Browse other guides

Does ClearAsset replace a CE assessment?

No. ClearAsset helps you prepare and track evidence for Cyber Essentials — it isn't a substitute for the formal self-assessment questionnaire (or, for Cyber Essentials Plus, the hands-on technical audit), and it isn't an accredited certification body.

What ClearAsset actually does

  • Gives you a single place to record the technical details each of the five controls needs — per device, per software record, per user account
  • Scores your organisation against each control in real time, so you can see gaps before they show up in the actual assessment
  • Flags specific issues (e.g. "Real-time AV scanning not confirmed" on a named device) rather than just an overall pass/fail
  • Keeps that data current as your estate changes, instead of a one-off snapshot

What it doesn't do

  • Submit anything to IASME or the NCSC on your behalf
  • Scan your network or devices automatically — the data reflects what's recorded in ClearAsset, which your team enters
  • Guarantee certification — the actual assessment questionnaire covers organisational and process questions ClearAsset doesn't track, alongside the technical controls it does
✓

Tip

Think of the Cyber Essentials page in ClearAsset as your evidence pack and gap-tracker for the technical controls — you'll still complete the assessment itself through IASME's certification body process.

What's next