Cyber Essentials certification serves as a valuable initial step for any organisation, regardless of its size or sector, seeking to safeguard against cyber threats and fortify the security of their internet-facing networks and devices.  The Government-backed scheme focuses on the implementation of 5 key technical control areas (firewalls, secure configuration, access control, patch management, and malware protection), which were selected both for the protection they provide organisations against common cyber threats, but also for the relative ease with which they can be implemented.  Nonetheless, several common challenges and obstacles frequently arise during organisations’ preparation for certification and the certification process itself.