Defence Cyber Certification (DCC) for UK MOD suppliers
Whether you’re working towards DCC Level 0, 1, 2 or 3, we support you from implementation through to certification. Helping UK defence suppliers meet MOD supply chain requirements without the guess-work.
Trusted by
MOD work shouldn’t mean rebuilding cyber assurance every time
Tendering for MOD work still means repeated Supplier Assurance Questionnaires, often recreated for each contract.
Defence Cyber Certification (DCC) is the MOD-aligned assurance framework, bringing clearer levels, and only needs to be completed once every 3 years, for all your contracts.
Level 0-3 Covered
Our team covers Implementation & Certification across Levels 0–3. Whether you know the level you require and are looking for costs and timeframes, or need advice on which level is right for you, our team is on hand to help.
Level 0
Level 0 | of the DCC requires the organisation to have Cyber Essentials Basic, along with 2 other controls.
Level 1
Level One | Level 1 of the DCC requires the organisation to have Cyber Essentials Basic along with 100 other controls.
Level 2
Level Two | Level 2 of the DCC requires the organisation to have Cyber Essentials Plus along with 138 other controls.
Level 3
Level 3 | of the DCC requires the organisation to have Cyber Essentials Plus along with 143 other controls.
Why Choose 3CT?
As specialist compliance consultants, we can help your organisation achieve certification in a timely manner, making our framework work for your business.
10+ Years Defence Experience
A decade-plus in UK defence compliance. We shape DCC around how you work, not a generic template.
100% Success Rate
Every client we have guided through DCC has achieved certification via a proven, supported pathway.
Level 0-2 Certification Body
End-to-end support for DCC Levels 0–2 certification and implementation, plus Level 3 implementation.
UK Based Team
UK-based specialists in your time zone. Direct access, clear communication, no offshore hand-offs.
Defence Cyber Certification FAQs
Common questions on Defence Cyber Certification, what the levels mean, and how implementation through to certification works.
Yes, although there may be small differences due to the syncing of different updates and versions.
This certificate will cover all of your contracts to the certified level, streamlining the process by requiring only one assessment to cover multiple contracts, rather than conducting separate assessments for each contract.
Applicants may still tender for MOD contracts via the normal MOD process, DCC is not mandatory at this stage however this is likely where MOD contracts will be moving to for pre-requisites. As of January 2027, level 0 will be mandatory for all MOD suppliers.
The MOD and IASME created an assessment and certification against the DefStan 05-138 i4.
https://www.gov.uk/government/publications/mapping-document-cyber-security-for-defence-suppliers-def-stan-05-138-issue-4
Book Your Free Call To Discuss DCC & Get MOD Ready
Book a free 30-minute discovery call with a member of the team to discuss your Cyber Security needs.