---
title: Cyber Essentials | April 2026 Cyber Security Updates | 1101
description: Cyber Essentials v3.3 update coming April 2026. Expect stricter MFA rules, clearer cloud definitions, and refined marking criteria. Contact 1101 for help.
image: https://www.1101.co.uk/hubfs/News%20and%20blogs/Cyber%20Essentials_%20April%202026%20Updates.png
---
[Skip to main content](https://www.1101.co.uk/news-and-blogs/cyber-essentials-april-2026-updates#main-content)
- [Remote support](https://1101remote.screenconnect.com/)
- [Support portal](https://1101.myportallogin.co.uk/)
- [Knowledgebase](https://app.eu.myglue.com/)
-
   
- [Home](https://www.1101.co.uk)
- Show submenu for About About
- [Our company](https://www.1101.co.uk/our-company)
- [Our team](https://www.1101.co.uk/our-team)
- [News and blogs](https://www.1101.co.uk/news-and-blogs)
- Show submenu for Services Services
- [Artificial intelligence](https://www.1101.co.uk/artificial-intelligence)
- [Digital transformation](https://www.1101.co.uk/digital-transformation)
- [Digital security](https://www.1101.co.uk/digital-security)
- [Digital support](https://www.1101.co.uk/digital-support)
- [Case studies](https://www.1101.co.uk/case-studies)
- Show submenu for Industries Industries
- [Manufacturing](https://www.1101.co.uk/manufacturing)
- [Engineering](https://www.1101.co.uk/engineering)
- [Construction](https://www.1101.co.uk/construction)
- [Legal](https://www.1101.co.uk/legal)
- [Not-for-profit](https://www.1101.co.uk/not-for-profit)
- [Resources](https://www.1101.co.uk/resources)
Open main navigation
Close main navigation
- [Home](https://www.1101.co.uk)
- Show submenu for About About
- About
- [Our company](https://www.1101.co.uk/our-company)
- [Our team](https://www.1101.co.uk/our-team)
- [News and blogs](https://www.1101.co.uk/news-and-blogs)
- Show submenu for Services Services
- Services
- [Artificial intelligence](https://www.1101.co.uk/artificial-intelligence)
- [Digital transformation](https://www.1101.co.uk/digital-transformation)
- [Digital security](https://www.1101.co.uk/digital-security)
- [Digital support](https://www.1101.co.uk/digital-support)
- [Case studies](https://www.1101.co.uk/case-studies)
- Show submenu for Industries Industries
- Industries
- [Manufacturing](https://www.1101.co.uk/manufacturing)
- [Engineering](https://www.1101.co.uk/engineering)
- [Construction](https://www.1101.co.uk/construction)
- [Legal](https://www.1101.co.uk/legal)
- [Not-for-profit](https://www.1101.co.uk/not-for-profit)
- [Resources](https://www.1101.co.uk/resources)
- Get Started
- [Remote support](https://1101remote.screenconnect.com/)
- [Support portal](https://1101.myportallogin.co.uk/)
- [Knowledgebase](https://app.eu.myglue.com/)
-
Get Started
# Cyber Essentials: April 2026 Updates
Cyber Essentials is getting its next scheduled update on 27 April 2026, when version 3.3 becomes the standard for all new assessment accounts.
If your organisation sets up its assessment account on or after that date, you’ll be measured against the new requirements. But if you open your account before the deadline, you’ll have six months to complete the assessment using the current version.
[IASME](https://iasme.co.uk/) reviews Cyber Essentials every year to keep it aligned with modern threats and everyday business technology. The 2026 round is less of a big shake up and more of a tidy up, but there are still a few changes worth knowing about.
In this blog, Marvin, our technical director and resident security guru, breaks down what’s changing and how it affects you.
What’s changing?
1\. MFA is now a strict requirement
The biggest update is around multi factor authentication. [IASME](https://iasme.co.uk/) has confirmed that MFA must be enabled wherever the option exists. If a cloud service offers MFA in any form, it must be switched on. If it isn’t, the assessment fails automatically.
This applies whether the MFA feature is free, included, paid for or connected through another service. Cyber Essentials already expected MFA, but v3.3 tightens the rules so that organisations can no longer leave some users or apps without it.
2\. Cloud services now have a clear definition
For the first time, Cyber Essentials formally defines what counts as a cloud service. [IASME](https://iasme.co.uk/) describes it as “an on demand, scalable service delivered on shared infrastructure, accessed online using an account and storing or processing organisational data”.
The aim is to remove the confusion that sometimes crept in around which tools needed to be included in scope. Under this definition, anything you log into that handles company data should be considered part of your assessment.
3\. Most changes are small and focused on clarity
[IASME](https://iasme.co.uk/) states that the majority of updates in v3.3 are minor adjustments. They exist to make definitions clearer, improve consistency and reduce the number of grey areas in the questionnaire.
These updates are not expected to significantly affect compliance for most organisations. Think of it less as new rules and more as polishing the wording so everyone is working from the same understanding.
4\. Marking criteria is being refined
Alongside the updated requirements document, [IASME](https://iasme.co.uk/) will publish revised marking guidance later in 2026. The only confirmed change so far is that MFA will be strictly enforced as a pass or fail check, with more refinements to follow.
Will this be a big change for most organisations?
