Defence Cyber Certification

A comprehensive, organisation-wide cyber security certification for suppliers in the defence sector

Provides assurance of organisational cyber resilience and aligns to broader international standards and best practice

Designed to strengthen the cyber resilience and security of the UK defence sector’s supply chain

Defence Cyber Certification logo
/ Defence Cyber Certification
NCSC Delivery Partner logo

IASME – the Ministry of Defence’s Official DCC Delivery Partner

The Ministry of Defence is the UK government department that protects UK people, territories, values and interests at home and overseas.

IASME works with a network of cyber security organisations across the UK and Crown Dependencies to certify organisations of all sizes to the Defence Cyber Certification.

What is Defence Cyber Certification?

The Defence Cyber Certification (DCC) is a new, comprehensive, cyber security certification framework for UK defence suppliers. Developed by the UK Ministry of Defence (MOD) and IASME, the certification is part of the broader initiative to enhance the cyber resilience of the UK’s defence sector supply chain.

The DCC certification emphasises the overall security and resilience of the organisation. It provides a single, organisation-level, assurance which can be presented in support of UK Defence Procurements (subject to annual check-in and re-certification every 3 years).

Successfully obtaining and maintaining certification under the DCC scheme is a clear demonstration of an organisation’s ongoing commitment to cyber resilience in support of continued improvement to cyber resilience in UK Defence.

Defence Cyber Certification is available in four levels:

What are the different levels?

The certification process involves a point-in-time assessment against a UK Defence standard.

All levels start with Cyber Essentials certification, with Levels Two and Three requiring Cyber Essentials Plus. Applicants receive supporting documents to help them understand the controls and questions for the level they aim to achieve.

Applicants are responsible for demonstrating compliance with the controls, describing how they meet them, and providing evidence of compliance.

Level Zero

3 controls

Level One

101 controls

Level Two

139 controls

Level Three

144 controls

Register your interest

Please fill out and submit the form below. IASME will send you more information about the DCC scheme and a list of Certification Bodies that can assess your organisation to the required Level.

Company Address(Required)
Organisation Size(Required)

Thank you for your interest.

BSI Logo UK Cyber Security Council We are a Living Wage Employer National Cyber Awards 2022 Winner Armed Forces Covenant Cyber First Support Disability Confident Employer