The DCC Audit Quote Builder — get your price in minutes.
Confirm the Defence Cyber Certification level you need. Choose Audit for an instant certification quote, or Implementer if you need hands-on help getting audit-ready first — we'll scope that pricing with you on a quick call.
Build your DCC quote
All five DCC products are priced below for Audit — Level 0 and Level 1 certification is fixed price; Level 2 and the hybrid routes show a baseline. Choose Implementer instead if you want hands-on help getting audit-ready; we'll scope that pricing with you on a call. Independence rules mean we can't do both for the same engagement.
DCC Levels 0, 1 & 2 — the standalone assessments
Every MOD supplier handling defence data needs at least DCC Level 0 by 31 December 2026. DCC Level 1 and DCC Level 2 apply as the contract or the sensitivity of the defence data you handle increases.
| DCC product | Controls | Prerequisite | Assessment |
|---|---|---|---|
| Level 0 Very low risk | 3 controls | Cyber Essentials (Basic) | Self-assessment + review |
| Level 1 Low / moderate risk | 101 controls | Cyber Essentials (Basic) | Full ASR, theoretical + practical scoring |
| Level 2 Moderate / high risk | 139 controls | Cyber Essentials Plus | Full ASR, theoretical + practical scoring |
DCC Level 3 & the Hybrid assessment routes
What is DCC Level 3? DCC Level 3 is the highest Defence Cyber Certification tier, for MOD suppliers handling the most sensitive defence data. There is no standalone DCC Level 3 audit — the only route to DCC Level 3 certification is the Level 2/3 Hybrid assessment, which runs a single ASR cycle against 145 controls: you're certified at Level 3 if you hit that pass mark, with Level 2 awarded as a fallback if you don't.
| DCC product | Controls | Prerequisite | Assessment |
|---|---|---|---|
| Level 1/2 Hybrid Moderate / high risk | 101 + 139 controls, one cycle | Cyber Essentials Plus | One ASR — L2 target, L1 fallback |
| Level 2/3 Hybrid High / critical risk | 145 controls, one cycle | Cyber Essentials Plus | One ASR — L3 target, L2 fallback. Only route to DCC Level 3 |
Every level, answered
Level 0 & Level 1
Is Level 0 the same as Cyber Essentials? +
No. Cyber Essentials Basic is a prerequisite you must already hold. Level 0 adds three defence-specific controls on top and confirms them through a short self-assessment and review.
Why is Level 1 priced flat, regardless of size? +
Level 1 runs the same 101-control assessment process for every organisation size, so it's priced as a single flat rate rather than scaling with headcount like Level 0 does.
What are "clarification rounds"? +
During theoretical scoring, the Certification Body may grant clarification rounds — a normal chance to update responses or address gaps before the practical phase. A standard allowance is already included in the Level 1 price; it isn't a sign of failure.
Level 2, Hybrids & Preparation
What's the difference between Level 2 and the Level 1/2 Hybrid? +
Level 2 is a standalone assessment against 139 controls. The Level 1/2 Hybrid runs one assessment cycle covering both control sets — you're certified at Level 2 if you hit that pass mark, with Level 1 as a fallback. It's cheaper than buying both separately if you know upfront you're aiming for Level 2.
Is there a standalone Level 3 assessment? +
No. Level 3 is only reached through the Level 2/3 Hybrid — one cycle covering 145 controls in total, with a Level 3 certificate if you hit that pass mark and Level 2 as a fallback.
Can Periculo just help us prepare, without doing the certification? +
Yes. Preparation support — reviewing your evidence, explaining what a control needs, closing gaps before an audit — is a standalone chargeable service, quoted separately from certification. Choose "Implementer" in the builder to book a free scoping call, since pricing depends on your starting point. Because independence rules mean a Certification Body can't audit an organisation it has helped prepare, we'll introduce you to an audit partner for the certification itself.