All your answers must satisfy the assessor that the controls for all the aspects of risks to your system are in place and addressed to achieve Cyber Essentials Plus certification.