Strengthen Security, Stay Compliant.
Book a Cyber Essentials Consultation Across the UK, and Gibraltar
Robust Defence Against Cyber Threats
Competitive Advantage & Market Access
Lower Insurance Costs & Enhanced Trust
Professional Cyber Essentials Cerification
Cyber Essentials and Cyber Essentials Plus Certification are government-backed certification schemes designed to help organisations protect themselves against common cyber threats. Cyber Essentials provides a foundational level of security through a self-assessed framework, ensuring essential controls are in place to guard against the most frequent attacks. For businesses seeking a higher level of assurance, Cyber Essentials Plus builds on this foundation with an independent, hands-on technical audit that verifies the effectiveness of those security measures in practice. Together, these certifications offer organisations a clear, trusted pathway to strengthen their cyber defences and demonstrate their commitment to cybersecurity.
Cyber Essentials
Cyber Essentials is a UK government-backed certification scheme designed to help organisations establish a strong foundation of cyber protection. It covers five key technical controls, including firewalls, secure configuration, access controls, malware protection and patch management, to defend against the most common online threats. The basic certification process involves a self-assessment questionnaire, which is verified by an accredited certification body. This makes Cyber Essentials an accessible and cost-effective way for businesses of all sizes to prove they have fundamental cyber hygiene in place. By achieving this certification, organisations can significantly reduce their exposure to commodity cyber attacks and lay the groundwork for more advanced security measures.
Demonstrates a recognised baseline of cyber competence
Helps protect against common attacks like phishing and malware
Builds trust with customers, partners and suppliers
Cyber Essentials Plus
Cyber Essentials Plus offers a higher level of assurance by combining the standard Cyber Essentials self-assessment with a hands-on technical audit. During the audit, independent security professionals test your systems, such as devices and servers, to ensure that the five Cyber Essentials controls are fully implemented and effective in practice. This process gives stakeholders greater confidence that your defences are not just theoretical but actively working. Because of the rigorous testing and validation involved, Cyber Essentials Plus is ideal for businesses that need to demonstrate stronger security credentials to clients, regulators or within their supply chain. The certification is valid for 12 months and must be renewed, annually, showing a sustained commitment to cyber resilience.
Provides independent confirmation of actual security controls
Offers greater assurance for clients, partners and regulators
Supports eligibility for certain government contracts and tenders
Our Cyber Essentials Process
Preparation, Audit and Gap Analysis
Review your current IT security practices against the Cyber Essentials requirements. Identify any gaps or weaknesses in areas such as firewalls, secure configuration, user access control, malware protection, and patch management. Prepare your systems and policies to meet these standards.
Self-Assessment Questionnaire Submission
Complete and submit the Cyber Essentials self-assessment questionnaire online. This details your organisation’s cybersecurity controls and how they are implemented. The information is reviewed by a certification body to determine if your organisation meets the basic requirements.
Certification and Continuous Improvement
Once your assessment is approved, you receive your Cyber Essentials certificate. If pursuing Cyber Essentials Plus, an independent technical audit will follow. After certification, maintain and improve your cybersecurity measures regularly to stay protected and compliant.
"Every 60 seconds, an estimated 2,200 cyber attacks target businesses worldwide, highlighting the urgent need for robust cybersecurity measures to protect sensitive data and operations."
Cyber Essentials Certification Cost
Certification Cost Start At: £ xxxxx
Cyber Essentials is a recognised cyber security certification that helps small businesses prove they have key protections in place, and it is often used to meet supplier requirements, strengthen customer trust, and reduce day-to-day cyber risk. For a small business, Cyber Essentials pricing typically starts at around £320 + VAT for micro organisations (up to 9 employees), increasing as the organisation grows. Cyber Essentials Plus is the more advanced option because it includes independent technical testing and a deeper audit, so costs for a small business often start from around £1,499 + VAT and can rise depending on complexity. In both cases, prices vary based on the size of the organisation, the number of users and devices, the scope of systems being assessed, and whether you need additional support to remediate issues before certification. Both certifications are typically renewed annually, so it is worth treating them as part of an ongoing security programme rather than a one-off tick-box exercise.
