24 September 2026: RightCue was delighted to speak to the Ministry of Defence about hardening cyber security Defence's supply chain. This follows the company being accredited by IASME as a Certifying Body across all four levels of the Defence Cyber Certification (DCC) - Levels 0 to 3 - under MOD governance. You can read the whole piece here.

DCC is a new, risk-based certification framework introduced by the MOD to strengthen cyber resilience across its supply chain to give suppliers a single, organisation-level assurance to support UK Defence procurements. RightCue helped shape the scheme alongside IASME during its development, drawing on years of experience supporting defence suppliers through Cyber Essentials, Cyber Essentials Plus and DCPP requirements. This is our sixth national accreditation, following the recent approval as an NCSC Assured Service Provider under the ACSC scheme.

"This is a significant step for us, and one that reflects both what our clients have been asking for and our own commitment to strengthening cyber resilience across the defence supply chain. Becoming a Certifying Body across all four levels was a natural next step, given our background as an NCSC Assured Cyber Security Consultancy and Assured Service Provider, CREST accredited and ISO 27001 certified."

Yogesh Agarwal, CEO of RightCue

Making DCC achievable for suppliers of every size

RightCue delivered the UK's first DCC Level 1 certification and has developed a reputation for supporting smaller suppliers through the process - many of whom start with limited cyber security resources and little prior experience of assurance frameworks.

"We're particularly proud of the work we do with SMEs. Helping a smaller supplier navigate certification and come out the other side more resilient is one of the most rewarding parts of what we do. Our advice to anyone starting the process is simple: start early and get your scoping right from day one. It's the single biggest cause of delays we see."

Yogesh Agarwal, CEO of RightCue

Preparing businesses for the next regulatory wave

The accreditation positions RightCue as a compliance partner ahead of a wave of incoming regulation affecting UK organisations, including the Cyber Resilience Act (CRA), ISO 42001 for AI management systems, and the forthcoming Cyber Resilience Bill, alongside DCC itself, which is expected to become a mandatory requirement for defence suppliers.

"DCC is a risk-based framework, so the right approach isn't to chase the highest level available but to work towards what your contracts and risk profile actually require. Ultimately, our biggest success is making DCC practical and achievable for organisations across the defence supply chain, regardless of their size or level of cyber maturity - better security and resilience is always the goal."

Yogesh Agarwal, CEO of RightCue