Free Cyber Essentials templates
Cyber Essentials is a questionnaire, not a document upload: at the basic level your typed answers are the assessment, though your certification body can ask for evidence. These templates are the short documents that keep those answers consistent and true, each tied to the questions it answers. No email, no account, nothing uploaded.
The templates
Asset register template
The four tables behind your scope statement — devices, network equipment, servers, cloud services — as a spreadsheet with example rows.
Open Free templateBYOD policy template
One page covering the device rules, the calls-texts-MFA exemption, and the fair opt-out — the same document ReadyCert drafts.
Open Free templatePatch management statement template
The 14-day commitment in writing — supported software only, automatic updates doing the work — the same statement ReadyCert drafts.
Open Free templateUser access policy template
Joiners approved, leavers out on their last day, admin accounts separate and reviewed — one page answering A7.1–A7.9, the same document ReadyCert drafts.
Open Free templateCyber security policy template
One page for a small business, organised around the five Cyber Essentials controls, with each line tied to the question it speaks to.
Open Free templateCyber Essentials checklist (printable PDF)
The same items as the interactive checklist, laid out for paper: a box per line, question numbers, auto-fails marked. Print or save as PDF.
OpenWhich template answers which questions
| Template | What it answers |
|---|---|
| Asset register template | The scope section: networks, network equipment, computers with operating-system versions, phones and tablets, servers and cloud services (A2.4–A2.9). |
| BYOD policy template | Personal phones and laptops used for work: the same rules as company devices — a supported, updated operating system, a lock of at least 6 characters, approved apps. |
| Patch management statement template | Security updates: supported software only, automatic updates on, high-risk and critical fixes within 14 days (A6.1–A6.5). |
| User access policy template | User access: approved accounts, individual logins, leavers removed, admin accounts separate, listed and reviewed (A7.1–A7.9). |
| Cyber Essentials checklist (printable PDF) | Every section, one tick box per item, with the official question numbers and the automatic fails marked. |
Two more documents, written by a free tool
The password policy and the scope statement depend on choices only you can make, so they are built by answering a few questions rather than edited from a template.
Password policy generator
Answer three questions and get a one-page password & authentication policy written to the v3.3 rules — the same document ReadyCert drafts.
Open Free toolScope statement builder
Plain questions in, a scope statement out — with the home-router, BYOD and cloud-service rules applied in the wording for you.
OpenHow much paperwork you actually need
No question says “attach your policy”, and length earns nothing: a true page beats a copied binder. The documents guide lists the eleven short documents worth having and how brief each can honestly be. ReadyCert drafts the finished versions from your own answers; these templates are the honest starting points.