Cyber Essentials Plus provides independent confirmation that basic security controls are working in practice - not just on paper. Here's why we chose to complete it, what it does (and doesn't) prove, and why we treat it as a sensible security baseline.