ISO/IEC 27001 aligned with Def Stan 05-138
Defence suppliers increasingly need both ISO/IEC 27001 and Defence Cyber Certification. We design one information security management system that serves both, with a single set of evidence.
Why it matters in defence
Protecting defence information is a contractual obligation, not a preference.
- Controls that align closely with Def Stan 05-138 and DCC
- A risk-based Statement of Applicability tailored to your contracts
- Evidence of supply chain information security control
- Recognised internationally for export and allied programmes
Gap analysis
Your current practice assessed against ISO/IEC 27001 and the defence requirements in your contracts.
Design and implement
Processes and records built around how you actually work, with your team.
Internal audit
Independent internal audits and a pre-assessment before certification.
Sustain
Support through surveillance cycles, changes and new contract requirements.
Part of one defence-ready system
ISO/IEC 27001 rarely stands alone. We build it into a single management system with the other requirements your contracts call up.
One ISMS for ISO 27001 and DCC
We map your controls once and reuse the evidence across both schemes.