Defence Cyber Certification (DCC) Level 1 Support for MOD Suppliers
Does your MOD contract require DCC Level 1? We’ll help you get the scope right, understand what’s required and work through all 101 Level 1 controls without making the process more complicated than it needs to be.
Our DCC and Cyber Essentials expertise sits under one roof, so you get practical support from early preparation through to certification.
What Is DCC Level 1?
Defence Cyber Certification (DCC) is the MOD’s cyber security scheme for its supply chain, developed with IASME. DCC Level 1 is the Foundational level, typically required for MOD contracts assessed as having a low to moderate cyber risk.
It builds on the technical baseline provided by Cyber Essentials certification, but goes considerably further. With 101 controls, Level 1 is significantly broader and more complex than both Cyber Essentials and DCC Level 0, looking across the systems and business functions your organisation relies on.
DCC levels aren’t sequential. If an MOD contract requires Level 1, you can certify directly at Level 1 without first achieving DCC Level 0. You can also become certified proactively, so you’re prepared before the right MOD opportunity comes along.
- Demonstrates your cyber resilience against the broader requirements expected for low to moderate risk MOD contracts.
- Strengthens your Cyber Essentials foundation with broader defence-specific assurance designed for the MOD supply chain.
- Shows MOD procurement teams and prime contractors that you meet the required Level 1 standard.
- Reduces repeat assurance work by providing recognised evidence that the Level 1 requirements have been met.
Our team includes Cyber Essentials and DCC Level 0 & Level 1 Assessors, with direct defence expertise, trained and licensed by IASME to assess organisations against both the DCC and CE standard.
Want to Know Where You Stand Before You Apply for DCC Level 1?
With 101 controls to consider, knowing where you stand before formal assessment can save time and avoid surprises. Speak to a DCC specialist about your scope, current readiness and what you’ll need to do next.
Why Equilibrium for DCC Level 1?
DCC Level 1 is considerably broader than Level 0. With 101 controls and a scope that can reach across critical systems and business functions, having experienced support from the outset can make a real difference.
Cyber Essentials and DCC, One Team
We already support organisations with Cyber Essentials and DCC, so we can look at both requirements together and help get your scopes aligned from the start.
DCC Level 1 Expertise
We’re trained and registered to support DCC Level 1 and listed by IASME, under our parent company, OmniCyber Security, giving you practical guidance on the controls, the evidence you’ll need and what to expect from the assessment.
Real Defence Sector Experience
Our assessors bring decades of direct defence experience, including work on the Trident programme, giving us first-hand understanding of the environment MOD suppliers operate in.
Know Where You Stand Before Assessment
We’ll help you understand your scope and readiness before formal assessment, so you can identify gaps early and know what needs attention before you commit.
Cyber Essentials and DCC Level 1: Why They Need to Line Up
Cyber Essentials provides the technical foundation for DCC Level 1, but the scope of your DCC assessment can reach much further across your organisation.
Level 1 looks at the systems and functions your business relies on to operate. That can include areas such as HR and payroll, physical access, stock and ordering systems, manufacturing systems and operational technology.
Getting both scopes right from the start means:
- Less rework later - avoiding scope changes once your assessment is underway
- Fewer gaps and surprises - making sure business-critical systems haven’t been overlooked.
- A smoother route through assessment - with your Cyber Essentials and DCC requirements considered together from the outset.
How It Works
Four steps, from start to certificate.
- Step One You’ll need valid Cyber Essentials certification for DCC Level 1. If you don’t already have one, we can combine your Cyber Essentials and DCC support, helping you get both scopes aligned from the outset.
- Step Two We’ll help you define your DCC Level 1 scope, making sure the right systems and business-critical functions are included and aligned with your Cyber Essentials scope.
- Step Three Your organisation is assessed against the 101 Level 1 controls, including a review of the required evidence and any questions or clarifications that arise.
- Step Four Once the requirements have been successfully met, your DCC Level 1 certification can be issued and used as evidence of your cyber assurance for relevant MOD contracts.
Hear From Our Customers
What stood out most was the clarity of information and the team’s clear, straightforward communication throughout the process. Equilibrium has given us greater confidence in our business continuity, and we would absolutely recommend them to others seeking Cyber Security services. They made the entire process simple, and their findings were clearly and effectively communicated.
Ryan Ginty
Managing Director, Auger Torque
Frequently Asked Questions
DCC Level 1 is the Foundational level of Defence Cyber Certification, assessed against the requirements of Defence Standard 05-138. It covers 101 of the scheme’s 148 controls and is typically required for MOD contracts assessed as having a low to moderate cyber risk.
No. DCC levels aren’t sequential. The level you need is determined by the Cyber Risk Profile associated with the MOD contract, so you can certify directly at Level 1 if that’s what your contract requires.
Yes. You’ll need a valid Cyber Essentials certification. If you don’t already have one, we can support you with Cyber Essentials and DCC Level 1 together and help align the scopes from the outset.
Level 0 is the Basic level and covers 3 controls for very low cyber risk. Level 1 is the Foundational level and covers 101 controls for low to moderate cyber risk, providing much broader assurance across your organisation.
The MOD determines the Cyber Risk Profile for the contract, which establishes the level of cyber assurance required.
Yes. You can become certified proactively, which can put you in a stronger position when bidding for MOD opportunities that require Level 1.
There isn’t a single timescale. It depends on factors such as your organisation’s size, scope, current readiness and Cyber Essentials status. Getting your scope right early can help make the process smoother.
DCC Level 1 isn’t a one-size-fits-all assessment. The level of work depends on your organisation, scope and current readiness, so we’ll take the time to understand what you need before recommending the right approach.