What does the MOD security model involve?
Cyber Essentials forms part of the overall Cyber Security Model introduced by the DCPP (Defence Cyber Protection Partnership) within the MOD (Ministry of Defence). The DCPP is responsible for protecting the defence supply chain from cyber threats.
The Cyber Security Model was developed by the DCPP in partnership with industry, and comprises the elements:
- The Risk Assessment; used to measure the level of cyber risk for a contract
- The Risk Assessment will assign one of five cyber risk profiles.
- Suppliers bidding for a contract must complete a SAQ (Supplier Assurance Questionnaire) evidencing that they can meet the contract’s assessed level of cyber risk.
