Cyber Essentials for UK defence and MOD suppliers Certified by Fig.
Fig Group is an IASME-licensed Cyber Essentials and Defence Cyber Certification (DCC) body at Levels 0 and 1. We certify UK MOD supply chain organisations - primes, tier 2/3 subcontractors, defence SMEs, Def Stan 05-138-scoped manufacturers. From £299.99 + VAT for CE Micro, with a 6-hour turnaround guarantee. Also see our Defence Cyber Certification page.
Sector-specific
Tailored to defence and mod suppliers
The standard scheme guidance does not address the operational reality of this sector. These are the scope, regulatory, and supplier-cascade points Fig assessors check first.
- 01DCC Level 0 / Level 1 readiness and certification (Fig is an IASME-licensed DCC body).
- 02Def Stan 05-138 / CSM v4 control alignment.
- 03CE as the baseline precondition for most MOD tier-1 supplier contracts.
- 04CE Plus for higher-assurance defence work.
- 05ITAR-adjacent and export-controlled data handling considerations.
- 06MOD supply chain cascade - primes require CE of their tier 2 and tier 3 subcontractors.
Pricing at a glance
Below the standard IASME fee at every tier
No re-submission charges. Three free re-submissions included. Published pricing - no gated forms or consultancy add-ons.
Turnaround
6 hours
For compliant submissions before midday.
Cyber Essentials
£299.99 – £549.99
+ VAT, by organisation size.
Cyber Essentials Plus
£1,499 – £4,499
+ VAT, third-party verified.
Common questions
Frequently asked questions
Is Cyber Essentials required for MOD suppliers?
CE is the baseline cyber requirement on most MOD tier-1 contracts and cascades to tier 2 and tier 3 subcontractors. DCC (Defence Cyber Certification) sits above CE and is increasingly required on higher-assurance work.
What is DCC?
Defence Cyber Certification is the IASME-delivered UK MOD scheme replacing DCPP. DCC runs at four levels (L0–L3). L0 and L1 are the most common requirements in MOD supply chains. Fig Group is an IASME-licensed DCC body at L0 and L1.
Can we certify for CE and DCC together?
Yes. Fig Group certifies both under the same IASME licence relationship. Many defence suppliers hold CE as a foundation and add DCC L0/L1 for specific contracts. See /defence-cyber-certification for more.
What is the pricing for CE for defence suppliers?
Cyber Essentials is priced by organisation size, not sector - Micro £299.99, Small £399.99, Medium £449.99, Large £549.99, all + VAT. DCC pricing is quoted separately based on scope and level.
Do small defence SMEs need CE Plus?
Depends on the contract. Many MOD primes now require CE Plus from tier 2 subcontractors. Budget for Plus if you are pursuing prime-cascade work.
Next step
Ready to certify?
From £299.99 + VAT. IASME-licensed. Typically within 6 working hours. No consultancy add-ons.