27 January 2026
AMR CyberSecurity is delighted to announce that we have become a Level DCC Level 0 and Level 1 Certification Body.
The Defence Cyber Certification (DCC) has been created by the MOD and IASME acting as the Certification Authority. The DCC will serve as a means of independently verifying compliance with the CSM.
Suppliers with a valid DCC certification are not yet exempt from completing elements of the SAQ; however, the intention is for DCC certification to be recognised within the Supplier Cyber Protection Service.
Suppliers with DCC will be required to conduct an annual check-in and recertification every three years via an approved DCC certification body, such as AMR CyberSecurity.
AMR CyberSecurity supports many Prime Defence Suppliers and subcontractors within the Defence Supply Chain to assess, identify, and manage cyber security risks within their contracts. We have extensive experience in managing cyber security risk and has security-cleared consultants who can assist and support organisations with the CSM.
As a certified DCC Certification Body, AMR CyberSecurity can deliver both independent assessments or targeted consultancy to help organisations achieve and maintain compliance under the DCC scheme. Get in touch to find out more.
In this white paper, we explain what the Cyber Security Model is, the Defence Standard (DEFSTAN) 05-138, and the Defence Cyber Certification (DCC).