How much does Cyber Assurance cost?

Level 1 is £320 + VAT (micro) rising to £600 + VAT (large). Level 2 is quote-based depending on size and complexity.

Do I have to pay for Cyber Essentials too?

Yes. Cyber Essentials is a mandatory prerequisite with the same tiered pricing. Bundle both if you don't already hold CE.

Is Level 2 worth the extra cost?

If you supply enterprise or public sector clients who require audited assurance, yes. The 3-year validity also amortises the cost.

Are there hidden fees?

The first resubmission is free. Second resubmission usually carries a fee. There is no refund if you don't complete within 6 months of purchase.

Cyber Assurance Cost UK 2026: Real IASME Bands

The official IASME Level 1 bands (2026)

Micro (1–9 staff): £320 + VAT
Small (10–49 staff): £440 + VAT
Medium (50–249 staff): £500 + VAT
Large (250+ staff): £600 + VAT

See the full breakdown on our Cyber Assurance cost page.

Level 2 (Audited)

Level 2 pricing is quote-based and depends on organisation size, complexity, number of sites, and whether the audit is on-site or remote. Expect a meaningful step up from Level 1. The certificate is valid for 3 years, with annual CE + CA Level 1 re-checks.

The hidden cost: Cyber Essentials

You cannot buy Cyber Assurance without a valid Cyber Essentials certificate with 30+ days remaining. If you don't have CE yet, bundle them. The same tiered band applies to CE, so a micro org pays roughly £320 + VAT for CE plus £320 + VAT for CA Level 1.

What's included

IASME assessment portal access
Marker review by a qualified assessor
The certificate (digital + PDF)
Public listing on the IASME register
One free resubmission

Budget realistically

For a 10–49 person UK SME doing CE + CA Level 1 together, budget £880–£1,400 + VAT depending on managed support level. Add 2–4 days of internal effort.