Home / Sectors / Defence suppliers Defence suppliers and subcontractors

Cyber security for defence suppliers and subcontractors

Win and keep defence work with Cyber Essentials and Defence Cyber Certification from an IASME-assured Certification Body that certifies the levels most suppliers need.

Sound familiar?

What defence suppliers usually call us about

A contract asks for Defence Cyber Certification

The MOD gives each contract a Cyber Risk Profile, which sets the DCC level you need. Most suppliers are asked for Level 1.

A prime contractor is passing requirements down

Primes are expected to pass cyber requirements down their supply chains, so subcontractors are now asked for certificates too.

You need Cyber Essentials first

Every DCC level builds on Cyber Essentials, and Levels 2 and 3 need Cyber Essentials Plus. We can certify both.

Your whole organisation is in scope

DCC covers your organisation's essential functions and services, including essential cloud services, not just the systems used for MOD work.

Questions

Defence suppliers FAQs

Which DCC level do we need?
The level is set by the Cyber Risk Profile on your contract. Most defence suppliers need Level 1. If you're unsure, ask your MOD delivery team or the prime contractor you supply, or call us and we'll help you work it out.
Can you certify every level?
We certify Defence Cyber Certification Levels 0 and 1, the levels most suppliers need, as well as Cyber Essentials and Cyber Essentials Plus.
Do we need a defence contract to apply?
No. You can apply without a current contract, and many suppliers certify early so it's in place before a tender asks for it.
How long does certification last?
Three years, with an annual check that your controls are still in place. Cyber Essentials or Cyber Essentials Plus still needs renewing every year.
Let's Talk Security

Have a contract or tender that mentions DCC?

Talk to one of our team, who will be happy to talk through your requirements and work with you to protect your organisation.