GUIDE
CE+ readiness checklist 2026
Eight controls, twenty-three sub-clauses, the order most assessors check them in, and the evidence each one expects.
14 min read · In productionChecklists, playbooks, whitepapers and webinars on Cyber Essentials Plus, software rationalisation and vulnerability management. Looking for our written guides? Those live in Insights.
Our written guides are published free in Insights. The items below are longer-form downloads and recordings, in production now.
Cyber Essentials v3.3 (Danzell), the 14-day patching rule, MSI vs MSIX, Intune and Configuration Manager health reporting, and Microsoft 365 licence reclamation. No form, no gate.
Read the guides →Eight controls, twenty-three sub-clauses, the order most assessors check them in, and the evidence each one expects.
14 min read · In productionHow to Retain, Reduce, Replace, Remove or Replatform every product in your estate - with usage telemetry, not gut feel.
22 min read · In productionWhy "Critical" and "High" CVSS scores aren't the prioritisation signal - and how CISA's KEV catalogue changes triage maths.
18 min read · In productionA composite story from a real APaaS Assure customer - 137 apps retired, 412 KEVs closed, all in one quarter.
9 min read · In productionA 30-minute panel with two UK IT Directors who have moved off the audit-week scramble. Q&A included.
On-demand · In productionWhat it costs to replicate APaaS Assure's capabilities by buying Drata + Tenable + Flexera + NinjaOne. Spoiler: a lot.
6 min read · In productionThe items marked in production are being written now. If one of them would be useful to you sooner, email Assure@apaas.org and we will send you the draft - we would rather it was useful than polished.