Defence Cyber Certification (DCC) by IASME
Strengthen Your Place in the Defence Supply Chain
As one of five consultancies selected by IASME to pilot the DCC scheme, Arcanum is here to support you.
DCC is a comprehensive, organisation-wide assessment developed by the Ministry of Defence and IASME to enhance cyber resilience across the UK defence sector supply chain.
What is the Defence Cyber Certification?
The DCC is a newly launched cyber security framework created by the MOD and IASME. It replaces the requirement to complete a Supplier Assurance Questionnaire (SAQ) on a contract-by-contract basis with a single, point-in-time assessment that validates your cyber security maturity and remains valid for three years.
Whether you’re a prime contractor or a SME supplying the defence sector, DCC helps demonstrate that your organisation doesn’t just claim security compliance – it proves it.
The Four Levels of Certification
The DCC scheme is built on four progressive levels. Each level aligns with the controls defined in DefStan 05-138, with increasing levels of rigour:
| Level | Controls | Cyber Essentials Requirement |
|---|---|---|
| Level 0 | 3 controls | Cyber Essentials |
| Level 1 | 101 controls | Cyber Essentials |
| Level 2 | 139 controls | Cyber Essentials Plus |
| Level 3 | 144 controls | Cyber Essentials Plus |
Note: Every level starts with Cyber Essentials. If you need help achieving CE or CE+, we can support that as part of your certification journey. I need Cyber Essentials
What’s Changed from the SAQ?
The shift to DCC introduces more rigorous and meaningful assurance. Here’s what’s new:
Applicant Guide
A key requirement that demonstrates how your business meets DefStan 05-138 controls through structured governance.
Stronger Focus on Governance
Certification isn’t about ticking boxes — it’s about showing how cyber security is embedded across your organisation.
Three-Year Certification Validity
Once certified, your organisation remains eligible to support MOD bids for three years, subject to annual check-ins.
Why Choose Arcanum
As an IASME assured DCC Certification Body, Arcanum is uniquely placed to support your journey from preparation to certification.’
We offer:
Pre-assessment support to review your current posture and identify gaps
Assistance with your Applicant Guide tailored to your structure
Expert guidance from Chartered Cyber Security Professionals
Sector-specific insight from consultants who work in the Defence sector
We don’t just assess – we help you build a stronger, smarter security foundation.
Webinar Replay
Want to learn more about how DCC works and how to get started?
Fill out the form below to get access to the webinar replay.
13th May 2026
Defence Cyber Certification: how to avoid common mistakes and achieve certification first time
One year on from the introduction of the Defence Cyber Certification (DCC), Chartered Cyber Consultant, Sam Stait, shared advice on how to negotiate the challenges of achieving this new certification using Arcanum’s unique perspective as both a DCC consultancy and certification body.
This session was valuable for both existing and new suppliers into the UK Defence sector and covered:
- What assessors are looking for from supply chain organisations
- Common mistakes that can be avoided
- The importance of effective scoping in achieving compliance
- How to pass first time
Presenter: Sam Stait, Chartered Cyber Security Professional, NCSC Head Consultant.
Get access to webinar replay:
FAQs
What is the Defence Cyber Certification Scheme?
It’s a new cyber security certification developed by the MOD and IASME to replace the contract-by-contract SAQ process with a single organisational assessment valid for 3 years.
Is Cyber Essentials a prerequisite for DCC?
Yes. Level 0 and 1 require Cyber Essentials, while Level 2 and 3 require Cyber Essentials Plus.
What is an Applicant Guide?
It’s a structured document that helps your organisation to compile and map documented evidence to the DefStan 05-138 controls
How long does it take to get certified?
Timelines vary based on readiness, but we typically recommend beginning with a pre-assessment consultation. Certification can take several weeks depending on the level.
Can Arcanum help us with our submission?
Absolutely – our consultants work with you to draft and refine your applicant submission and supporting documentation to ensure it meets certification criteria.
Ready to Get Certified?
If you’re a MOD supplier or aiming to be, DCC is your gateway to contracts and credibility.
Get in touch via email or phone or fill out the contact form below.
Phone: 029 2278 4452