Ministry of Defence Implementation of Cyber Essentials Scheme

As of 1st January 2016 the Ministry of Defence will require suppliers to have obtained a Cyber Essentials certificate by the contract start date.

MOD states:

"For all new requirements advertised from 1st January 2016 which entail the transfer of MOD identifitable information from customer to supplier or the generation of information by a supplier specifically in support of the MOD contract, MOD will require suppliers to have a Cyber Essentials certificate by the contract start date at the latest, and for it to be renewed annually. This requirement must be flowed down the supply chain."

Please see the Letter and FAQs attached to the bottom of this page for further details.

To find out more about the Cyber Essentials Scheme please click here.

The supporting statement below has been circulated by trade associations and member companies of the joint MOD-industry Defence Cyber Protection Partnership (DCPP).

Dear Defence Supplier,

The attached letter from MOD announces its implementation of the Cyber Essentials Scheme (CES). This is a significant step for the whole defence supply chain and one that we welcome.

Cyber-attack is a real threat to national security and a risk to our businesses. Responding to this, making the UK a safe place to do business, enhancing both security and prosperity, requires Government and industry to work together.

The Defence Cyber Protection Partnership (DCPP) is a key part of the defence sector response. DCPP is joint government-industry initiative established to improve the level of cyber-security throughout the defence supply chain. CES is a core part of DCPP's Cyber Security Model which introduces additional controls appropriate for higher risks and will be introduced in Q2 2016.

CES certification will become the baseline requirement for companies in the UK defence supply chain. Suppliers are strongly encouraged to start working towards achieving it.

Further information is available from the sources listed below and ADS and techUK will be arranging various events on the matter during 2016. Watch out for details of these events on their websites.


techUK will be hosting a webinar in February to share more information about the DCPP and Cyber Essentials Scheme.


Letter (pdf)FAQs (pdf)

Share this


Patent Box is a valuable resource for both manufacturers and service companies that plan to become, leaders in AI o…
Guest Blog: Game on - building cyber skills through interactive apps by @DrMeredyddWllms at @RokeManor as part of o…
Our first ever Spring #healthtech Dinner, takes place in Leeds on 21 April. Join leaders from across the healthca…
Guest Blog: Building a Workforce to Keep Us Safe Online by Martin Ewings, Director and Brand Leader for…
Guest Blog: It's a Matter of Trust - How Security Vendors can Build Trust Using PR by Geraldine Fernandez, Associat…
Guest Blog: How Do You Remain Savvy With Your Supply Chain by @colinrobbins Managing Security Consultant at @Nexor
Digital Secretary @OliverDowden has today announced a £65m package for 5G projects: £35m for nine consortia who suc…
Become a Member

Become a techUK Member

By becoming a techUK member we will help you grow through:

Click here to learn more...