Defence Cyber Certification (DCC)

Our services > Defence Cyber Certification (DCC)

Get support from one of the UK's leading cyber security consultancies for defence

AMR CyberSecurity is a Defence Cyber Certification (DCC) Level 0, Level 1, Level 2 & Level 3 Certification Body, authorised by IASME and the Ministry of Defence (MoD) to independently assess and certify suppliers operating within the Defence Supply Chain.

As a specialist defence cyber consultancy with security-cleared assessors, AMR CyberSecurity delivers DCC assessments and targeted readiness support to help you achieve and maintain certification with confidence.

What is DCC?

DCC is the Ministry of Defence's (MOD) formal mechanism for verifying a supplier's compliance with the Cyber Security Model (CSM) and the control requirements defined in DEFSTAN 05138. DCC certification delivers independent, evidenced assurance that your organisation has demonstrably implemented cyber security controls defined in DEFSTAN 05-138 appropriate to the relevant Cyber Risk Profile (CRP).138.

Our DCC Certification Services

Independent Certification (Level 0, Level 1, Level 2 & Level 3)

As a licensed Certification Body, AMR CyberSecurity delivers:

  • Formal DCC assessments for Level 0, Level 1, Level 2 and Level 3
  • Evidence review and validation
  • Interviews with key personnel
  • Assessment reporting and certification decisions
  • Annual surveillance check-ins
  • Three-year recertification assessments

Our assessors are security cleared and experienced in defence cyber requirements, ensuring a smooth, professional, and proportionate assessment process.

DCC readiness & preassessment support

Many organisations benefit from support before undergoing their formal DCC assessment. We provide structured readiness services that help you to prepare effectively:

  • Gap analysis against DEFSTAN 05138
  • Review of policies, processes, and technical controls
  • Evidence preparation and documentation support
  • Mock interviews and assessment walkthroughs
  • Prioritised remediation plans
  • Guidance on achieving compliance at Level 0,
    Level 1, Level 2 or Level 3

This support is particularly valuable if you are new to defence contracting or transitioning to the latest CSM v4 requirements.

  • DCC Level 0, Level 1, Level 2 & Level 3 Certification Body
  • Security-cleared assessors with deep Defence experience
  • Practical, proportionate guidance tailored to your organisation
  • End-to-end support—from readiness to certification
  • Trusted by defence primes, SMEs, and specialist suppliers
  • Clear communication and a collaborative, customer-focused approach

We help Defence suppliers build resilient, compliant cyber security practices that meet MOD expectations and strengthen their position in competitive procurement environments.

To discuss DCC certification or arrange a readiness review, contact our team at enquiries@amrcybersecurity.com.

AMR CyberSecurity is part of Infinum, a global technology consultancy, following Infinum’s acquisition of AMR in December 2025. Infinum has over 20 years of experience delivering secure digital products for clients in fintech, telco and mobility. AMR combines specialist cybersecurity expertise with accreditations and certifications including CREST accreditation, NCSC CHECK assurance, PCI DSS QSA status and DCC Certification Body status across Levels 0–3.

Related Resources

Whitepaper: Cyber Security Model V4 and Defence Cyber Certification

In this white paper, we explain what the Cyber Security Model is, the Defence Standard (DEFSTAN) 05-138, and the Defence Cyber Certification (DCC).

Read more
Registered address
AMR CyberSecurity, 3000a Parkway
Whiteley, Fareham
Hampshire, PO15 7FX
UK
© 2026 AMR CyberSecurity · Registered Company Number: 11551941