Clear requirements.
Understand exactly what Level 0 requires. Plain-English breakdowns of every control mapped to DefStan 05-138, so you never have to guess what "good" looks like.
No interpretation roulette. Every control, explained.
The entry point into DCC for UK defence SMEs. Scope your organisation, collect the right evidence, and get to assessment in weeks, not quarters.
Scoping, evidence, and assessor review, with a guided path from day one.
Understand exactly what Level 0 requires. Plain-English breakdowns of every control mapped to DefStan 05-138, so you never have to guess what "good" looks like.
No interpretation roulette. Every control, explained.
Walk through sites, systems, data, and people at your own pace. Our guided workflow builds your scope register and attestation as you go, nothing left behind.
Scope defined in hours, not weeks of workshops.
Upload a policy, register, or screenshot and our AI validates it against the control before your Assessor ever sees it. Every artifact is tagged, versioned and annotated, so your audit pack is ready the moment the last upload lands.
Fewer iterations. Fewer clarifications. Faster sign-off.
DCC Level 0 is the entry-level certification under DefStan 05-138, for suppliers with a very low assessed cyber risk. It is built around three controls.
The pre-objective for Level 0. If you already hold Cyber Essentials or Cyber Essentials Plus, you are most of the way there.
Demonstrate that the personal data you hold is protected by appropriate UK GDPR processes and controls.
Show that your networks and systems are designed and maintained to keep running when something goes wrong.
For official guidance, see the DefStan 05-138 publication on GOV.UK, or read our plain-English guide.
DCC is a progressive framework. You certify at the level the work requires, and move up when it does.
Cyber Essentials as the pre-objective, plus UK GDPR compliance and resilient networks and systems. Three controls, for suppliers with a very low assessed cyber risk.
A comprehensive cyber security programme with good practices, for suppliers with a low to moderate assessed cyber risk.
Advanced cyber security oversight and planning, driving robust organisational and cyber practices, for suppliers with a high assessed cyber risk.
Expert cyber security capabilities that fully take advantage of "defence in depth", for suppliers with a substantial assessed cyber risk.
Create your workspace and begin your DCC Level 0 journey. Set up in under two minutes, no credit card required.