Normally no, this would be regarded as an instant fail as the software is unsupported (both went End of Life 14/01/2020).In circumstances where your organisation has paid for Extended Security Updates (ESU) from Microsoft for every device that is unsupported, this will be considered permissable as technically the software is supported.
The NCSC (National Cyber Security Centre) has condensed what was 5 accreditation bodies prior to April 1st down to one Cyber Essentials Partner (IASME Consortium) to improve on keeping testing standard consistent across the country.
Please visit this page for further information. Please be aware that the scheme has changed considerably as of April 1st 2020
When performing a Cyber Essentials Plus audit, the amount of machines that we test is dependant on the size of the organisation. We must a sample of each type of device on the network to ensure Cyber Essentials compliance. The goal is to test a number of devices that make up 90% of the organisation. […]
The scope section of the document helps us identify some additional information regarding the network that is to be certified. Whatever is involved in the scope, is the area of devices that are certified under the Cyber Essentials scheme. When filling out the scope section of the document consider the following: What area of the […]
Cyber Essentials is a verified self-assessment questionnaire completed by your organisation that clearly demonstrates your organisations compliance to the Cyber Essentials scheme.Cyber Essentials Plus is an audit of your network, and is a validation that the information provided in the Cyber Essentials questionnaire is correct and accurate.
Any organisation can apply for either certification. On many government (UK) contracts a prerequisite of either Cyber Essentials or Cyber Essentials Plus is required before a tender is granted. If applying for Cyber Essentials Plus your organisation must have already passed Cyber Essentials via IASME prior to a Cyber Essentials Plus audit.