cyber Essentials take?
A well-prepared small business can complete the assessment in a few days. Most delays come from fixing issues found late, which is why a readiness check first saves time.
Would you pass Cyber Essentials today? Take the quiz or book a free readiness call.
Related answers and guides
- Cyber Essentials
- Cyber Essentials 2026 changes explained
- Cyber Essentials readiness quiz
- What happens when software reaches end of life?
- How often should we patch?
- All ABCOM FAQs
Sources and further reading
Related questions
Want this sorted for you?
Talk to our Burgess Hill team about Cyber Essentials certification. Free, friendly and no obligation.