Cyber Essentials is usually the lowest-cost route, based on a self-assessment style application
Cyber Essentials Plus includes technical verification and testing, which is why it costs more
Costs increase with organisation size, device counts, and the complexity of your IT environment
Preparation work can add to the total if you need fixes before you pass the assessment
Annual renewals are typical, so budgeting for ongoing compliance is sensible
Why Choose Cyber Essentials?
Opting for Cyber Essentials certification is a powerful step towards building a resilient cyber security framework. By completing the self-assessment, you reduce the risk of common, low-complexity attacks and demonstrate responsible risk management. It also often opens doors to contracts where this certification is required, particularly in public sector supply chains. Meanwhile, the Plus version provides stronger validation through a technical audit, helping you foster deeper trust among customers, improve insurance eligibility and raise your organisation’s cyber maturity. Ultimately, Cyber Essentials supports long-term security, enhances your reputation and strengthens operational stability.
Reduces risk of basic cyber threats through proven technical controls
Enhances credibility in competitive tenders and client conversations
Establishes a clear cyber security roadmap for future improvements
What Are The Benefits Of Cyber Essentials?
Cyber Essentials certification offers businesses clear benefits by establishing a robust baseline for cybersecurity. It helps protect your organisation from common cyber threats such as malware, phishing, and hacking attempts, significantly reducing the risk of security breaches. Achieving certification also demonstrates to clients, partners, and stakeholders that you take data protection seriously, boosting trust and enhancing your company’s reputation. Additionally, many government contracts and suppliers now require Cyber Essentials, making it essential for securing new business opportunities. The certification process encourages organisations to adopt best practices, improving overall IT hygiene and resilience. By following its guidelines, you can reduce downtime, avoid costly data breaches, and ensure compliance with legal and regulatory requirements.
Key benefits include:
Reduces risk of common cyber attacks
Builds customer and partner trust
Meets government and industry requirements
Improves overall IT security posture
Helps prevent costly data breaches and downtime
Top 10 Reasons to Get Cyber Essentials Certified
Cyber Essentials certification offers a range of compelling benefits that make it an essential step for businesses looking to strengthen their cybersecurity posture. From protecting against common cyber threats to boosting customer trust and opening doors to government contracts, the scheme provides practical, recognised measures to safeguard your organisation. Whether you’re a small business aiming to secure your digital environment or a larger enterprise needing to meet compliance requirements, Cyber Essentials helps you build a robust defence against cyber risks. The following top 10 reasons highlight why achieving this certification can improve your security, reputation, and business opportunities, making it a smart investment in your company’s future.
1. Protects Against Common Cyber Threats
Cyber Essentials is designed to shield your business from the most frequent cyber threats such as malware, phishing attacks, ransomware, and hacking attempts. These threats target vulnerabilities in your IT infrastructure and can cause serious disruptions, data loss, and financial damage. By implementing the Cyber Essentials controls, you put essential safeguards in place, such as firewalls, secure configuration, access controls, and malware protection, significantly reducing your risk. This basic level of defence not only helps protect your sensitive data and systems but also minimises downtime caused by attacks. The scheme is especially beneficial for small to medium-sized businesses that might lack extensive IT resources but still require strong protection. Cyber Essentials creates a solid security foundation, making it much harder for attackers to breach your defences.
Blocks common attack vectors like phishing and ransomware
Protects sensitive business and customer data
Reduces chances of costly downtime and disruption
2. Boosts Customer and Partner Confidence
Achieving Cyber Essentials certification sends a clear message to your customers, partners, and suppliers that your organisation takes cybersecurity seriously. In today’s digital environment, clients are increasingly aware of cyber risks and prefer to do business with companies that demonstrate robust security practices. Certification acts as an independent verification of your IT security measures, reassuring stakeholders that you meet recognised standards. This trust can be a powerful differentiator in competitive markets, helping you win new contracts and retain existing clients. Additionally, many suppliers and larger organisations require their partners to be Cyber Essentials certified as part of their own risk management. Being certified can therefore open doors to new business opportunities and strengthen relationships across your supply chain.
Demonstrates commitment to cybersecurity best practices
Enhances trust with customers and business partners
Opens access to new contracts and supplier opportunities
3. Mandatory for Many Government Contracts
For businesses seeking to work with the UK government or supply public sector organisations, Cyber Essentials certification has become a critical requirement. Many government tenders now mandate Cyber Essentials as a minimum standard for IT security to ensure that contractors can protect sensitive data and systems. This requirement applies to a wide range of sectors, including healthcare, education, construction, and IT services. Without certification, companies risk being disqualified from bidding on these contracts, which can be a significant loss of business opportunity. By obtaining Cyber Essentials, you not only meet compliance obligations but also demonstrate your readiness to operate securely within regulated environments. This gives you a competitive advantage and helps ensure your business remains eligible for valuable public sector work.
