CE-Plus Findings Template V2 - Test details and findings

Aug 31, 2026

Upload by Eden

The document provides an introduction for a Cyber Essentials Plus on-site vulnerability assessment report template. It explains how PASS/FAIL status is determined across the Cyber Essentials Plus Common Test Specification V1.2 and clarifies the purpose and scope of testing, including what is explicitly excluded such as APT-focused testing, complex application testing, database audits, and denial-of-service attacks. It also states that detailed findings and additional information are organized in later sections, including failings, action points, observations, and the overall conclusion.

LanguageEnglish

CategoryForms

FormatDOCX

Pages19

Reading Time7 min

AccessFree to download

1. Introduction

1.1 Disclaimer

2. Certification Body Details

3. Client Details

4. Business Scope

4.1 Target systems

5. Executive summary

5.1 Value added reporting

6. Test details and findings

6.1 Test 1 - External Vulnerability Scan for stated IP range

6.2 Test 2 – Email Binaries and Payloads

6.3 Test 3 – Web site page with URLs linking to binaries

6.4 Test 4 – Authenticated vulnerability scan of host(s)

6.5 Mobile Devices

7. Additional Information

7.1 Test 1 - External Vulnerability Scan for stated IP range

7.2 Test 2 – Email Binaries and Payloads

7.3 Test 3 – Web site page with URLs linking to binaries

7.4 Test 4 – Authenticated vulnerability scan of host(s)

7.5 Value added checks - internal

7.6 Value added checks – website (optional)

8. Summary of Failings, Action Points and Observations.

8.1 Failings

8.2 Action Points

8.3 Observations

9. Conclusion

Contents TOC \o "1-3" \h \z \u HYPERLINK \l "_Toc417035181" 1. Introduction PAGEREF _Toc417035181 \h 3 HYPERLINK \l "_Toc417035182" 1.1 Disclaimer PAGEREF _Toc417035182 \h 4 HYPERLINK \l "_Toc417035183" 2. Certification Body Details PAGEREF _Toc417035183 \h 4 HYPERLINK \l "_Toc417035184" 3. Client Details PAGEREF _Toc417035184 \h 4 HYPERLINK \l "_Toc417035185" 4. Business Scope PAGEREF _Toc417035185 \h 6 HYPERLINK \l "_Toc417035186" 4.1Target systems PAGEREF _Toc417035186 \h 6 HYPERLINK \l "_Toc417035187" 5. Executive summary PAGEREF _Toc417035187 \h 7 HYPERLINK \l "_Toc417035188" 5.1 Value added reporting PAGEREF _Toc417035188 \h 7 HYPERLINK \l "_Toc417035189" 6 Test details and findings PAGEREF _Toc417035189 \h 7 HYPERLINK \l "_Toc417035190" 6.1 Test 1 - External Vulnerability Scan for stated IP range PAGEREF _Toc417035190 \h 7 HYPERLINK \l "_Toc417035191" 6.2 Test 2 – Email Binaries and Payloads PAGEREF _Toc417035191 \h 8 HYPERLINK \l "_Toc417035192" 6.3 Test 3 – Web site page with URLs linking to binaries PAGEREF _Toc417035192 \h 9 HYPERLINK \l "_Toc417035193" 6.4 Test 4 – Authenticated vulnerability scan of host(s) PAGEREF _Toc417035193 \h 10 HYPERLINK \l "_Toc417035194" 6.5 Mobile Devices PAGEREF _Toc417035194 \h 11 HYPERLINK \l "_Toc417035195" 7 Additional Information PAGEREF _Toc417035195 \h 13 HYPERLINK \l "_Toc417035196" 7.1 Test 1 - External Vulnerability Scan for stated IP range PAGEREF _Toc417035196 \h 13 HYPERLINK \l "_Toc417035197" 7.2 Test 2 – Email Binaries and Payloads PAGEREF _Toc417035197 \h 13 HYPERLINK \l "_Toc417035198" 7.3 Test 3 – Web site page with URLs linking to binaries PAGEREF _Toc417035198 \h 13 HYPERLINK \l "_Toc417035199" 7.4 Test 4 – Authenticated vulnerability scan of host(s) PAGEREF _Toc417035199 \h 14 HYPERLINK \l "_Toc417035200" 7.5 Value added checks - internal PAGEREF _Toc417035200 \h 16 HYPERLINK \l "_Toc417035201" 7.6 Value added checks – website (optional) PAGEREF _Toc417035201 \h 16 HYPERLINK \l "_Toc417035202" 8 Summary of Failings, Action Points and Observations. PAGEREF _Toc417035202 \h 17 HYPERLINK \l "_Toc417035203" 8.1 Failings PAGEREF _Toc417035203 \h 17 HYPERLINK \l "_Toc417035204" 8.2 Action Points PAGEREF _Toc417035204 \h 17 HYPERLINK \l "_Toc417035205" 8.3 Observations PAGEREF _Toc417035205 \h 17 HYPERLINK \l "_Toc417035206" 9 Conclusion PAGEREF _Toc417035206 \h 18 Revision history 1. Introduction Thank you for selecting [COMPANY NAME) to conduct the on-site vulnerability assessment against the Cyber Essentials Plus Common Test Specification V1.2 A copy of the test specification can be found at the following web address: https://www.cesg.gov.uk/servicecatalogue/cyber-essentials/Pages/Scheme-Library.aspx If the organisation is awarded a “fail” status for ANY test within this specification document, then it is deemed to have failed overall. Otherwise, a pass status is awarded. We are pleased to say that the company, within the scope specified in section 4, has been awarded a PASS Status. Unfortunately, on this occasion, the company has been awarded a FAIL status. Details of all failings and/or action points or can be found in section 7 of this report and these are summarised along with any observations to improve cyber security in section 8. The overall conclusion can be found in section 9. Section 7.5 contains a random sample of tests that do not form part of the Common Test Specification v1.2 therefore only passes and action points are awarded in this section, however, as your company has attested to complying with them in the questionnaire you should quickly address any issues found. The aim of the onsite vulnerability assessment is to identify easily exploitable vulnerabilities within an organisation’s Internet facing infrastructure and user workstati

FAQs

How is the overall PASS or FAIL status determined in the assessment?

A “fail” status for ANY test within the Cyber Essentials Plus specification results in an overall “fail”. Otherwise, a “pass” status is awarded.

What is the goal of the on-site vulnerability assessment?

It identifies easily exploitable vulnerabilities in an organisation’s internet-facing infrastructure and user workstations that create high exposure to potential attackers with low skill requirements.

What activities are explicitly out of scope for the Cyber Essentials Plus testing?

Advanced Persistent Threat-style targeting, complex application testing (thick client and web applications), database audits beyond trivial credential checks, and denial-of-service attacks in all forms are excluded.

Aug 31, 2026

Upload by Eden