Skip to content

Defence Cyber Certification (DCC)

Why is DCC L1 priced as a range and L0 is flat?

Level 0 has a published staff-band price from £499.99 to £799.99 + VAT. Level 1 ranges from £9,999–£14,999 + VAT for Micro to £25,000–£49,999 + VAT for Large because scope, evidence gaps and assessor effort vary. The published package includes scoped consultancy and assessment; optional work outside the accepted Order Form may cost extra. Request a written Level 1 quote rather than treating a range endpoint as a fixed checkout price.

Short answer

Level 0 has a published staff-band price from £499.99 to £799.99 + VAT. Level 1 ranges from £9,999–£14,999 + VAT for Micro to £25,000–£49,999 + VAT for Large because scope, evidence gaps and assessor effort vary. The published package includes scoped consultancy and assessment; optional work outside the accepted Order Form may cost extra. Request a written Level 1 quote rather than treating a range endpoint as a fixed checkout price.

Why this matters

Defence Cyber Certification (DCC) supports MOD supplier assurance at the numeric level required for a specific contract. The contracting authority assigns the Cyber Risk Profile and Risk Assessment Reference; older verbal risk bands do not determine a current level.

Check the authority’s written requirement, the scope of essential organisational services and current Cyber Essentials prerequisite. Level 0 and Level 1 use different assessment evidence. A DCC certificate does not replace the contract-specific Supplier Assurance Questionnaire. Fig Group assesses Levels 0 and 1 through its licensed certification body; a higher level needs a separately authorised body.

What to check next

  • Ask the buyer for the current numeric level, contract version and Risk Assessment Reference.
  • Map existing evidence to that level, record its date and scope, and identify gaps for independent assessment.
  • Check the published Level 0 package or request a written Level 1 scope, price and schedule before purchasing.

Official sources and related Fig Group guidance

Confirm the assigned level with your contracting authority. Use the MOD Cyber Security Model and IASME DCC guidance to check the scheme, then review Fig Group’s DCC package and terms for the service you intend to buy.