Elastic has achieved Defence Cyber Certification (DCC) Level 0, the UK Ministry of Defence's baseline cyber assurance standard for its defence supply chain, ahead of the MOD's 31 December 2026 deadline for all industry partners. The DCC scheme, launched in May 2025 and administered by IASME, replaces self-attestation with independent verification against Def Stan 05-138 (Issue 4) and requires Cyber Essentials certification as a prerequisite. Elastic already holds Cyber Essentials Plus, and the certificate is downloadable from assurance.elastic.co for procurement and due diligence purposes.
Table of contents
What is the DCC scheme?What does this mean for the UK public sector?Accessing the certificateA practical milestone in a longer programmeShareQuestions this post answers
What is DCC Level 0 and when do UK MOD suppliers need it by?
DCC Level 0 is the entry tier of the UK Ministry of Defence's Defence Cyber Certification scheme, an independently assessed cyber assurance framework replacing self-attestation for defence supply chain partners. Launched in May 2025 and administered by IASME against Def Stan 05-138 (Issue 4), it requires Cyber Essentials certification as a prerequisite. All MOD industry partners must hold at least Level 0 by 31 December 2026. Suppliers tracking defence compliance deadlines like this one can follow security certification news on daily.dev.
Does Elastic hold any UK government security certifications?
Elastic holds Cyber Essentials Plus, the higher of the two Cyber Essentials tiers requiring technical verification, and has achieved DCC Level 0, the UK Ministry of Defence's baseline cyber assurance certification for defence supply chain partners. The DCC Level 0 certificate is available for download from assurance.elastic.co for procurement or due diligence purposes. Evaluators comparing vendor security credentials can track certification updates like this on daily.dev.