When we first shared that Evolve North had become a certifying body for the Defence Cyber Certification (DCC) scheme, it was a big milestone – one that aligned with the UK Ministry of Defence’s intent to strengthen cyber resilience right across the defence supply chain. 

Today, we’re building on that momentum: we are now able to certify organisations at Level 1 of the DCC framework. This means we can independently confirm and award certification to organisations demonstrating a comprehensive baseline of cyber security controls that go beyond the most foundational level. 

Why this matters to your organisation 

The heartbeat of the DCC framework is simple: it’s designed to give defence suppliers a clear, consistent, and independently verified assurance that their cyber security practices are effective and aligned with sector expectations. Where Level 0 focuses on foundational cyber hygiene (aligned with Cyber Essentials), Level 1 expands that footprint considerably. It expects organisations to have a comprehensive cyber security programme in place, covering governance, risk management, incident response, basic technical controls and evidence to show those practices are working in the real world.  

For UK organisations operating in, or aiming to break into, the defence supply chain, this change is significant. Certification at Level 1 isn’t just compliance for compliance’s sake, it’s a recognised stamp of maturity and readiness that can be presented to defence primes, buyers and partners with confidence. 

What’s different now and what doesn’t change

Previously, as an assessor, our role was to determine whether an organisation’s current cyber controls mapped to the DCC’s requirements. We could guide and advise, but we could not issue the certification itself. 

Now, as a certifying body for Level 1, we can formally confirm and award certification to organisations that meet the standard. That includes: 

• Validating evidence across the DCC’s expanded set of requirements 

• Confirming that controls are not just designed, but operational 

• Issuing the official Level 1 certificate and digital badge you can reuse in evidence packs, contract tenders and governance reporting 

This doesn’t change the integrity of the scheme, in fact, it strengthens it, because the certification you receive is now issued by the same body that independently verifies compliance. It also means there’s one trusted partner you can work with from preparation through to certification issuance. 

What doesn’t change is the foundation underneath all of this: Cyber Essentials (for Level 1) remains a prerequisite. The fundamentals of good cyber hygiene are still the base on which defence certification is built.  

Why Level 1 matters right now

Level 1 is where many organisations sit when they’re ready to move beyond basic hygiene towards a structured, accountable and sustainable cyber programme. It’s: 

• Comprehensive, without being intimidating 

• Detailed, but achievable with good practice already in place 

• Recognised, both within defence procurements and in wider assurance conversations 

Whether you’re already working with defence primes, regularly responding to MOD tenders, or simply want a strong, independently verified assurance of your cyber posture, Level 1 certification is a meaningful signal of capability. 

What to expect next

Preparing for Level 1 certification is more than a checklist, it’s about embedding cyber security into how your organisation operates day-to-day. A good DCC programme includes: 

• Well-documented policies and governance 

• Clear risk management and reporting 

• Practical, observable technical controls 

• Evidence of how security outcomes are measured and maintained 

And because the DCC is aligned with existing best practices and standards, many of these activities will also support other frameworks and compliance needs your organisation might have.  

If you’re already on the DCC journey, or if Level 1 is your next logical step, working with a certification body that understands the scheme from the inside out can make the process clearer, more structured and ultimately more successful. 

Want to talk about Level 1 DCC certification for your organisation? Reach out to us on 01748 905 002 or email info@evolvenorth.com we’re here to help you build clarity, confidence and long-term cyber resilience.