Clipeum IT
0333 996 4264Book a call

Cyber assurance for the defence supply chain.

Primes are pushing cyber requirements down the chain, and Defence Cyber Certification is becoming the benchmark. We're an accredited DCC Level 0 Certification Body, and we already look after defence manufacturers and their suppliers every day.

Book a callAsk which level you need

What is Defence Cyber Certification?

DCC is an organisation-wide cyber security certification developed by the Ministry of Defence and IASME. It's aligned to Defence Standard 05-138 and delivered through IASME's network of assured Certification Bodies.

It gives suppliers a single certificate they can present across UK defence procurements, instead of answering the same questions contract by contract. Certification lasts 3 years, with an annual attestation and an annual Cyber Essentials renewal in between.

The MOD has signalled 31 December 2026 as the point by which industry partners should hold Level 0. Counting back through scoping, Cyber Essentials and assessment, the time to start is now.

4 levels, set by contract risk

The level you need depends on the cyber risk profile of the work. Every level starts with Cyber Essentials.

L0

Very low risk

3 controls, plus Cyber Essentials

The baseline for the whole supply chain

L1

Low risk

101 controls, plus Cyber Essentials

L2

Moderate risk

139 controls, plus Cyber Essentials Plus

L3

High risk

144 controls, plus Cyber Essentials Plus

Control counts as published for the scheme. Your contract or prime will specify the level required.

How we help

From your first Cyber Essentials certificate to the controls behind the higher levels.

  1. Scope

    Confirm the level you need and define what's in scope.

  2. Cyber Essentials

    Get Cyber Essentials or Cyber Essentials Plus in place.

  3. Certify

    DCC Level 0 assessment, with us as your Certification Body.

  4. Level up

    Implement and run the controls behind Levels 1 to 3 as contracts demand.

Security that suits defence work

  • 24/7 monitoring

    Our in-house UK SOC watching your environment day and night.

  • Supplier questionnaires

    Help answering prime and DEFCON 658 cyber requirements.

  • UK team

    Engineers and SOC analysts based here in the UK.

  • Certified ourselves

    Cyber Essentials Plus and IASME Cyber Assurance held by the group.

  • Manufacturing know-how

    Experience with shop-floor systems, engineering data and multi-site operations.

  • Straight answers

    We'll tell you the level you actually need, not the most expensive one.

They fully understood our security requirements and were able to deliver their solution, which met the needs of our customer security requirements. We have been extremely pleased with their cheerful help desk support and their dedication to helping us in our IT projects.
ATB Group, engineering

DCC questions

Do we need DCC if we don't hold MOD contracts directly?
Any organisation can apply, whether or not it holds defence contracts. If you supply a prime or another defence supplier, expect it to be asked for as requirements flow down the chain.
Which level do we need?
It's set by the cyber risk profile of the contract, and your contract or prime will tell you. Level 0 is the baseline most of the supply chain will need.
Is Level 0 a self-assessment?
No. Every DCC level is independently assessed, including Level 0.
We already have Cyber Essentials. Does that help?
Yes. Every level starts with Cyber Essentials, so a current certificate means you're already part of the way there.

Get DCC ready before the deadline.

Tell us who you supply and we'll help you work out the level you need and the quickest route to it.

Book a callSend us a message
0333 996 4264 info@clipeumit.com Take the 5-minute IT health check