Required for most UK government and public sector contracts
Ensures compliance with public sector IT security standards
Avoids disqualification from bidding on government tenders
4. Helps Prevent Data Breaches
Cyber Essentials focuses on implementing key security controls that reduce the risk of data breaches. By addressing vulnerabilities such as weak passwords, unpatched software, and unsecured internet connections, businesses can significantly lower the chances of sensitive information being exposed or stolen. Data breaches can be costly, damaging your company’s finances and reputation. With Cyber Essentials, you put practical safeguards in place that minimise these risks and demonstrate to clients and partners that you take data protection seriously. This proactive approach also aids compliance with data protection laws such as GDPR, which requires organisations to protect personal data effectively.
Protects against common entry points for hackers
Supports compliance with GDPR and other regulations
Reduces financial and reputational risks associated with breaches
5. Enhances Business Continuity
Cybersecurity incidents like ransomware attacks or system compromises can disrupt operations, leading to downtime and lost revenue. Cyber Essentials helps businesses build a more resilient IT environment by securing critical systems and networks. This means fewer interruptions and quicker recovery when issues arise. Maintaining business continuity ensures that your customers and partners experience reliable service without disruption. The certification process also encourages regular updates and monitoring, keeping your defences strong against evolving threats. Ultimately, this minimises operational risks and supports long-term growth.
Reduces risk of downtime and operational disruption
Promotes regular security updates and monitoring
Helps maintain reliable customer and partner services
6. Improves Supplier and Client Confidence
Obtaining Cyber Essentials certification sends a clear message to suppliers and clients that your organisation prioritises cybersecurity. Many businesses now require their partners to have recognised certifications to reduce risks within their supply chain. By achieving Cyber Essentials, you meet these expectations and strengthen your credibility in the market. This can give you an edge when bidding for contracts or negotiating deals. Demonstrating robust security measures reassures stakeholders that their data and interests are protected, fostering trust and long-term business relationships.
Meets supplier and client cybersecurity requirements
Strengthens credibility and trust in the market
Supports successful contract bids and partnerships
7. Provides a Competitive Advantage
In a crowded marketplace, Cyber Essentials certification can differentiate your business from competitors. It signals to potential clients and partners that you have taken meaningful steps to secure your IT systems and data. This competitive advantage can be crucial when customers are deciding between service providers or suppliers. It also aligns with growing industry standards that prioritise security and risk management. By highlighting your certification, you position your organisation as a responsible and trustworthy choice, which can lead to increased business opportunities.
Differentiates your business in competitive markets
Demonstrates commitment to security and risk management
Attracts security-conscious clients and partners
8. Access to Government Contracts
Many UK government departments and agencies require suppliers to hold Cyber Essentials certification as a minimum cybersecurity standard. Achieving certification opens the door to bidding on a wide range of public sector contracts, which might otherwise be inaccessible. This is particularly valuable for small and medium-sized businesses looking to expand into government work. Being Cyber Essentials certified signals that your organisation meets government cybersecurity expectations, streamlining procurement processes and increasing your chances of success in public tenders.
Meets mandatory government supplier requirements
Opens opportunities for public sector contracts
Simplifies procurement and tendering processes
9. Encourages a Security-Minded Culture
The process of preparing for Cyber Essentials certification promotes awareness and education across your organisation. It encourages staff to understand their role in maintaining security, such as recognising phishing attempts and following best practices. Building this security-minded culture reduces human error, which is a common cause of breaches. Employees become active participants in protecting the business, making your defences stronger overall. This cultural shift also supports ongoing compliance and helps maintain your security posture beyond the certification process.
Raises employee cybersecurity awareness
Reduces risks caused by human error
Fosters ongoing commitment to security best practices
10. Supports Future Security Improvements
Cyber Essentials provides a solid foundation for your cybersecurity strategy, making it easier to build on over time. Once certified, businesses can pursue more advanced standards like Cyber Essentials Plus or ISO 27001 to further enhance their security. The certification process helps identify existing gaps and areas for improvement, guiding your investment in technology and training. This structured approach ensures your security evolves in line with new threats and business growth, giving you confidence that your defences remain effective.
