Cyber Essentials for UK defence and MOD suppliers Certified by Fig Group.
Fig Compliance Ltd holds separate IASME licences for Cyber Essentials, Defence Cyber Certification Level 0 and Defence Cyber Certification Level 1. We certify UK MOD supply chain organisations - primes, tier 2/3 subcontractors, defence SMEs, Def Stan 05-138-scoped manufacturers. From £299.99 + VAT for CE Micro, with a six-working-hour Basic guarantee for complete, compliant submissions before midday on a UK Business Day, subject to terms. Also see our Defence Cyber Certification page.
Sector-specific
Tailored to defence and mod suppliers
The scheme requirements apply across sectors; implementation and contractual context differ. These are the scope, regulatory, and supplier-cascade points Fig Group assessors check first.
- 01DCC Level 0 / Level 1 readiness and certification (Fig Group is an IASME-licensed DCC body).
- 02Def Stan 05-138 issue 4 control alignment.
- 03Cyber Essentials prerequisites and contract-specific MOD assurance.
- 04CE Plus for higher-assurance defence work.
- 05ITAR-adjacent and export-controlled data handling considerations.
- 06MOD supply-chain requirements passed down through applicable contracts.
Pricing at a glance
Below the standard IASME fee at every tier
Three free rounds of Basic assessor feedback included. Published pricing - no gated forms or consultancy add-ons. If gaps remain after the included rounds or assessment period, agree any further support or new purchase before incurring a charge. Read the assessment terms.
Turnaround
6 working hours
Complete, compliant Basic submissions before midday on a UK Business Day; terms apply.
Cyber Essentials
£299.99 - £549.99
+ VAT, by organisation size.
Cyber Essentials Plus
£1,499.99 - £4,499.99
+ VAT, third-party verified.
Common questions
Frequently asked questions
Is Cyber Essentials required for MOD suppliers?
Follow the Cyber Risk Profile, Risk Assessment Reference and cyber conditions assigned to the contract, including applicable supply-chain requirements. Cyber Essentials is a DCC prerequisite; current MOD guidance still requires the full contract-specific Supplier Assurance Questionnaire even where DCC is held.
What is DCC?
Defence Cyber Certification is an IASME-delivered organisational assurance scheme aligned to Def Stan 05-138 Issue 4 and the MOD Cyber Security Model. It has numeric Levels 0 to 3 and supports the contractual supplier-assurance process. Fig Compliance Ltd holds separate licences for Levels 0 and 1.
Can we certify for CE and DCC together?
Yes. Fig Compliance Ltd holds separate scheme licences for Cyber Essentials and DCC Levels 0 and 1. A current Cyber Essentials certificate is required before formal DCC assessment. Arrange certification and annual renewals separately.
What is the pricing for CE for defence suppliers?
Cyber Essentials is priced by organisation size, not sector - Micro £299.99, Small £399.99, Medium £449.99, Large £549.99, all + VAT. DCC Level 0 has published prices by organisation size; Level 1 is quoted after scoping.
Do small defence SMEs need CE Plus?
Company size alone does not decide this. Check the contract and required DCC level: DCC Levels 2 and 3 require Cyber Essentials Plus. Fig Group delivers Levels 0 and 1 and refers higher-level assessments to appropriately licensed bodies.
Sources: NCSC requirements v3.3, PPN 014, certification terms. MOD Cyber Security Model.
Next step for defence suppliers
Defence Cyber Certification (DCC) on top of Cyber Essentials.
Check the contract-specific MOD requirements. DCC requires underlying Cyber Essentials and supports the full Supplier Assurance Questionnaire process. Fig Group is IASME-licensed for DCC Level 0 (from £499.99 + VAT, 2–3 weeks) and DCC Level 1 (from £9,999 + VAT, 6–10 weeks).
Compare DCC levels and certification pricesNext step
Ready to certify?
From £299.99 + VAT. IASME-licensed. Typically within 6 working hours. No consultancy add-ons.