We're proud to share that Clipeum IT is now an accredited Certification Body for Defence Cyber Certification (DCC) Level 0.

DCC was developed by the Ministry of Defence and IASME to strengthen cyber resilience across the UK defence supply chain. It's delivered through IASME's network of assured Certification Bodies, and we're now one of them.

What DCC is

DCC is an organisation-wide certification aligned to Defence Standard 05-138. It has 4 levels, from 0 to 3, and the level a supplier needs depends on the cyber risk profile of the contract. Every level starts with Cyber Essentials, and Levels 2 and 3 require Cyber Essentials Plus.

Level 0 is the foundation. It covers a small number of core controls on top of Cyber Essentials, and it isn't a self-assessment: it's independently assessed. Certification lasts 3 years, with an annual attestation in between.

Why it matters now

The MOD has signalled 31 December 2026 as the point by which industry partners should have Level 0 in place. That reaches well beyond the primes, into every business that supplies them. Counting back through scoping, Cyber Essentials and assessment, the time to start is now.

How we can help

  • Scoping your certification and checking your Cyber Essentials status
  • Getting Cyber Essentials or Cyber Essentials Plus in place if you need it
  • DCC Level 0 assessment
  • Implementing the controls needed for higher levels as your contracts demand

Much of our customer base is in defence and its supply chain, so this is a natural step for us. If you're not sure which level you need, talk to us or read more on our defence page.