Def Stan 05-138

Also known as: DEFSTAN 05-138, DEF STAN 05-138, Defence Standard 05-138, Cyber Security Model

Defence Standard 05-138 - Cyber Security for Defence Suppliers — UK Ministry of Defence

Official site Official change log

The cyber security controls UK defence suppliers are contractually required to meet. The standard defines four sets of controls, one for each Cyber Risk Profile (L0 to L3) assigned by the MOD delivery team under the Cyber Security Model, so a supplier's obligations scale with the risk of the contract rather than its size.

Subscribe to Def Stan 05-138 (RSS)

Timeline

No changes recorded yet — we are watching, and nothing has been published.

Monitoring

Watched by 1 official source. Watching since 20 September 2026.