Cloudhouse has launched a free readiness assessment for organisations preparing for updated Cyber Essentials requirements, warning that the new rules could lead to more certification failures.

The revised framework introduces automatic failure if organisations miss a 14-day deadline for applying critical patches or do not enforce multi-factor authentication across cloud services where it is available. It also expands the scope of certification to cover all cloud services that store or process organisational data.

These changes mark a shift in how businesses are assessed under the UK cyber security scheme. Rather than treating certification as a periodic exercise, organisations will need to show they can maintain patching and identity controls in day-to-day operations.

The tighter requirements may prove difficult for companies running large or distributed IT estates, where patching schedules and access controls vary across systems. Businesses with legacy applications and complex dependencies may face particular pressure in meeting the 14-day patching window.

The readiness check is designed to help organisations identify gaps before certification. It assesses patching gaps, configuration drift and weak identity controls that could trigger an automatic failure under the revised rules.

Rule changes

Cyber Essentials is widely used by UK organisations as a baseline cyber security certification. The latest changes place greater emphasis on operational consistency, particularly around software updates and the use of multi-factor authentication in cloud environments.

Under the revised framework, missing a critical patching deadline becomes a direct reason for failure rather than a weaker indicator of non-compliance. The same applies when MFA is not in place across relevant cloud services, raising the stakes for organisations with uneven implementation across departments or platforms.

The expanded scope also adds to the workload for internal technology teams. By bringing all systems that handle organisational data into the assessment, the framework increases the number of assets and services that must be reviewed ahead of certification.

This may be especially challenging for businesses that rely on a mix of older applications, cloud platforms and third-party services. In such environments, applying critical patches quickly can be constrained by compatibility issues, testing requirements or operational dependencies.

Mat Clothier, Chief Executive Officer at Cloudhouse, said the updated rules mean organisations can no longer approach certification as a one-off audit task. “Cyber Essentials has stopped being a point-in-time exercise and has become a test of day-to-day operational control. The risk is that organisations assume they’re compliant, only to fail instantly because of a missed patch or a gap in MFA coverage. That’s exactly why we’re offering the readiness assessment – to give teams a clear view of where they stand before they’re tested.”

Operational pressure

For many organisations, the main challenge will be not understanding the rules but applying them consistently across complex estates. Patching policies may exist on paper, but proving that every relevant system has been updated within the required timeframe is often harder in practice.

Configuration drift is another area likely to come under scrutiny under the tougher framework. Changes introduced over time across servers, cloud environments and user settings can create compliance gaps, even when an organisation believes it has standard controls in place.

Identity management is also facing closer scrutiny as cloud services become more central to business operations. Incomplete MFA coverage can emerge when different teams adopt separate services or when older accounts remain outside current access policies.

Cloudhouse, founded in 2010, focuses on application estates and operational control across complex IT environments. The readiness check is intended to give organisations a practical starting point for reviewing exposure and prioritising the controls needed under the revised Cyber Essentials standard.

The company works with organisations including GE Healthcare, National Australia Bank and HM Government. The assessment is designed to help teams identify where they may be vulnerable to automatic failure because of missed patches, configuration drift or weak identity controls.

Zymurgorium, which launched back in 2016, is a Manchester-based distillery that sells an “eclectic mix of brews and other unique offerings”.

Its website adds: “Our mission is to provide patrons with exceptional brewing experiences and a journey through diverse flavors.

“We offer a range of products, from fruit and vegetable beers to innovative distillation techniques, and from ancient ciders to honey wines.

“With a vast selection of ingredients and an almost limitless array of brewing and distilling styles, our goal is to keep your taste buds on an exciting adventure.”

Zymurgorium sells meads, craft beers, ciders, gin, liqueurs, and other spirits, while non-alcoholic options are also available.

Some of its products are available to buy at Tesco, while B&M has also stocked Zymurgorium products in the past.

Zymurgorium closes down after entering administration

After 10 years in business, Zymurgorium ceased trading late last year.

Nicola Clark and Steven Illes from MHA, who have been working with stakeholders since February, were appointed joint administrators on March 26, according to The Gazette.

This comes after Zymurgorium’s cocktail bar, Project Halcyon, closed earlier this year.

However, the bar is set to open again shortly, after a new buyer was found.

MHA’s Nicola Clark said: “We are pleased to have been able to sell the assets of the popular Project Halcyon bar in the St John area of the city to a third party which will mean that its doors will shortly be opening again.

“We are also actively exploring the sale of the trademarks and the recipes of Zymurgorium which made it such a distinctive brand.”

Other major UK companies that have closed or entered administration in 2026

It has been a rough start to 2026 for the UK high street, with a wide range of businesses entering administration or closing down.

Major high street retailers have been forced to close stores, including:

Several other retailers have fallen into administration, including:

Major fashion retailer LK Bennett also entered administration back in January and has now closed all its remaining stores.

Meanwhile, four UK travel companies have closed in 2026:

EcoJet Airlines, billed as “the world’s first Electric Airline”, also entered liquidation after just three years, resulting in the cancellation of all planned flights.

What has a nose, wings and runs off of hydrogen? Ecojet 😎 pic.twitter.com/y8QGiBdFe2

— ecotricity (@ecotricity) July 17, 2023

UK delivery company Yodel is set to be phased out over the coming months after being acquired by InPost.

It’s also been reported that Morrisons is looking to sell some of its in-store pharmacies as it continues to cut costs.

It’s not been all bad news for the UK high street, with several major brands announcing new store openings for 2026, including Aldi, M&S, and Superdrug.

Were you a fan of Zymurgorium’s products? Let us know in the comments below.

Clementine Lodge in Bicester, built by Churchill Living, received a five-star rating in an independent customer satisfaction survey conducted by the Home Builders Federation (HBF).

This marks the 11th consecutive year that Churchill Living has achieved the highest rating, the only specialist retirement housebuilder to earn five stars in 2026.

Spencer J McCarthy, Chairman & CEO of Churchill Living, said: “We are delighted to have maintained our top 5 Star customer satisfaction rating for yet another year, setting us apart from other providers in the specialist retirement sector.

“To achieve this success based on an independent survey of our Owners is a testament to the effort that goes in from our whole team, ensuring that we continue to deliver the highest quality apartments, with exceptional customer service, and unrivalled peace of mind for our customers and their families.”

The HBF’s national survey measures how satisfied customers are with the quality of their new homes and asks whether they would recommend their housebuilder to others.

Churchill Living’s consistent five-star rating reflects its commitment to providing secure, comfortable, and purpose-built homes for older adults.

Clementine Lodge offers a selection of low-maintenance one and two-bedroom retirement apartments designed to support independent living with the benefits of security and community in central Bicester.

The development is part of Churchill Living’s broader focus on creating safe, attractive, and sustainable homes for later life through thoughtful design and customer-focused service.