My last place got Cyber Essentials (3 to 4 odd years ago) purely by ignoring half the network and systems and getting HR to fill the form in.
Without someone actually checking that what you have said you do is what you do its just a box ticking exercise where you always give the expected answer. How can you fail...
Also paying a company to do a check is also questionable as its in thier interest for you to pass and to keep paying them... Not sure how you get around this one though!
Biting the hand that feeds IT
