-(2).tmb-banner.jpg?sfvrsn=9b9466ce_0 "Armed Forces Community")
Defence Cyber Certification
For more information on DCC, visit our blog or watch our webinar on demand.
Cyber Security in Defence
Ensuring our national security depends on protecting the defence sector from cyber attacks. Bridewell helps defence suppliers and MOD organisations strengthen cyber security, protect sensitive information and demonstrate compliance with the Defence Cyber Certification (DCC).
We were one of the original five certification bodies selected to work with IASME to develop and deliver the DCC scheme. We were also among the first organisations to achieve DCC Level 2 certification and the first to issue DCC Level 3 certification in the UK.
The Critical Role of Cyber Security in Defence
Cyber attacks on defence organisations can expose sensitive information and disrupt systems that support military operations. Protecting these systems is essential to maintaining operational readiness and safeguarding national security.
At the same time, the defence sector depends on a diverse network of suppliers, from major contractors to specialist manufacturers. Given that a compromise anywhere in the supply chain can have consequences for the wider defence sector, each organisation has a role in protecting the information and systems that support national security.
Addressing the Defence Sector’s Unique
Cyber Security Challenges
Securing Complex Technology Environments
Defence suppliers often operate a combination of business IT, specialist engineering systems and operational technology. Long equipment lifecycles and operational constraints can make it difficult to address vulnerabilities without affecting production or service delivery.
Meeting DCC Requirements
Achieving DCC certification requires organisations to define their scope, identify and remediate gaps, and prepare evidence against their target level. Existing certifications and control frameworks can provide useful supporting evidence, but do not automatically demonstrate compliance with DCC. Maintaining certification also requires continued operation of the controls, annual attestation and recertification every three years.
Protecting Sensitive Information
Defence organisations and their suppliers handle valuable intellectual property and sensitive operational information. Protecting this information requires appropriate controls across its lifecycle, including when it is shared with partners or accessed through third-party systems.
Maintaining Operational Resilience
Sustaining critical operations during a cyber incident is essential for defence organisations. This requires tested response and recovery plans that account for dependencies between systems, teams and suppliers, so a compromise can be contained while essential services continue.
Our Cyber Security Services for Defence Organisations
We help defence suppliers and MOD organisations address immediate security priorities and improve their cyber maturity over time. We also help organisations achieve DCC certification at the level appropriate to their MOD or prime contractor requirements.
Defence Cyber Certification with Bridewell
Defence Cyber Certification (DCC) is the UK Ministry of Defence and IASME cyber security certification framework for defence suppliers. It assesses an organisation against Defence Standard 05-138 Issue 4 and provides a single, organisation-level assurance of cyber resilience.
We were one of the original five certification bodies selected to work with IASME to develop and deliver the DCC scheme. We were also among the first organisations to achieve DCC Level 2 certification and the first to issue DCC Level 3 certification in the UK.
Whether you're just starting your DCC journey or are ready to pursue certification, Bridewell provides support at every stage. From defining your scope and understanding your obligations, through to identifying gaps and achieving certification, our DCC specialists help you navigate the process with confidence.
DCC Scoping
Our specialists help you establish a clear, defensible scope that aligns with MOD requirements and supports successful certification.
DCC Gap Assessment & Readiness
Before committing to certification, we help organisations assess their current level of compliance against the target DCC level. Through a structured gap assessment, we identify weaknesses, validate existing controls and provide a clear remediation roadmap.
DCC Assessment & Certification
We can also independently assess your organisation and guide you through the certification process.
Bridewell offers both advisory support and formal assessment and certification. Where both are required, appropriate separation and independence safeguards are applied.
What Are the Cyber Threats Facing Defence Organisations?
Our Commitment to the Defence Community
Our connection to defence extends beyond the services we deliver. Bridewell’s Defence and Emergency Services Network provides a supportive community for colleagues with an armed forces or emergency services affiliation, including veterans, reservists and service families.
We signed the Armed Forces Covenant in 2018 and have achieved Gold status in the Defence Employer Recognition Scheme. These commitments underpin our support for service leavers moving into civilian careers and colleagues balancing their work with reserve service.
The network creates opportunities to share experience, support career transitions and recognise the skills that people from defence and emergency services backgrounds bring to cyber security.
Defence Sector Insights
Explore guidance to help your organisation understand defence assurance requirements and strengthen its approach to cyber security.
Cyber Threat Intelligence
Explore the latest research from BCON Collective.
Defence and Emergency Services Network
Learn more about our support for the defence community.