Establishes a baseline for continuous security improvement
Facilitates progression to advanced certifications
Guides strategic investments in security technology and training
Assessment vs Audit
Cyber Essentials Assessment vs Cyber Essentials Audit
A Cyber Essentials assessment is the first stage of the certification process and focuses on verifying whether a business meets the five core controls required by the scheme. It involves answering a detailed self-assessment questionnaire covering areas such as firewalls, secure configuration, access control, malware protection, and patch management. This assessment is usually completed online and reviewed by an accredited certification body. It gives organisations a strong baseline understanding of their cyber security posture and highlights any areas that need improvement before seeking more advanced certification.
A Cyber Essentials audit is a deeper, more technical verification carried out as part of Cyber Essentials Plus. During an audit, qualified assessors test your systems directly to confirm that the controls are not only documented but effectively implemented. This includes vulnerability scanning, configuration checks, and practical security tests on devices. An audit provides stronger assurance and is ideal for businesses that need a higher level of validation, particularly those handling sensitive data or working with regulated industries.
Key Differences
Cyber Essentials assessment is self assessed.
Cyber Essentials audit involves hands on technical testing.
Assessment verifies policies and processes.
Audit confirms controls are working in real environments.
Audit offers higher assurance for clients and partners.
Our IT support services give your business fast fixes, proactive monitoring, and reliable experts who keep everything running without disruption. We stop problems before they happen and keep your systems secure, smooth, and ready for work. Let us handle the tech so you can focus on growing your business.
Our security services protect your business with strong digital and physical defences that keep threats out and operations running smoothly. We secure your network, devices, data, and premises with proactive monitoring, advanced protection tools, and fast response when issues arise. From cyber attacks to unauthorised access, we help you stay safe.
Service improvement is about more than fixing what is broken. It is about continuously refining how your IT services are delivered so they remain efficient, reliable, and aligned with your business goals. Our service improvement approach focuses on analysing performance, identifying gaps, and implementing practical enhancements
Let's Connect + Follow us + Keep up to date .
Stay updated with our latest projects, technologies, and services. | 
on FACEBOOK & LINKEDIN | Professional IT Services
Commonly Asked Questions About Cyber Essentials Certification
We have gathered the most frequently asked questions about our Cyber Essentials Certification to help you better understand how we protect your business. If you need further information, please don’t hesitate to get in touch. You can also explore our detailed Frequestly Asked Questions (FAQs), for in-depth answers on all our solutions and support.
What is Cyber Essentials and how does it differ from Cyber Essentials Plus?
Cyber Essentials is a UK government-backed certification designed to help organisations protect themselves against the most common cyber threats. It focuses on five key areas: firewalls, secure configuration, user access control, malware protection, and security updates. Organisations complete a self-assessment questionnaire confirming they have these controls in place.
Cyber Essentials Plus includes everything in the basic scheme but adds a thorough, independent technical audit carried out by an accredited assessor. This involves vulnerability scans and hands-on testing of your systems to confirm that your cyber defences are effective in practice. The Plus certification provides a higher level of assurance to customers, partners, and regulators, proving that your security controls are not only planned but actively working.
Cyber Essentials is a self-assessment
Cyber Essentials Plus involves independent technical verification
Plus-level certification is often required for government contracts
Both focus on core cyber security controls
Plus provides stronger assurance to stakeholders
Who is eligible to apply for Cyber Essentials certification?
Cyber Essentials is suitable for organisations of all sizes and sectors across the UK. Whether you are a sole trader, small business, or a large corporation, this scheme provides a foundational level of cyber protection. The certification applies to all systems and devices within your defined scope that connect to the internet or handle organisational data.
When scoping your certification, you must include all internet-facing devices, cloud services, and company-owned endpoints, even if employees work remotely. User-owned devices connected to your network may also fall within scope. You can choose to certify your entire organisation or a subset, but clear documentation of the scope is essential.
Open to businesses of any size or sector
Must include all internet-connected systems in scope
Remote and user-owned devices may be included
Scope can be organisation-wide or departmental
Clear scoping is critical for successful certification
How much does Cyber Essentials certification cost for my organisation?
