What this question is really asking
Describe your primary commercial or operational activity in plain terms. This is used for classification and sector benchmarking by IASME and the NCSC — it does not affect your assessment outcome. Keep it brief and accurate.
What satisfies this requirement
Select the applicable optionPrimary industry sector. Select from the provided list.
What to prepare before your assessor visit
Keep it factual and specific — 'financial services' is better than 'we provide solutions', and 'software development and managed IT services' is better than 'technology company'. This field is used for sector benchmarking and doesn't affect your assessment outcome, but vague answers can occasionally prompt assessors to ask clarifying questions about your scope.
How this question sits across CE versions
Does your organisation meet this requirement?
Answer 30 plain-English questions and find out exactly where you stand across all 5 Cyber Essentials control areas — with a prioritised list of what to fix first.