Punk Security DCC Level 0 and Level 1 Audits

This is an audit service offered by Punk Security for organizations that need to obtain Defence Cyber Certification (DCC) Level 0 or Level 1, typically required by the UK Ministry of Defence (MOD) or prime contractors as a supplier assurance requirement. The service provides formal assessment against DCC control sets, distinct from readiness or implementation support, which is offered as a separate product. Level 0 assessment: - Covers 3 controls for organizations with very low assessed cyber risk - Requires current Cyber Essentials certification - Checks scope alignment between Cyber Essentials and the DCC assessment boundary - Uses fixed pricing based on organization size - Does not require an Assessment Submission Record Level 1 assessment: - Covers 101 controls for organizations with low to moderate assessed cyber risk - Requires Cyber Essentials as a starting point - Includes scope confirmation, a readiness check, review of the Assessment Submission Record, theoretical scoring, and practical scoring including site visits - Includes certification issuing and an optional management report and debrief - Has staged decision points allowing an organization to exit before committing to more costly assessment stages - Pricing depends on scope, evidence quality, scoring effort, and number of sites The company provides a quote builder tool that generates an indicative assessment route and cost based on organization size, Cyber Essentials status, DCC level, and scoring/site assumptions. Auditors are security-cleared and have defence sector experience across MOD, prime contractor, and supplier assurance requirements.