The DCC scheme compliments self-assessment with a formal, independently verified certification process. Organisations are assessed against one of four defined levels of cyber maturity, ranging from Level 0 (Basic) to Level 3 (Expert).

Once certified, organisations will be expected to go through an annual check-in and re-certification every three years. Organisations must also maintain a valid Cyber Essentials or Cyber Essentials Plus certification, depending on their assigned DCC level.

The DCC scheme is built on four progressive levels. Each level aligns with the controls defined in DefStan 05-138, with increasing levels of rigour:

What is the process?

• Check CRP – Identify the Cyber Risk Profile for each of your MOD contracts.
• Get Cyber Essentials – Choose an IASME-accredited Certification Body to assess you for Cyber Essentials or Plus,  such as Cyber Security Specialists.
• Engage a Certification Body – Choose an IASME-accredited Certification Body to assess you for DCC, such as Cyber Security Specialists.
• Collect evidence – Gather policies, logs, training records, and reports.
• Review suppliers – Ensure your third parties meet required assurance levels.
• Undergo assessment – Complete the DCC audit and fix any gaps.
• Get certified – Gain formal DCC certification at the required Level for your Organisation.
• Maintain compliance – Stay up to date with annual reviews and recertification.

Get DCC Certified

We are an accredited Certification Body for the Defence Cyber Certification, and also Cyber Essentials and Cyber Essentials Plus.

Our team can help you to identify and implement the requirements of the DCC and get formally certified.

Get in touch

Find out more

For more information please contact us on 0161 706 0244 or email info@cybersecurityspecialists.co.uk to speak with a member of the team.

Contact us