The Cyber Essentials scheme is largely self sustaining. The small cost to Government is mostly made up from proportions of time from members of staff within the National Cyber Security Centre and the Department for Digital, Culture, Media and Sport. This includes governance, technical oversight, policy development and contract management.
The original start-up costs included an injection of investment from the Government's National Cyber Security Programme in 2014 of £766,000, but this does not include the staffing costs from the three departments which originally developed the scheme: GCHQ, the Department for Business, Innovation and Skills, and the Cabinet Office.
The financial model for delivery of the Cyber Essentials scheme involves Government overseeing the governance, technical oversight, policy development and contract management of five industry Accreditation Bodies. The Accreditation Bodies are responsible for marketing the scheme along with their Certification Bodies and providing the certificates to those wishing to achieve certification. The Accreditation Bodies and Certification Bodies charge a fee for the issuing of certificates and any related services provided.