DCC certification is valid for three years. You complete an annual attestation and maintain your Cyber Essentials or Cyber Essentials Plus certification, then recertify every three years.