IASME Cyber Assurance Cost UK 2026: Real Pricing Bands
Published 30 April 2026
Level 1 official IASME fees
- Micro – 0 to 9 employees: £320 + VAT
- Small – 10 to 49 employees: £440 + VAT
- Medium – 50 to 249 employees: £500 + VAT
- Large – 250+ employees: £600 + VAT
The Cyber Essentials prerequisite
Cyber Assurance requires a valid Cyber Essentials certificate. If you don't currently hold CE, IASME lets you buy it as a bundle with CA. The CE fee is added at the matching tier:
- 0–9 employees: £320 + VAT
- 10–49 employees: £440 + VAT
- 50–249 employees: £500 + VAT
- 250+ employees: £600 + VAT
Level 2 audit pricing
Because the Level 2 audit needs dedicated time from a technical assessor, IASME prices it per organisation. The quote depends on:
- Number of staff and locations
- Network complexity (cloud sprawl, on-premise systems, segmentation)
- Whether the audit is remote, on-site or hybrid
- Volume of policy and evidence documentation
As a guide, most SME L2 audits land between £1,800 and £8,000 + VAT. We confirm a fixed quote in writing before any work begins.
Three-year total cost of ownership
Level 2 is valid for three years (with annual CE + L1 soft check), so the audit cost is amortised. For a 50-person organisation, three years of L1-only renewals + CE renewals sometimes ends up close in cost to a single L2 audit + soft checks – with the audit you also get evidence-based assurance for buyers.
What's not included in the IASME fee
The IASME fee covers the assessment, verification or audit, and certificate. It does NOT cover preparation, policy drafting, risk register building or remediation work. We bundle a fixed-fee preparation service so you know the total cost up front – ask us for a tailored quote.
See also: Cyber Assurance vs ISO 27001 cost comparison and Cyber Essentials cost UK 2026.