Is the £25,000 cyber insurance really free?

Yes. For eligible UK organisations under £20m turnover, the policy is bundled into the Cyber Essentials certificate fee with no separate premium to pay.

Who underwrites the policy?

The policy is underwritten by AIG and administered by IASME's insurance partner. You receive policy documents directly from the broker after certification.

Can I increase the cover limit?

Yes. IASME offers a paid top-up via the same broker, and most commercial cyber insurers will also write a larger policy with Cyber Essentials as the qualifying control.

Do I get the insurance with Cyber Essentials Plus?

Yes – the free £25,000 cover applies to both Cyber Essentials and Cyber Essentials Plus certifications issued via IASME, provided you meet the eligibility criteria.

What if my turnover is above £20m?

You won't qualify for the free policy, but you remain eligible for the certification itself. Speak to a specialist cyber broker for a tailored commercial policy.

Free £25,000 Cyber Insurance with Cyber Essentials Explained

Who is eligible

UK-domiciled organisation (registered office in the UK)
Turnover under £20 million in the most recent financial year
Whole-organisation Cyber Essentials certification (not a partial scope)
Certificate issued via an IASME-licensed Certification Body

The free cover is automatic. There is no separate application – your assessor confirms eligibility at certification and IASME issues the policy documents directly.

What the policy covers

Up to £25,000 of cyber liability cover
Incident response costs (forensics, legal, notification)
Business interruption losses following a cyber event
Cyber extortion and ransomware support
24/7 access to a UK incident response helpline

What it does not replace

£25,000 is meaningful baseline cover but it is not a substitute for a full commercial cyber policy. Most SMEs that hold data, process payments, or work with the public sector carry £1m–£5m of cover. Use the free policy as a foundation, not a ceiling.

How to claim

See our walkthrough on how to claim on the free Cyber Essentials insurance policy. In short: notify the 24/7 helpline as soon as you suspect an incident – delays can void cover.

Annual renewal

The policy runs in step with your certificate. Let Cyber Essentials lapse and the insurance lapses too. Renew on time and the cover renews automatically – see our renewal guide.