Cyber Security

Defence Cyber Certification Level 0: Now Available from Grant McGregor

Grant McGregor is now an approved Defence Cyber Certification Body for Level 0 assessments, helping organisations operating within, or looking to enter, the UK defence supply chain achieve independent certification through the Defence Cyber Certification (DCC) framework.

A year after its launch, Defence Cyber Certification is now firmly on the radar of organisations operating within the UK defence supply chain.

Marking the first anniversary of the scheme in May, the Ministry of Defence asked defence industry partners to work towards achieving DCC Level 0 certification by 31 December 2026, describing DCC as a "badge of excellence in cyber resilience" for defence industry partners.

Like Cyber Essentials, DCC is about more than achieving certification. It gives customers, partners and contractors confidence that cyber security is being taken seriously and that appropriate controls are in place to protect systems, services and data across the defence supply chain.

What Is Defence Cyber Certification?

Supply chain and logistics operations supporting the UK defence sector Developed by the Ministry of Defence and delivered through IASME, Defence Cyber Certification has been introduced to strengthen cyber resilience across the defence supply chain.

The framework replaces self-assessment with independent certification, helping organisations demonstrate that appropriate cyber security controls are in place and that cyber security is being actively managed.

DCC is available across four levels (Levels 0-3), allowing organisations to certify at a level appropriate to their risk profile, maturity and business requirements.

Built on the Foundations of Cyber Essentials

Many organisations will already be familiar with Cyber Essentials.

For years, Cyber Essentials has helped organisations establish a baseline of cyber security controls, reducing risk and improving security across the business.

DCC builds on those foundations, introducing independent certification for organisations operating within the defence supply chain.

For organisations working towards DCC Level 0, certification requires a valid Cyber Essentials certification alongside requirements relating to GDPR compliance and network resilience.

DCC Level 0 is often the first step towards meeting defence cyber security requirements. Organisations that understand the requirements early are better positioned to prepare for certification and avoid unnecessary pressure ahead of the 31 December 2026 deadline.

More Than a Certificate

Like Cyber Essentials, DCC is not just about getting a certificate.

It provides organisations with an independent way to demonstrate that cyber security is being taken seriously and that the right controls are in place to support the defence supply chain.

More organisations are now being asked to demonstrate cyber security as part of procurement processes, supplier assessments and supply chain obligations. As compliance expectations continue to grow, DCC provides independent certification against recognised cyber security standards.

Trusted Cyber Security and Compliance Partner

Based in Edinburgh, Grant McGregor has been helping organisations across Scotland and the UK build stronger security foundations and navigate evolving compliance requirements for more than 25 years.

As an approved Defence Cyber Certification Body for Level 0, Grant McGregor can support organisations throughout the certification process.

We are also a Cyber Essentials and Cyber Essentials Plus Certification Body, an NCSC Assured Cyber Advisor and certified to internationally recognised ISO 27001 and ISO 9001 standards.

Whether you're already operating within the defence supply chain or preparing for future opportunities, our team can help you understand requirements, assess readiness, prepare for assessment and achieve certification.