Defence Cyber Certification

A comprehensive, organisation-wide cyber security certification for suppliers in the defence sector

Provides assurance of organisational cyber resilience and aligns to broader international standards and best practice

Designed to strengthen the cyber resilience and security of the UK defence sector’s supply chain



IASME – the Ministry of Defence’s Official DCC Delivery Partner
The Ministry of Defence is the UK government department that protects UK people, territories, values and interests at home and overseas.
IASME works with a network of cyber security organisations across the UK and Crown Dependencies to certify organisations of all sizes to the Defence Cyber Certification.
What is Defence Cyber Certification?
The Defence Cyber Certification (DCC) is a new, comprehensive, cyber security certification framework for UK defence suppliers. Developed by the UK Ministry of Defence (MOD) and IASME, the certification is part of the broader initiative to enhance the cyber resilience of the UK’s defence sector supply chain.
The DCC certification emphasises the overall security and resilience of the organisation. It provides a single, organisation-level, assurance which can be presented in support of UK Defence Procurements (subject to annual check-in and re-certification every 3 years).
Successfully obtaining and maintaining certification under the DCC scheme is a clear demonstration of an organisation’s ongoing commitment to cyber resilience in support of continued improvement to cyber resilience in UK Defence.

Defence Cyber Certification is available in four levels:

What are the different levels?
The certification process involves a point-in-time assessment against a UK Defence standard.
All levels start with Cyber Essentials certification, with Levels Two and Three requiring Cyber Essentials Plus. Applicants receive supporting documents to help them understand the controls and questions for the level they aim to achieve.
Applicants are responsible for demonstrating compliance with the controls, describing how they meet them, and providing evidence of compliance.

Level Zero
3 controls

Level One
101 controls

Level Two
139 controls

Level Three
144 controls
Register your interest






