What defence suppliers usually call us about
A contract asks for Defence Cyber Certification
The MOD gives each contract a Cyber Risk Profile, which sets the DCC level you need. Most suppliers are asked for Level 1.
A prime contractor is passing requirements down
Primes are expected to pass cyber requirements down their supply chains, so subcontractors are now asked for certificates too.
You need Cyber Essentials first
Every DCC level builds on Cyber Essentials, and Levels 2 and 3 need Cyber Essentials Plus. We can certify both.
Your whole organisation is in scope
DCC covers your organisation's essential functions and services, including essential cloud services, not just the systems used for MOD work.
The services that help most
Defence Cyber Certification Level 1
The level most defence suppliers need: 101 controls on top of Cyber Essentials.
Find out more →Defence Cyber Certification Level 0
Cyber Essentials plus three controls, for very low risk contracts.
Find out more →Cyber Essentials
The UK government-backed baseline, with a review before you submit.
Find out more →Cyber Essentials Plus
Hands-on technical audit of your Cyber Essentials controls.
Find out more →Incident Response Planning
A written, tested plan for when something goes wrong.
Find out more →Vulnerability Scanning & Remediation
Continuous scanning, prioritised fixes and verified closure.
Find out more →Defence suppliers FAQs
Which DCC level do we need?
Can you certify every level?
Do we need a defence contract to apply?
How long does certification last?
Further reading: Defence Cyber Certification: Do You Need It, and Which Level?
Have a contract or tender that mentions DCC?
Talk to one of our team, who will be happy to talk through your requirements and work with you to protect your organisation.