Read the official DCC applicant guidance 
Why choose Tranchulas for DCC Level 0?
Work with an IASME-approved Level 0 Certification Body that understands cyber security assessment. Get a clear scope, an independent review and straightforward communication from submission to outcome.
Defence Cyber Certification
DCC Level 0
Show defence buyers your business meets the Level 0 cyber security requirements.
Get an independent assessment from Tranchulas, an IASME-approved DCC Level 0 Certification Body. We review your scope and submission, explain any clarification requests, and confirm the certification outcome.
£599 + VAT fixed assessment fee · Cyber Essentials required · Three-year certification with annual attestation
Is DCC Level 0 right for your organisation?
Defence Cyber Certification is the Ministry of Defence’s organisation-level cyber assurance scheme, delivered through IASME and based on Defence Standard 05-138.
Already supplying defence or preparing to enter the supply chain? Confirm the required level with your MOD customer or prime contractor. Your assessment scope and Cyber Essentials coverage must meet the DCC requirements.
-
The MOD’s cyber assurance scheme
DCC is the UK Ministry of Defence’s own scheme, delivered with IASME and built on Defence Standard 05-138.
-
One organisation-level certificate
Demonstrate your assessed cyber security baseline to defence buyers. DCC supports assurance of relevant control requirements; your customer may still require contract-specific questionnaires and evidence.
-
Contract-driven
Where a contract requires Def Stan 05-138 under DEFCON 658, DCC at your Cyber Risk Profile level is the recognised way to evidence it.
-
Ahead of 31 December 2026
The MOD has asked industry partners to achieve Level 0 by 31 December 2026. Start preparing now, and confirm the specific requirements and dates that apply to your contracts.
-
Independent assurance
Your certificate is issued by an IASME-approved Certification Body, giving primes confidence in your baseline.
-
Set by the contract, not chosen
Your level follows the Cyber Risk Profile the MOD or your prime assigns. Level 0 is the entry tier, for Very Low risk.
Prepare before you apply
Have your required DCC level, organisation and site details, proposed assessment scope, current Cyber Essentials certificate, and supporting policies and evidence ready. Use IASME’s applicant and scoping guides to check what applies. We review your submission independently and explain any clarification requests.
DCC LEVEL 0 CERTIFICATION
How It Works
Step 1: Confirm eligibility
Confirm Level 0 is the right requirement for your defence work. Gather your organisation and site details, proposed scope and valid Cyber Essentials certificate so we can check your starting point.
Step 2: Submit your assessment
Complete the required scope and Level 0 submission using IASME’s current guidance. Supply the information and supporting evidence requested so your assessor can review the controls against the scheme requirements.
Step 3: Verification & certification
We review your submission and raise any clarification questions. On successful assessment, you receive your DCC Level 0 certificate. Maintain the controls, renew Cyber Essentials annually and complete the required annual attestation.
DCC Level 0 certification
£599 + VAT
One fixed assessment fee covering scope review, assessment of your submission and clarification of outstanding questions. Certification follows a successful assessment.
We typically complete certification within 3 working days of a complete, satisfactory submission. Timing depends on readiness and any clarification or corrective work required.
Start your DCC Level 0 assessment
Need Cyber Essentials too?
Required for DCC Level 0. Priced separately.
| Employees | CE fee + VAT |
|---|---|
| 0–9 | £320 |
| 10–49 | £440 |
| 50–249 | £500 |
| 250+ | £600 |
Is Level 0 the right assessment for you?
Tranchulas is an IASME-approved DCC Level 0 Certification Body. Check your contract or tender for the required DCC level, or confirm it with your MOD customer or prime contractor before applying.
If you need Level 1, 2 or 3, choose a Certification Body approved for that level.
Compare DCC levels
Level 0 — our assessment
Entry-level assessment for Very Low risk, including Cyber Essentials.
Level 1
Additional security controls. Cyber Essentials is required.
Levels 2 and 3
More extensive security requirements, including Cyber Essentials Plus. Use a Certification Body approved for your required level.
IASME-approved for DCC Level 0
Approved to assess and certify organisations against DCC Level 0.
Independent assessment
Our assessor reviews the submission against the scheme requirements. Certification decisions depend on the evidence and successful assessment.
Fixed price, responsive support
A clear £599 + VAT assessment fee, practical communication and a defined next step throughout the process. Cyber Essentials is priced separately if you need it.
FAQ
Questions? We have answers.
DCC Level 0 is the entry level of Defence Cyber Certification. An IASME-approved Certification Body assesses three baseline controls, including the Cyber Essentials requirement, against Defence Standard 05-138.
Yes. Every DCC level starts with Cyber Essentials; Level 0 requires Cyber Essentials, not Cyber Essentials Plus. Without it you cannot be certified.
Our independent Level 0 assessment costs £599 + VAT. Cyber Essentials is required and charged separately if you need it, from £320 + VAT depending on organisation size. A certificate is issued only after a successful assessment.
Organisations in the UK defence supply chain whose contract sits at the Very Low cyber risk profile, and suppliers acting ahead of the MOD’s stated expectation that all defence suppliers hold at least Level 0 by 31 December 2026. Your level is set by the MOD or your prime, not chosen.
Check the DCC level specified in your contract or tender. The MOD or your prime contractor determines the requirement. If it is unclear, ask the contracting authority for written confirmation before booking an assessment.
A DCC certificate is valid for three years, with an annual attestation in between.
Yes — each year you confirm you are maintaining the controls and your scope has not significantly changed. You also renew Cyber Essentials annually and recertify DCC every three years.
A Cyber Risk Profile expresses the cyber risk associated with a defence contract. Your contracting authority uses the applicable requirements to specify the assurance needed. Confirm the named DCC level with your MOD customer or prime contractor.
Your assessor explains the outstanding requirements and any clarification or resubmission permitted by the scheme. Your organisation remains responsible for addressing gaps. Certification can proceed only when the requirements are met; ask us about any further assessment costs before arranging additional work.
DCC is not currently a universal legal requirement. Specific contracts can require cyber assurance under DEFCON 658. The MOD has asked industry partners to achieve Level 0 by 31 December 2026. Check your customer’s requirements and any contract-specific deadlines.
The independent Level 0 assessment — review and verification — any clarification round offered, and your DCC Level 0 certificate on a successful outcome. It does not include the Cyber Essentials prerequisite, which is priced separately by organisation size.
Level 0 covers three baseline controls, including the Cyber Essentials requirement. Level 1 assesses 101 controls. Your required level is determined by your defence work and customer requirements. Tranchulas certifies Level 0; higher levels require a Certification Body approved for that level.
Ready to demonstrate your defence cyber baseline?
Start your DCC Level 0 assessment for £599 + VAT. Have your Cyber Essentials certificate and proposed scope ready.
Still checking the requirements? Speak to our team about your required level, scope and next steps before you apply.