Cyber Essentials v3.3 (Danzell)2
Applies to new assessments. Cloud services cannot be excluded from scope, and missing MFA where available is an automatic failure.
Position discovery as certification readiness, which brings the security owner into the deal