Cyber Essentials question · Secure configuration
Have you removed or disabled software, user accounts and services that you don't use?
Why assessors ask this
Every extra account or service is another way in. Remove what you don't need.
What “good” looks like for Secure configuration
- Remove unused user accounts, software and services from your devices.
- Change or remove every default/vendor password.
- Set a strong-password baseline (length + lockout) or add MFA where a password is the only control.
See where you stand in 5 minutes
Answer the Cyber Essentials questions in plain English and get a per-control readiness verdict — free, no login needed, and we don't store your answers.
Start the free readiness check →Part of the Secure configuration control.
This is a free readiness / gap report to help you prepare — it is not a certification, and we are not an IASME Certification Body. To certify, you apply through an accredited Certification Body.