DCC AUDIT PREPARATION

DCC Audit Preparation for Levels 1 to 3

Q: Do I need Cyber Essentials Plus for DCC?

Level 1 needs a valid Cyber Essentials certificate. Levels 2 and 3 need Cyber Essentials Plus.

Q: How many controls are there at each level?

Level 1 has 101 controls, Level 2 has 139 and Level 3 has 144.

Q: Does DCC satisfy DEFCON 658?

Yes. The MOD’s ISN 2026/02 confirms that a valid DCC certificate at the right level meets DEFCON 658 control requirements.

Q: Can Periculo audit us after preparing us?

No. As a Certification Body we cannot audit work we have implemented. If we prepare you, another IASME-licensed Certification Body carries out your assessment.

Q: What does DCC audit preparation cost?

Costs depend on your organisation’s size and target level. Use our instant DCC quote builder for an indicative price, or book a call. Ongoing support through our DCC Managed Service starts from £3,000 a month.

Get ready for your Defence Cyber Certification assessment. We confirm the level your contracts need, run a gap analysis against the controls, help you build the evidence and close the gaps, then hand you over ready for assessment.

Build my DCC quote

STREAMLINED COMPLIANCE

This service helps prime contractors and SME suppliers rapidly achieve Defence Cyber Certification. We remove the complexity from framework onboarding, guiding you seamlessly through the required technical controls.

3-YEAR VALIDITY

DCC certification is valid for three years, subject to an annual check-in, so you can bid for MOD and prime contractor work with confidence throughout that period.

COMPETITIVE EDGE

Holding DCC certification signals to the MOD and prime contractors that your security posture meets defence-grade standards — opening doors to contracts and frameworks that require supplier assurance.

What is DCC audit preparation?

DCC audit preparation is implementation support for organisations moving to Defence Cyber Certification Level 1, 2 or 3. Our consultants assess where you stand against the controls for your target level, help you build the governance, policies and evidence required, and get you ready for assessment.

Periculo can be your implementer or your auditor, never both. If we prepare you, your assessment is carried out by another IASME-licensed Certification Body.

Implementer or auditor

We keep strict separation of duties: we never audit work we have implemented.

Level 0 fee credited

100% of your Level 0 fee comes off your Level 1, Level 2 or Hybrid assessment if you start within 12 months.

CERTIFICATION LEVELS

Periculo supports organisations across all four DCC levels, from Level 0 through Level 3. We're currently authorised to certify Levels 0 - 3.

FEATURE

Level 0

Level 1

Level 2

Level 3

Risk Profile

Very Low

Low / Moderate

Moderate / High

High / Critical

Focus

Basic Cyber Hygiene

Enhanced Organizational Security

Advanced Security & Assurance

Highest Assurance / Mission Critical

Controls

3 Key Controls

101 Comprehensive Controls

Expanded Control Set

Full / Highest Control Set

Prerequisite

Cyber Essentials (Basic)

Cyber Essentials Plus

Cyber Essentials Plus + Evidence Pack

Assessment Type

Self-Assessment + Review

Assessment + Validation

Independent Assessment

Choose Your Path to Compliance

Periculo supports you whether you are ready for an audit or need help getting there.

(Note: As an accredited Certification Body, we maintain strict separation of duties. We cannot audit work we have implemented.)

Periculo as Your Auditor

For organisations ready for certification

As an official IASME Certification Body, we conduct the formal assessment to certify your organisation against DEF STAN 05-138.

OFFICIAL LEVEL 0 -3 ASSESSMENTS
INDEPENDENT VERIFICATION
FAST AUDIT PROCESS

Periculo as Your Implementer

For organisations needing guidance & support

Our expert consultants work alongside your team to build the governance, policies, and controls required for compliance. We support every DCC level, from Level 0 through Level 3.

GAP ANALYSIS & READINESS ASSESSMENT
POLICY WRITING & CONTROL IMPLEMENTATION
DCC MANAGED SERVICE (ONGOING SUPPORT)

DCC Managed Service

We provide comprehensive cybersecurity solutions to the defence sector, helping organizations meet the stringent requirements of the Defence Cyber Scheme and other government standards. Our services include supplier assurance, securing sensitive data, and ensuring the resilience of critical defence infrastructure. We help you navigate the complexities of defence procurement and maintain a robust security posture in an ever-evolving threat landscape.

Why choose Managed Service?

EXPERTISE ON DEMAND

Access to senior cyber security consultants without the headcount cost.

RISK REDUCTION

Proactively identify and close security gaps before they become compliance failures or costly breaches.

SIMPLIFIED AUDIT

We manage the evidence, documentation, and liaison with your certification body, so audit day is straightforward.

PRICING

Managed Service from

£3,000

Per Month

Your Path To Assessment

We guide you from gap analysis to an audit-ready submission.

Confirm Your Level

WE CONFIRM THE DCC LEVEL YOUR CONTRACTS REQUIRE, BASED ON THE CYBER RISK PROFILE SET BY THE MOD OR YOUR PRIME.

Gap Analysis

WE PINPOINT SPECIFIC GAPS BETWEEN YOUR EXISTING CONTROLS AND THE DCC LEVEL YOU'RE TARGETING, THEN PRIORITISE REMEDIATION.

Implementation

Our experts help you put the controls in place and prepare the evidence and documentation to demonstrate compliance.

Assessment

You go into assessment with an independent IASME-licensed Certification Body, ready to certify.

Testimonials

“Periculo assisted our organisation in achieving the new DCC Level 0 Certification. Throughout, they were professional, knowledgeable and thorough.”

DCC LEVEL 0 CLIENT

“Whether acting as auditors or consultants, they are professional, pragmatic, and highly knowledgeable. They take the time to understand their clients' needs, provide clear and actionable guidance, and consistently deliver with integrity and attention to detail.

Their responsiveness and prompt communication are particularly impressive, questions are addressed quickly, and support is always available when needed.”

PERICULO CLIENT

Free guide

The DCC Level-by-Level Playbook

A practical, level-by-level walkthrough of Defence Cyber Certification — what evidence you need, how to map it, and how to get through your submission first time.