Plain-English guides on DCC certification, DefStan 05-138, and what UK defence suppliers actually need to do to stay compliant.
DCC assessments are delivered by Certification Bodies licensed by IASME, which operates the scheme on behalf of the MOD. Many Cyber Essentials assessors are not yet licensed for DCC, so suppliers often need a new Certification Body: match on level coverage, sector experience and availability, and compare quotes from more than one CB before committing.
Read articleIASME's ASR v2.1 changes how DCC assessments are scored. An objective now passes only if it clears the percentage threshold and every in-scope control is at least Partially Met, a single Not Met control fails the objective, and Cyber Essentials is a hard anchor that fails the whole assessment if it fails.
Read articleThe Snubnose Assessor Alliance is a partnership programme for Certification Bodies that deliver Defence Cyber Certification (DCC) assessments under DefStan 05-138. CBs run their assessments inside the Snubnose workspace, receive applicant referrals from Snubnose's supplier pipeline, and gain platform training and shared operational learnings from across the Alliance. No referral fees are paid, in line with ISO/IEC 17021-1 §5.2.3 impartiality requirements.
Read articleA plain-English guide to Defence Cyber Certification (DCC) for UK defence suppliers. What it is, the four levels, how it relates to DefStan 05-138 and Cyber Essentials, and when you actually need it.
Read articleA guided, self-paced workspace that takes you from scoping to evidence submission, built around DefStan 05-138.