DEFENCE CYBER READINESS CHECK
Where do you sit against DCC and prime expectations?
Twelve questions, about five minutes, and you get an indicative risk profile, a six-domain scorecard and the frameworks your position calls for.
Calibrated against the inputs Def Stan 05-138 uses to drive risk profile.
- Calibrated against DEFSTAN 05-138, DEFCON 658, Cyber Essentials Plus, ISO 27001:2022 and JOSCAR Stage 2 expectations
- Six-domain RAG scorecard: Profile Position, Technical Controls, ISMS, Supplier Risk, Personnel Security, Evidence Maturity
- 5-minute completion; full PDF profile sent by email
- Senior practitioner-calibrated; no consumer-grade gamification
Common questions
The 12 questions are calibrated against the inputs DEFSTAN 05-138 uses to drive risk profile (information classification, operational impact, supply chain position, named primes, personnel security). SECRET-or-above information handling and Critical National Infrastructure impact apply mandatory minimum-High overrides. The profile is indicative; the contracting prime issues the binding profile.
An on-screen profile with six-domain RAG scorecard, and a six-page branded PDF emailed to the address you provide. The PDF includes the profile, RAG analysis, narrative for each domain, frameworks needed at your profile, and a recommended next step.
Answers are stored to generate your profile and to send you the PDF. We use them to send occasional, relevant Goldline insights on UK defence supply chain readiness. Unsubscribe is one click and available in every email.
Yes. The 12-question assessment, on-screen profile, and PDF are free. The Defence Cyber Foundation programme is a chargeable engagement scoped to your DEFSTAN 05-138 profile; pricing is discussed during a scoping call.
Want the answer checked by a person?
Forty five minutes, free, with the practitioner who would deliver the work. Bring the questionnaire, the clause or the customer email. You leave with a written note the same day, whether or not you buy anything.
How this works. The profile follows the inputs Def Stan 05-138 uses, with mandatory overrides for SECRET or above information handling and Critical National Infrastructure impact. It is indicative only. The contracting prime issues the binding profile, and the figure is an estimate rather than a quotation.