No. DCC is currently not mandatory and you can still tender for MOD contracts through the normal process. Certifying early demonstrates cyber maturity and gives suppliers a competitive advantage.