DCC Level 0 is an evidence-led assessment - not a technical audit. Your assessor will review specific documents against each of the three Def Stan 05-138 controls, working through six defined sub-controls. Work through all six items below and confirm each is in place before your assessment begins. Tick each item as you confirm it.
The MOD has mandated that all defence supply chain organisations achieve at least DCC Level 0 by 31 December 2026. Cyber Essentials is a mandatory prerequisite - your CE scope must align with your intended DCC scope. A scope misalignment fails the assessment immediately. Confirm everything in this checklist before your assessment begins.
Tick each item below as you confirm the document or evidence is in place for your organisation.
The assessor will verify that your Cyber Essentials certificate is current and covers the correct scope for your DCC assessment, and that your organisation commits to maintaining CE throughout the DCC certification period. A missing or misaligned CE certificate triggers automatic failure - no further controls are assessed.
The assessor will review evidence that your organisation processes personal data lawfully under UK GDPR. This control has two sub-questions: whether documented policies exist and whether DPIAs are conducted. Evidence requirements for policies vary by organisational size.
The assessor will review whether your organisation has assessed what level of resilience its systems require, and whether concrete resilience measures have been implemented. Evidence requirements for the assessment stage vary by size - for implementation, practical evidence is required, not policy documents.
Our UK-based team will review your scoping and documentation before your formal assessment begins - identifying and resolving any gaps before they become failures. Fixed prices, IASME certification fee included. View pricing →
Don't yet hold Cyber Essentials? CE is a mandatory prerequisite for DCC Level 0 - you cannot proceed without it. We can manage both certifications as a single engagement. Use the CE basic readiness checklist →
This checklist is based on the DCC Level 0 evidence requirements under Def Stan 05-138 (Issue 4). It is provided as a self-assessment guide only - formal certification requires assessment by an IASME Approved Certification Body. For questions about your readiness, contact our team.