Defence Cyber Certification Podcast Goes Live
A look into Defence Cyber Certification (DCC), exploring why the scheme was introduced, how it differs from Cyber Essentials, and what it means for organisations working across the UK defence supply chain.
For organisations working in defence, cyber security is about more than protecting their own systems. It is also about maintaining trust, protecting sensitive information, and strengthening resilience across the wider supply chain.
But how can organisations demonstrate that their cyber security controls are actually in place and working effectively?
In Episode 13 of The Briefing Room, Karl Rees is joined by Colin Cusack, Defence Cyber Certification (DCC) Level 0 and Level 1 Assessor at CDS Defence & Security, to explore what DCC is, why it matters, and how organisations can prepare for certification.
What is Defence Cyber Certification?
Defence Cyber Certification is a cyber security certification scheme developed by the UK Ministry of Defence (MOD) in partnership with IASME.
The scheme aims to strengthen cyber resilience across the defence supply chain by providing a consistent, independently assessed approach to cyber security assurance.
Previously, much of the assurance process relied on suppliers completing self-assessment questionnaires to demonstrate that appropriate security measures were in place.
DCC introduces an additional level of confidence by requiring organisations to provide evidence that their cyber security controls are being implemented effectively.
As Colin explains in the episode, it is not simply about saying an organisation is secure. It is about being able to demonstrate it.
How Does DCC Differ from Cyber Essentials?
One of the key themes of the episode is the relationship between DCC and Cyber Essentials.
While Cyber Essentials focuses on fundamental technical controls such as firewalls, secure configuration, security updates, malware protection, and access management, DCC builds upon these foundations.
The scheme takes a broader approach, incorporating areas such as organisational governance, risk management, incident response, and cyber resilience.
DCC is structured around four certification levels, from Level 0 to Level 3, with each reflecting the cyber risk associated with the work an organisation undertakes.
Level 0: Establishes a baseline of cyber security and organisational resilience.
Level 1: Demonstrates that cyber security is managed through documented processes, controls, and supporting evidence.
Level 2: Introduces more extensive requirements for governance, monitoring, and assurance.
Level 3: Provides the highest level of assurance for organisations supporting particularly sensitive or high-risk defence activities.
The appropriate certification level depends on the risk associated with the work, rather than simply the size of the organisation.
Why Does DCC Matter for Defence Suppliers?
Cyber security risks do not stop at the boundaries of individual organisations.
Defence programmes frequently depend on extensive supply chains, from major contractors to smaller specialist businesses delivering equipment, engineering, consultancy, and support services.
A vulnerability within one organisation can potentially introduce risks across the wider supply chain.
DCC aims to address this by providing greater assurance that suppliers are taking appropriate steps to manage cyber security risks.
The episode explores why early preparation is important, particularly as the MOD continues to encourage suppliers to engage with the scheme.
For organisations looking to enter or expand within the defence sector, understanding DCC and preparing for the appropriate certification level can support future readiness and customer confidence.
Watch / Listen to the Full Episode
Episode 13 of The Briefing Room explores Defence Cyber Certification, the different certification levels, how DCC builds on Cyber Essentials, and the practical steps organisations can take to prepare.
📺 Watch the full episode on YouTube – https://youtu.be/lQQU8FIdURc
🎧 Listen on Spotify – https://open.spotify.com/episode/2u4dfpEyirtf29F6diexg5?si=7eONfsDQRk6itWTGBNSbsA
If you would like to understand how CDS Defence & Security can support your organisation with Defence Cyber Certification, contact our team to discuss your requirements.