Guidance
Cyber security for defence suppliers (Def Stan 05-138, Issue 4)
This defence standard specifies the cyber controls that defence suppliers are required to achieve at each of the 4 cyber risk profile levels that a contract can be assessed at.
Documents
Details
This defence standard (Def Stan 05-138, Issue 4) is applicable to all Ministry of Defence (MOD) procurements, MOD suppliers and their subcontract suppliers, which have a relationship to one or more MOD contracts.
Updates to this page
Published 23 May 2024
Last updated 3 December 2025
show all updates
-
Updated details on Def Stan 05-138, Issue 4.
-
First published.