Cyber Essentials Plus 2025 and What Changes in the April Willow Update
The NCSC's April 2025 Willow update to Cyber Essentials Plus introduces passwordless authentication as an approved method, updates vulnerability terminology from patches to vulnerability fixes, and tightens scoping and verification requirements. Whilst the changes are relatively minor, they align the scheme more closely with NIST standards and reflect modern security practices including remote working scenarios.