Defence Cyber Certification for UK Defence Suppliers
If you supply into UK Defence, there is now a clear date to work towards. The Ministry of Defence has asked all industry partners to achieve Defence Cyber Certification (DCC) Level 0 by 31 December 2026.
Cyber Essentials certification is a requirement for DCC Level 0. If you do not already have it in place, you will need to factor this into your plans ahead of the December deadline.
Whether you are already supplying the MOD, working through a prime contractor or preparing for future defence opportunities, Cyber Tec can help you understand what is required and move through certification with consistent support.
Get defence-ready. Get certified.
What is Defence Cyber Certification?
Defence Cyber Certification is a cyber security framework for UK defence suppliers, developed by the Ministry of Defence and IASME to strengthen security across the defence supply chain.
DCC provides independent assurance that your organisation meets the requirements for its level and gives you a recognised way to demonstrate this to defence customers.
There are four DCC levels, from 0 to 3, all underpinned by Cyber Essentials. The MOD has asked industry partners to achieve Level 0 by 31 December 2026, making the three Level 0 requirements and a valid Cyber Essentials certificate the immediate priority for suppliers that have not yet certified.
The key benefits of DCC
DCC Level 0 gives defence suppliers a recognised way to evidence cyber readiness and meet growing assurance expectations.
That gives customers, prime contractors and procurement teams recognised evidence of your cyber readiness, rather than relying solely on your organisation’s own assurances.
The Four DCC Levels, At a Glance
DCC has four certification levels, from Level 0 to Level 3, with requirements increasing in line with the cyber risk associated with the work being delivered.
The DCC level you need depends on the cyber risk associated with the work being delivered and is determined by the MOD or your prime contractor.
Why work with Cyber Tec?
Cyber Tec is an experienced cyber certification partner and an IASME-authorised Certification Body, helping organisations work through recognised cyber standards with practical, human support.
If the 31 December deadline has put DCC onto your immediate to-do list, we can help you understand where you stand and what the assessment will expect from you.
Clarity
DCC requirements can feel complex, particularly if this is your first defence certification. We translate the scheme into plain English, so you understand what is being asked and what comes next.
Cyber Essentials Alignment
Cyber Essentials underpins every DCC level. We help make sure your certification covers the right parts of your organisation for your DCC assessment.
Smooth Certification
From establishing what needs to be assessed through to the assessment itself, we give you a clear route through the process and help you understand what is expected at each stage.
Evidence Preparation
We explain what you need to provide to show that the relevant DCC requirements have been met, helping you spot anything that is missing before assessment.
Expert Assessors
You work directly with a named specialist who understands DCC and defence-sector certification requirements. If something is unclear, you have someone knowledgeable to ask.
Ready to start your DCC journey?
31 December 2026 is getting closer. If your organisation supplies into UK Defence and has not yet started working towards DCC Level 0, now is the time to get clear on what is needed.
Cyber Tec can help you understand your current position, clarify what your assessment will cover and make sure Cyber Essentials is properly aligned with your DCC certification.
Cyber Essentials must be in place for Level 0, so identifying any gaps now gives you time to address both certifications before the MOD’s December target.
Lets get Secure together
- Jersey: +44 1534 715260
- UK: +44 117 457 3331
- Bermuda: +1 441 279 7101
- [email protected]
-
Kensington Chambers, 46/50
Kensington Place, St Helier, Jersey JE1 1ET
Frequently Asked Questions
What is Defence Cyber Certification?
Defence Cyber Certification is a cyber security certification framework for organisations in the UK defence supply chain. Developed by the Ministry of Defence and IASME, it provides independent confirmation that an organisation meets the cyber security requirements for the relevant DCC level.
What is the deadline for DCC Level 0?
The Ministry of Defence has asked all industry partners to achieve DCC Level 0 by 31 December 2026. The MOD has also said suppliers should work towards this objective and set appropriate timescales for subcontractors further down their supply chains.
Individual DCC requirements for defence contracts are determined by the MOD or the relevant prime contractor.
Who is DCC Level 0 for?
DCC is designed for organisations working in or looking to enter the UK defence supply chain. This includes existing MOD suppliers and businesses working through prime contractors, as well as those preparing for future defence opportunities.
Any organisation can apply for DCC, even if it is not currently bidding for or delivering a defence contract.
Do I need Cyber Essentials for DCC?
Yes. Cyber Essentials is a prerequisite for DCC and is required for all four levels. Levels 2 and 3 require Cyber Essentials Plus.
If you do not currently hold the appropriate Cyber Essentials certification, this needs to be factored into your route towards DCC.
Is DCC Level 0 a self-assessment?
No. None of the DCC levels are self-assessment certifications.
Applicants need to show how they meet each relevant requirement and provide evidence to support this. An independent assessor then checks that the required cyber security measures are in place.
How often does DCC need to be renewed?
DCC requires you to confirm each year that you are continuing to meet the requirements, with full recertification every three years. You must also renew your Cyber Essentials or Cyber Essentials Plus certification annually.
This means DCC should be treated as an ongoing cyber security requirement, rather than a one-off certification exercise.
What other certifications are relevant to the defence industry?
Cyber Essentials is fundamental because it is required across all DCC levels, with Cyber Essentials Plus required at Levels 2 and 3.
IASME Cyber Assurance can provide a useful additional framework for organisations that want to strengthen how cyber security is managed across the wider business, alongside their defence-specific requirements.
How can Cyber Tec help?
Cyber Tec can help you understand the DCC scheme, clarify what the assessment requires and identify gaps in your responses.
We can also support you with Cyber Essentials or Cyber Essentials Plus where required, giving you a clearer route through the certifications that DCC depends on.
You work with real specialists throughout, so if something is unclear, you have someone to ask rather than having to work it out alone.
Our Complementary Security Services
Cyber Insurance
A specialist cyber insurance policy can give your business maximum protection. Choose from a range of flexible options from market-leading providers.
Penetration Testing
Our monthly or one-off penetration tests simulate an attack on your systems to see how far hackers could go, followed by a detailed report and recommended remedies.
Vulnerability Assessment
Uncover potential gaps and weaknesses in your cybersecurity infrastructure before they can be exploited by online criminals with a vulnerability assessment. Use to stay compliant with cyber certificates such as CE and ICA
Managed Threat Detection
Our threat detection software protects your business against cyberattacks 24/7, with real-time monitoring, SOC analysis and CE Plus alignment.
Incident Response
By using the services of our CREST accredited incident response delivery partner, Pen Test Partners LLP, the impact of any breach or incident can be minimised and business continuity maintained by the provision of services in line with your company’s specific needs, regardless of your cyber maturity level.
