Cyber Essentials for defence suppliers (DCC Level 0)
The Ministry of Defence has asked its industry partners to reach Level 0 of Defence Cyber Certification (DCC) by 31 December 2026. Level 0 includes Cyber Essentials for your business-critical systems, and that’s the part we certify.
At a glance
- MOD deadline for DCC Level 0: 31 December 2026
- We certify the Cyber Essentials part of Level 0
- Need DCC itself? We’ll pass your enquiry to our trusted DCC provider
DCC Level 0 in brief
Summarised from the MOD’s Defence Digital blog (July 2026, May 2026).
Cyber Essentials for business-critical systems
Level 0 includes a requirement to obtain the appropriate level of Cyber Essentials, or Cyber Essentials Plus, for all applicable business-critical systems within scope.
Plus DCC’s own controls
DCC combines the Cyber Essentials scheme with its own set of controls. It has four levels (0 to 3), with annual attestation and full recertification every three years.
Who it applies to
The MOD’s request is addressed to all its industry partners. Subcontractors should check with their Prime which level they need, as not every supplier will need the higher levels.
What we do, and don’t, certify
Get Cyber Certified is an IASME-licensed Cyber Essentials certification body. We certify Cyber Essentials, which DCC Level 0 requires. We don’t provide DCC certification ourselves. If you need DCC, let us know and we’ll pass your enquiry to our chosen, trusted DCC provider, who will be in touch with you directly. Getting Cyber Essentials in place with us first means that part is ready for your DCC assessment.
Four steps to Level 0
- Confirm your scope
Check with your Prime or contract which systems are business-critical, and whether Cyber Essentials or Cyber Essentials Plus is expected.
- Certify Cyber Essentials with us
With a fixed deadline, our Supported Service is the safer route: we check your answers before marking so there are no surprises.
- Add Plus if it’s needed
If Cyber Essentials Plus is required, its technical audit must be completed within three months of your Cyber Essentials certificate.
- Your DCC assessment
Ask us and we’ll pass your enquiry to our trusted DCC provider, who will contact you directly. Don’t leave it to the last weeks of December.
Working to the 31 December deadline?
Our Supported Service gives you a senior assessor and a gap analysis before you submit. If you’re confident your setup already meets every requirement, Marking Only is available too.
Not sure which package fits? Answer six quick questions in our package finder or compare all packages.
“I can highly recommend Get Cyber Certified. Their support and guidance throughout the application is outstanding. Mark and the team really went the extra mile to rush my application through in time for a tender bid.”
Google reviewer · Google reviewCommon questions
Can Get Cyber Certified issue our DCC Level 0 certificate?
No. We’re an IASME-licensed Cyber Essentials certification body, so we certify the Cyber Essentials part that Level 0 includes. We don’t provide DCC certification, but we’ll pass your enquiry to our chosen, trusted DCC provider, who will be in touch with you directly.
Does Level 0 need Cyber Essentials or Cyber Essentials Plus?
Level 0 includes a requirement for the appropriate level of Cyber Essentials, or Cyber Essentials Plus, for business-critical systems in scope. Check with your Prime or your contract which applies to you.
We already hold Cyber Essentials. Is that enough?
It covers the Cyber Essentials part, as long as your certificate is current and covers the business-critical systems in scope. You’ll still need the DCC Level 0 assessment itself.
We’re a small subcontractor. Does this apply to us?
The MOD’s request is addressed to all its industry partners. Your Prime should confirm which DCC level you need. Not every supplier will need the higher levels.
Sources: MOD Defence Digital, July 2026; MOD Defence Digital, May 2026; IASME Defence Cyber Certification.
Facing the 31 December deadline?
Talk to an assessor today and we’ll map out the quickest sensible route to your Cyber Essentials certificate.