Cyber Essentials and Cyber Essentials Plus

See Post here

Cyber Essentials is sufficient for 21-22 but Cyber Essentials Plus is needed for 22-23.

In all ESFA Education and Skills agreements 2022 to 2023:

1.2 Where the Contractor will handle information at OFFICIAL for the Department, the requirements of Procurement Policy Note 09/14: Cyber Essentials scheme certification - GOV.UK (www.gov.uk) dated 25 May 2016, or any subsequent updated document, are mandated; the Contractor will endeavour to meet the requirements of Cyber Essentials for the 2022/23 Funding Year and present the results to the Department on request. The scope must be relevant to the Services supplied to, or on behalf of, the Department.

So I'm reading this as it's still ok if you haven't got CE, but ESFA could ask you to demonstrate you meet the requirements. We have Welsh Government funding and CE is mandatory, I'm currently in dialogue with them as the changes to CE make it difficult to maintain accreditation for a college.