The cost for Cyber Essentials varies depending on the size of your organisation and the certification level you pursue. Basic Cyber Essentials, involving a self-assessment, is generally affordable, with prices starting from a few hundred pounds. This makes it accessible for small to medium businesses seeking to boost their cyber defences.
Cyber Essentials Plus is more expensive because it requires an accredited third-party assessor to conduct technical testing of your systems, including vulnerability scans and malware checks. This audit involves a greater investment in time and resources.
Remember to consider additional internal costs such as preparing your systems, patching vulnerabilities, and compiling evidence. The benefits of certification, including eligibility for government contracts, improved customer confidence, and reduced cyber risk, often outweigh the initial expense.
Basic certification costs a few hundred pounds
Plus certification includes higher fees for technical audit
Internal preparation and remediation add to costs
Costs scale with organisation size and scope
Certification often saves money by preventing breaches
What are the five technical controls Cyber Essentials requires?
Cyber Essentials requires organisations to implement five essential security controls to protect against common cyber threats. These controls form the backbone of your cybersecurity framework and include:
- Boundary Firewalls and Internet Gateways – Protecting your network’s edge against unauthorised access.
- Secure Configuration – Ensuring systems and devices are securely set up, removing unnecessary services.
- User Access Control – Restricting user permissions to the minimum necessary.
- Malware Protection – Using antivirus and anti-malware tools to detect and block malicious software.
- Security Update Management – Keeping software and devices up to date with security patches.
By implementing these, your organisation significantly reduces vulnerability to cyberattacks such as malware infections, phishing, and hacking attempts.
Protects network perimeter via firewalls
Requires secure device and system setup
Limits user access to essential privileges only
Uses anti-malware tools for protection
Ensures timely application of software patches
How long does the certification process take from start to finish?
The duration of the Cyber Essentials certification depends largely on the organisation’s existing security posture and the certification level pursued. For the basic self-assessment, the process can take anywhere from a few days to a few weeks. This includes completing the questionnaire, gathering evidence, and submitting your application.
Cyber Essentials Plus requires more time due to the independent technical audit. The audit includes vulnerability scans, internal device testing, and possible on-site assessments. If any vulnerabilities are found, your organisation will need time to fix these issues before certification is granted.
Planning ahead is crucial, particularly for Plus certification, as the audit scheduling and remediation phase can extend the timeline. Organisations with mature security controls usually move faster through the process.
Self-assessment can be completed in days or weeks
Plus requires scheduling and completing a technical audit
Time is needed to remediate vulnerabilities if found
Organisations with mature controls certify more quickly
Proper planning helps avoid delays
What evidence do I need to provide for Cyber Essentials certification?
To successfully achieve Cyber Essentials certification, you need to provide evidence demonstrating that your organisation has implemented the five key security controls effectively. For the basic Cyber Essentials, this evidence typically includes completed self-assessment questionnaires outlining your firewall configurations, software update processes, access controls, and malware protection measures.
You must also show documented policies or procedures supporting these controls, such as patch management schedules or user access protocols. Screenshots, configuration files, and vendor statements can also be used to support your answers.
For Cyber Essentials Plus, the independent technical assessor will verify these controls through direct testing, but you will still need to provide documentation during the audit process. Clear, organised, and up-to-date evidence helps ensure a smooth certification process and reduces the chance of delays or rejections.
Completed self-assessment questionnaire
Firewall and network configuration details
Patch management policies and schedules
User access control documentation
Antivirus and malware protection reports
Can Cyber Essentials help my business win government contracts?
Yes, Cyber Essentials certification is often a mandatory or highly recommended requirement for organisations bidding on many UK government contracts, especially those involving sensitive data or critical infrastructure. The scheme assures government bodies and public sector clients that you meet essential cyber security standards, reducing the risk of breaches or data loss.
Beyond compliance, having Cyber Essentials can give your business a competitive advantage by signalling to prospective clients that you take cybersecurity seriously. It builds trust, demonstrating your commitment to protecting data and managing cyber risks effectively.
Many larger private sector organisations also recognise Cyber Essentials as a baseline security requirement, so certification can help open doors to a broader market beyond government contracts.
