Defence Cyber Certification
(DCC) Level 0
Get ready for Ministry of Defence supply chain requirements with structured support for Defence Cyber Certification (DCC) Level 0, aligned from the outset with your Cyber Essentials certification.
- Support from a team trained in Defence Cyber Certification Level 0
- Aligned Cyber Essentials and DCC scopes to reduce the risk of failure
- A joined-up route into MOD supply chain compliance, without repeat paperwork
What Is Defence Cyber Certification (DCC)?
Defence Cyber Certification is the Ministry of Defence’s cyber assurance scheme for its supply chain, developed with IASME.
The Defence Cyber Certification scheme:
- Combines an established technical baseline with defence-specific assurance: DCC builds on Cyber Essentials alongside the wider security requirements of Defence Standard 05-138, giving the MOD a consistent way to assess supplier cyber resilience.
- Has four levels, Level 0 to Level 3: each aligned to the cyber risk profile of the contract being bid for
- Level 0 is the entry point: for organisations working on lower-risk contracts, assessed against Def Stan 05-138
- Is open to any organisation: you don’t need to hold a current MOD contract and can certify proactively ahead of future opportunities.
How Defence Cyber Certification (DCC) Level 0 Works
We structure every engagement to reflect your current stage and objectives.
Most clients begin with Cyber Essentials and evolve towards full DCC Level 0 certification:
1. Confirm Cyber Essentials Certificate
You'll need a valid Cyber Essentials certificate in place before assessment, since it's a prerequisite for DCC Level 0. If you don't hold one yet, we can manage Cyber Essentials and DCC as one joined-up engagement.
2. Define and align your DCC scope
We work through what your DCC scope should cover and check it lines up with your Cyber Essentials scope, so there's no mismatch that could cause an avoidable failure later.
3. Assessment against Def Stan 05-138
We assess your organisation against the Def Stan 05-138 controls for Level 0, reviewing your evidence and confirming compliance as an IASME certification body.
4. Certification and
Listing
Once you pass, your DCC Level 0 certificate is issued and your organisation is listed on the IASME public registry, ready to support your MOD bids.
DCC Level 0 and Cyber Essentials
Why Scope Alignment Matters
DCC Level 0 is not a standalone certification. A valid Cyber Essentials certificate is a prerequisite, and your DCC scope needs to align closely with your Cyber Essentials scope. If the two don’t match, it can lead to failure at DCC assessment, even where the Cyber Essentials certificate itself is perfectly valid.
This is where a joined-up approach matters. Rather than treating Cyber Essentials and DCC as two separate, disconnected exercises, we help you design the scope correctly from the start, so the two work together rather than creating avoidable risk later.
Getting scope alignment right from the outset helps you:
- Reduce the risk of an avoidable DCC failure due to scope misalignment.
- Avoid duplicating work across two separate assessments
- Move through the Cyber Essentials and DCC process with one consistent view of your organisation
Who Should Consider DCC Level 0?
Without DCC, suppliers can face a fresh round of security paperwork on every MOD contract. A DCC Level 0 certificate changes that: one certification supports multiple bids at or below the certified level, cutting down on repeated due diligence and giving you a clearer, more consistent story to tell prime contractors and procurement teams.
DCC Level 0 benefits:
MOD suppliers and bidders
You supply, or plan to bid for, MOD contracts directly or through a prime contractor
Existing Cyber Essentials holders
You're already certified and want to understand how DCC builds on it
Frequent tenderers
You want to cut the repeat security questionnaires and paperwork that come with bidding regularly for MOD work
Proactive certifiers
You're certifying ahead of a specific contract requirement, so you're ready when the opportunity comes up
Need Cyber Essentials Certification Quickly?
Our Guided Readiness Assessment Cyber Essentials (G.R.A.C.E) Service gets you CE certified fast, so you can move straight into DCC Level 0 without delay.
Trusted by organisations getting certified
in Cyber Essentials and DCC Level 0
What our customers say
Your Trusted Certification Partner
Why Choose OmniCyber for DCC Level 0 Certification?
OmniCyber is an established UK cyber security company with an existing Cyber Essentials certification body, meaning your Cyber Essentials and DCC Level 0 work can be handled by one team rather than being split across providers.
Organisations choose OmniCyber because we provide:
- A team trained and registered to support DCC Level 0, listed as an IASME DCC Level 0 certification body
- Existing Cyber Essentials expertise, so scope alignment is built in rather than an afterthought
- Direct defence sector experience within the team: One of our assessors brings 25-30 years’ experience in defence, including work on the Trident programme
- Straightforward, honest guidance on readiness before you commit to formal assessment
DCC Level 0 Pricing & Quotes
Every DCC Level 0 engagement is priced around your organisation and where you’re starting from, rather than a flat fee.
A few things shape your quote:
- Organisation size: the number of employees within your certification scope
- Where you're starting from with Cyber Essentials: whether you already hold a valid certificate or need it alongside DCC
- Scope complexity: how much of your organisation needs to be included in your DCC assessment
Frequently Asked Questions
What is Defence Cyber Certification (DCC)?
DCC is the Ministry of Defence’s cyber assurance scheme for its supply chain, developed with IASME. It combines the technical controls of Cyber Essentials with wider organisational assurance, and is assessed against Def Stan 05-138.
Is DCC Level 0 mandatory?
DCC is not currently a mandatory contractual requirement, and organisations can still tender for MOD work through the normal process without it.
However, the MOD has asked industry partners to work towards Level 0, so early certification can help you avoid pressure and rework later.
Getting certified means being assessed against Def Stan 05-138, so it’s worth knowing where any gaps are before you go through it, not during it.
Do I need Cyber Essentials before I can get DCC Level 0?
Yes. A valid Cyber Essentials certificate is a prerequisite for DCC Level 0, and your Cyber Essentials scope needs to align with your DCC scope. Misalignment between the two can result in failure at DCC assessment.
Who decides which DCC level my organisation needs?
MOD determines the level required, based on the cyber risk profile of the contract you’re bidding for. Contracts are not sequential: an organisation can be assigned a higher level directly, without needing Level 0 or 1 first.