It's not optional for much longer
The UK government's National Cyber Security Centre (NCSC) strongly recommends Cyber Essentials for all organisations. For any business that handles personal data, works with the public sector, or operates in a regulated industry, certification is rapidly becoming a baseline expectation.