Can a sole trader get the cheapest CE band?

Yes – the IASME micro band (1–9 people) costs £320 + VAT. Sole traders qualify automatically.

Does my personal laptop count if I use it for work?

Yes – any device used for business is in scope. The good news is CE doesn't care if it's also a personal device, as long as the controls are met.

Do I need any paid software to pass?

Almost never. Built-in OS features and free MFA covers most sole-trader scopes. The cost is the assessment fee plus your time.

How long does it take?

Most sole traders go from start to certificate in under two weeks – often under one if the SaaS estate is small.

Is it worth the cost if no client has asked?

It's a strong leading indicator – clients who'll ask in 6–12 months are easier to onboard if you already hold it. Plus the included cyber insurance is genuinely useful.

Cyber Essentials for UK Sole Traders & Freelancers

Yes, sole traders can get CE

IASME's question set scales to organisation size. The lowest band (1–9 people) covers everyone from one-person consultancies to small startup teams. The certificate looks identical to the one a 50-person business holds. Increasingly, freelancer marketplaces, public-sector framework subcontracting, and large-client onboarding ask for it.

Realistic scope

For a typical UK sole trader, scope usually comes down to:

One laptop (work, or work-and-personal).
One phone (whatever you use to log into work apps).
Email tenant (M365 personal/business or Google Workspace).
The two-to-five SaaS apps you actually run the business from.

The five controls, sole-trader edition

Firewalls

Your home router and your laptop's built-in firewall both count. Make sure the router has a strong, non-default admin password and remote management is off.

Secure configuration

Don't use a default account name on your laptop. Auto-lock after a short period. Disable any service or app you don't use. Built-in OS settings cover this.

Access control

MFA on every cloud account – email, accounting software, design tools, banking, project tools. Every one. This is where sole traders most often slip.

Malware protection

The built-in Windows Defender or macOS XProtect satisfies CE. You don't need a paid product. Just don't disable the built-in one.

Security update management

Turn on automatic OS updates. Update apps within 14 days of high-risk patches. A monthly calendar reminder is enough.

Cost for a sole trader

IASME assessment fee (micro band): £320 + VAT.
Tooling: usually £0 – built-in features cover everything.
Time: 4–8 hours of focused prep.
Optional guided submission: £350–£600 if you'd rather hand it off.

What you don't need

An MDM tool (you're one device).
A separate joiners/leavers HR process (you're it).
A formal incident-response plan (a one-page note is enough).
Paid antivirus.

Why bother as a sole trader?

It opens up tendering and subcontracting work that filters on CE.
It strengthens your professional indemnity position.
It's a credible trust mark on a freelancer profile or proposal.
The £25,000 cyber-insurance benefit included with the certificate is uncapped by business size.

Ready? Head to Cyber Essentials, or read about the 2026 pricing bands.