@falken @neil it's been a while since I did this but we certainly passed cyber essentials with Linux boxes. IIRC the main issue was creating a separate account to run sudo with and installing a virus scanner.