UK Cyber Schemes
DEFCON 658
The MOD contract condition that applies the Cyber Security Model to a contract. Where it is incorporated, the contractor must complete the risk assessment and Supplier Assurance Questionnaire, meet the applicable DEFSTAN 05-138 controls or an agreed Cyber Improvement Plan, report incidents, and flow the same obligations down to relevant subcontractors.
Why it matters: the flow-down is what pulls Tier 2 and Tier 3 suppliers into scope.
Related Goldline services: DCC readiness for defence suppliers and DCC Level 0 readiness for defence suppliers.
Related terms
Next step: DCC readiness for defence suppliers →
Questions about how this applies to you? Book a free 45 minute diagnostic.