Probably not. [IASME](https://iasme.co.uk/) has said clearly that the 2026 update should not have a major impact on most businesses. If your organisation is already following sensible cybersecurity practices, you’ll mostly just notice clearer wording and a firmer stance on MFA.
What you should do now
A few simple steps will help you prepare...
**1. Turn on MFA everywhere you can**
If any cloud service supports MFA, enable it for every account. This is the most important action to take.
**2. Check which cloud services you use**
The new definition means nothing can be left out of scope because it wasn’t clearly defined before.
**3. Look out for updated marking guidance**
[IASME](https://iasme.co.uk/) will release more details later in 2026.
How we can support you
At 1101, we help organisations strengthen their digital security, set up the right controls, and prepare for Cyber Essentials or Cyber Essentials Plus certifications.
If you’re planning to certify or renew under the new v3.3 rules, [contact us](https://www.1101.co.uk/contact) to untangle cloud scoping and make sure you meet (and exceed) the requirements.
**Tags:**
[Resources](https://www.1101.co.uk/news-and-blogs/tag/resources)
Post by [Marvin](https://www.1101.co.uk/news-and-blogs/author/marvin)
March 6, 2026 at 9:46 AM
Marvin is one of the directors at 1101 and a bit of a technical wizard. He specialises in cyber security and enjoys helping businesses stay protected. Whether he's strengthening security, tackling technical challenges or advising on best practice, Marvin combines deep technical expertise with a down-to-earth approach that clients value.
### Related articles
##### [ Resources • August 19, 2026 at 10:30 AM How Proactive IT Support Saves Your Business Time and Money 3 min read](https://www.1101.co.uk/news-and-blogs/how-proactive-it-support-saves-your-business-time-and-money-1101)
##### [.png?width=520&height=294&name=7%20Signs%20Your%20Business%20Has%20Outgrown%20Break-Fix%20IT%20Support%20(1).png) Resources • August 19, 2026 at 10:20 AM 7 Signs Your Business Has Outgrown Break-Fix IT Support 4 min read](https://www.1101.co.uk/news-and-blogs/7-signs-your-business-has-outgrown-break-fix-it-support-1101)
##### [ Resources • August 7, 2026 at 11:27 AM What Is Managed IT Support and Does Your Business Need It? 3 min read](https://www.1101.co.uk/news-and-blogs/what-is-managed-it-support-and-does-your-business-need-it-1101)
#### Subscribe to our e-newsletter
From major milestones and updates to team triumphs and everyday wins, *The Signal Tower* keeps you connected to what’s happening across 1101.
- [Terms & Conditions](https://www.1101.co.uk/hubfs/PDFs/2026-07-15-1101-Terms-and-Conditions.pdf)
- [Privacy Policy](https://www.1101.co.uk/hubfs/PDFs/Privacy%20Policy.pdf)
Registered address: Sum Studios, 1 Hartley Street, Sheffield, S2 3AQ. Company number: 06801097 (registered in England and Wales).
©2026 1101 Limited. All rights reserved. [Privacy Policy](https://www.1101.co.uk/hubfs/PDFs/Privacy%20Policy.pdf)
-
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Marvin",
"url" : "https://www.1101.co.uk/news-and-blogs/author/marvin"
},
"dateModified" : "2026-09-29T14:24:57.729Z",
"datePublished" : "2026-03-06T09:46:14.000Z",
"headline" : "Cyber Essentials | April 2026 Cyber Security Updates | 1101",
"image" : [ "https://www.1101.co.uk/hubfs/News%20and%20blogs/Cyber%20Essentials_%20April%202026%20Updates.png" ],
"mainEntityOfPage" : {
"@id" : "https://www.1101.co.uk/news-and-blogs/cyber-essentials-april-2026-updates",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://www.1101.co.uk/hubfs/Branding/1101%20logo%20-%20multi.png"
},
"name" : "1101"
}
}
```
```json
{
"@context" : "https://schema.org",
"@id" : "https://www.1101.co.uk/#organization",
"@type" : "Organization",
"logo" : "https://www.1101.co.uk/path-to-logo.png",
"name" : "1101",
"sameAs" : [ "https://www.linkedin.com/company/1101" ],
"telephone" : "+44 333 444 1101",
"url" : "https://www.1101.co.uk"
}
```
```json
{
"@context" : "https://schema.org",
"@id" : "https://www.1101.co.uk/#localbusiness",
"@type" : "ProfessionalService",
"address" : {
"@type" : "PostalAddress",
"addressCountry" : "GB",
"addressLocality" : "Sheffield",
"postalCode" : "S2 3AQ",
"streetAddress" : "Sum Studios, 1 Hartley Street"
},
"areaServed" : {
"@type" : "Country",
"name" : "United Kingdom"
},
"name" : "1101",
"parentOrganization" : {
"@id" : "https://www.1101.co.uk/#organization"
},
"priceRange" : "££",
"telephone" : "+44 333 444 1101",
"url" : "https://www.1101.co.uk"
}
```
```json
{
"@context" : "https://schema.org",
"@id" : "https://www.1101.co.uk/#website",
"@type" : "WebSite",
"inLanguage" : "en-GB",
"name" : "1101",
"publisher" : {
"@id" : "https://www.1101.co.uk/#organization"
},
"url" : "https://www.1101.co.uk"
}
```