Often mandatory for UK government contracts
Demonstrates commitment to cybersecurity standards
Builds trust with public and private sector clients
Enhances competitive positioning in tender processes
Supports compliance with data protection regulations
How often do I need to renew Cyber Essentials certification?
Cyber Essentials certification is valid for 12 months from the date it is awarded. To maintain certification status, organisations must undergo a renewal process annually. This involves reassessing your cyber security controls to ensure they remain effective and up to date.
Renewal requires completing the self-assessment questionnaire again, providing updated evidence of your security measures, and potentially undergoing another technical audit if you hold Cyber Essentials Plus. This regular review helps businesses stay ahead of evolving cyber threats and maintain continuous compliance.
Failing to renew on time means your certification will lapse, potentially affecting contract eligibility and client confidence, so it’s essential to plan renewals proactively.
Certification lasts 12 months
Annual reassessment and evidence submission required
Cyber Essentials Plus requires a new audit at renewal
Ensures ongoing protection against new threats
Prevents lapses that could impact contracts and reputation
What happens if my business fails the Cyber Essentials Plus audit?
If your business fails the Cyber Essentials Plus audit, it means the independent technical assessor identified significant vulnerabilities or gaps in your cyber security controls that need addressing before certification can be granted. The assessor will provide a detailed report outlining the issues found and recommendations for remediation.
You will then need to work on fixing these vulnerabilities, which might include updating software, reconfiguring firewalls, improving access controls, or strengthening malware defences. Once the necessary improvements are made, you can request a re-assessment to verify that the issues have been resolved.
Failing the audit is not uncommon for organisations new to certification, and it offers a valuable opportunity to improve security before external threats exploit weaknesses.
Detailed report with identified vulnerabilities
Recommendations for necessary remediation
Opportunity to fix issues before re-assessment
Helps strengthen overall cyber security posture
Certification granted only after successful re-test
How can Cyber Essentials certification improve my overall cyber security?
Cyber Essentials certification improves your overall cyber security by ensuring your organisation has implemented foundational controls that address the most common cyber threats. The scheme encourages a systematic approach to managing security risks, covering essential areas like firewalls, secure configurations, user access, malware protection, and patch management.
By following Cyber Essentials’ guidelines, businesses reduce vulnerabilities, minimise attack surfaces, and build stronger defences that are easier to manage and maintain. The certification process also promotes security awareness within the organisation, helping staff understand their role in protecting systems and data.
Achieving certification boosts your confidence in your security measures and provides external validation that your organisation is proactive about cyber defence.
Focuses on essential security controls
Reduces exposure to common cyber threats
Promotes a structured approach to security management
Enhances staff awareness and responsibility
Provides external assurance and confidence
Where do you offer cyber essential certification audits?
We offer Cyber Essentials certification audits across the entire UK, providing comprehensive support whether you are located in England, Wales, or Gibraltar. Our service covers major cities throughout these regions, ensuring accessibility and expert guidance wherever your business operates.
In England, we cover key locations including London, Manchester, Birmingham, Leeds, Liverpool, Bristol, Newcastle, Sheffield, Nottingham, and Southampton. In Wales, our audit services extend to Cardiff, Swansea, Newport, Wrexham, and Bangor. Additionally, we provide full Cyber Essentials audit and certification support in Gibraltar, catering to businesses seeking robust cyber security compliance in this strategic location.
Our flexible approach includes both remote and on-site assessments, allowing us to adapt to your specific needs while maintaining the highest standards of certification preparation and delivery. Wherever you are, SolidITSM is ready to help secure your business with expert Cyber Essentials certification audits.
Nationwide coverage across UK and Gibraltar
On-site and remote audit options available
Support for businesses in major English cities like London and Manchester
Comprehensive services for Welsh cities including Cardiff and Swansea
Tailored audits to meet local business requirements
Our Parners.
Our technical partners are carefully selected industry leaders, providing cutting-edge technology and reliable solutions that complement our services. By collaborating with trusted brands, we ensure our clients benefit from the highest quality hardware, software, and support. These partnerships enable us to deliver seamless integrations, enhanced security, and scalable systems tailored to your business needs, helping you stay ahead in a rapidly evolving digital landscape.
Our Core Services.
All Our Services.
Our Service Location.
Managed IT Services + Consultancy Services + HW & SW Procurement + Project Management + Cyber Security & Certification + Business & Service Improvements + Website Design Marketing