Home / Certifications / Defence Cyber Certification Level 1
IASME-assured Certification Body · NCSC-assured Cyber Advisor

Defence Cyber Certification Level 1

Defence Cyber Certification Level 1 for organisations in the UK defence supply chain whose contracts require it. Builds on Cyber Essentials.

Get certified from £5,495Book a free call
What's included

Everything you need to get certified

  • Assessment against the DCC Level 1 requirements
  • Certification from an accredited DCC Level 1 Certification Body
  • Cyber Essentials included if you don't already hold it (choose the bundle)

Who it's for

Suppliers whose defence contracts specify DCC Level 1.

Good to know

  • The DCC level you need is set by your contract. If you're not sure, ask your prime contractor or call us.
About the certification

What is Defence Cyber Certification Level 1?

Defence Cyber Certification (DCC) was launched in 2025 by the Ministry of Defence and IASME, giving defence suppliers a single, organisation-level certification for UK defence procurements, independently assessed by an accredited Certification Body.

Level 1 is for contracts with low to moderate cyber risk. It covers 101 controls, with Cyber Essentials as the technical baseline, and goes well beyond the technical basics into how your organisation governs and manages cyber risk. We are a DCC Level 1 Certification Body.

101 controls

Controls covering governance and risk management as well as technical security, evidenced across your whole organisation.

Built on Cyber Essentials

Cyber Essentials is required. If you don't hold it yet, choose the bundle and we'll certify both.

Valid for three years

DCC lasts three years, with an annual check-in, as long as your Cyber Essentials certificate stays valid.

How it works

From contract requirement to certificate

  1. Confirm your level

    Check the DCC level in your MOD contract, or ask us and we'll help you confirm it.

  2. Prepare

    Achieve Cyber Essentials, review your policies and controls against the Level 1 requirements, and gather your evidence.

  3. Assessment

    Our assessors review your evidence and may ask for interviews or demonstrations to confirm controls are in place.

  4. Certificate

    Once you meet the requirements, we issue your DCC Level 1 certificate, then check in with you each year.

Questions

Defence Cyber Certification Level 1 FAQs

Do we need Cyber Essentials first?
DCC builds on Cyber Essentials. If you don't hold it, choose the Cyber Essentials + DCC Level 1 bundle.
Which DCC level do we need?
Your contract or prime contractor will specify it. We can help you check before you order.
How long does DCC certification last?
Three years, with an annual check-in. You also need to keep your Cyber Essentials certification valid by renewing it each year.
How long does it take to get Level 1?
It depends on how much of the evidence you already have. Organisations with mature policies and Cyber Essentials in place can move quickly; others need time to put policies, records and controls in place first.
What's the difference between Level 1 and Level 2?
Level 2 is for higher-risk contracts. It has 139 controls and requires Cyber Essentials Plus as well as Cyber Essentials.
Does one certificate cover all our defence contracts?
A DCC certificate covers contracts that require your certified level or below.
Let's Talk Security

Not sure which certification you need?

Talk to one of our team, who will be happy to talk through your requirements.

DCC Level 0Cyber Essentials PlusBook a free call