Cyber Essentials for the Derby Rail Supply Chain
Derby is the centre of UK rail engineering. Suppliers into rolling stock, signalling, infrastructure and rail services are all being asked to evidence baseline cyber security before contracts are awarded or renewed.
NixInfinity-AI, IASME-licensed Certification Body
- Based in Derby, serving Derby
- We review submissions and issue certificates
- +44 7739 455101
- cyber@nixinfinityai.com
Areas covered: Derby, Long Eaton, Ilkeston, Burton upon Trent, Nottingham.
Prime contractor requirements
Rolling stock and infrastructure primes push security requirements down the supply chain contractually.
Plus is often the ask
Rail buyers frequently specify Cyber Essentials Plus rather than the self-assessed level.
Design data protection
CAD, engineering drawings and project data are exactly the assets a supply chain attack targets.
Based in Derby
Your assessor is in the same city as your customers, which makes site audits and timelines easy to arrange.
Why rail supply chain firms are being asked
Rail is critical national infrastructure, and the security obligations placed on operators and primes flow down through contracts to the supply chain. If you provide components, engineering design, testing, software, maintenance services or consultancy into rail, you can expect a supplier assurance requirement, and Cyber Essentials is the baseline most schemes recognise.
The specific worry is design and project data. Engineering drawings, test results, maintenance schedules and project correspondence move constantly between organisations, usually by email and shared platforms. A compromised supplier account is a direct route into a prime's project data, which is precisely why primes now check.
Cyber Essentials or Cyber Essentials Plus?
Read the contract wording carefully. Rail primes frequently specify Cyber Essentials Plus, which adds an independent technical audit with vulnerability scanning on a sample of your devices. Plus requires a valid Cyber Essentials certificate issued within the previous three months, so if Plus is the requirement you need to plan both stages.
Cyber Essentials is £320 + VAT for 1 to 9 staff, £440 + VAT for 10 to 49, £500 + VAT for 50 to 249 and £600 + VAT for 250 or more. Cyber Essentials Plus is £1,400 + VAT, £1,500 + VAT, £1,650 + VAT and £2,000 + VAT on the same bands. A combined Cyber Essentials Done For You and Plus package is available at £2,100 + VAT for 1 to 9 staff.
Cyber Essentials prices for Derby
Prices are set by headcount, not postcode. Every quote includes preparation support, a pre-check before submission and £25,000 of cyber liability insurance for UK organisations under £20m turnover.
| Organisation size | Cyber Essentials | Cyber Essentials Plus |
|---|---|---|
| 1–9 staff | £320 + VAT | £1,400 + VAT |
| 10–49 staff | £440 + VAT | £1,500 + VAT |
| 50–249 staff | £500 + VAT | £1,650 + VAT |
| 250+ staff | £600 + VAT | £2,000 + VAT |
See the full Cyber Essentials pricing guide or the Cyber Essentials Plus page.
Frequently asked questions
Nearby and related
Get certified with a local Certification Body
Cyber Essentials £320 + VAT for 1 to 9 staff. Named assessor, pre-check included, £25,000 cyber liability insurance. Book a free 30-minute consultation.
Or call +44 7739 455101 and speak to an assessor.