WHG helps primes, SMEs and new entrants meet the compliance requirements of UK defence contracts – from Defence Cyber Certification and Def Stans to ISO management systems and end-to-end supplier assurance.
ASSUREIMPROVEENABLETOGETHER
We start from what your MOD or prime contract actually requires, then build and maintain the systems and evidence to meet it – proportionate, practical and ready for scrutiny.
Readiness for DCC Levels 0–3 against Def Stan 05-138 under the MOD Cyber Security Model, built on Cyber Essentials, Cyber Essentials Plus and ISO/IEC 27001.
Defence cyberQuality systems that satisfy AQAP 2110, deliverable quality plans to AQAP 2105, and the Def Stan procedural requirements that flow down in MOD contracts.
Defence standardsRisk assessment, due diligence, onboarding, supplier audits and performance monitoring – managed for you, end to end, across multi-tier supply chains.
Supplier assuranceIndependent internal audit programmes, pre-assessment and mock audits, and management review support – so external assessments hold no surprises.
Internal auditISO 9001, 27001, 14001, 45001 and 22301, designed as one integrated system that answers defence customer requirements rather than generic templates.
ISO standardsISO/IEC 42001 AI management systems for organisations developing, integrating or overseeing AI in defence and security programmes.
ISO/IEC 42001Tell us who you are and tick what you're facing – Def Stans, AQAPs, cyber, security conditions or supplier risk. We'll show what each one means and exactly how WHG can help.
Your contract obligations don’t stop at your own front door. We run the full supplier assurance lifecycle so every tier of your supply chain can evidence what the MOD and your prime expect.
Tier suppliers by criticality, contract value and exposure – cyber, quality, security, export and ethical risk.
Ownership, sanctions, PEP, financial stability, adverse media and certification checks.
Contract flow-down, evidence capture and baseline compliance pack before work starts.
Risk-based second-party audits on site or remote, with tracked corrective actions.
Independent audits of your own system and supplier controls, aligned to ISO 19011.
Performance, certificate expiries and contract obligations tracked, with board-ready reporting.
Supplier assurance programmes, supply chain cyber and quality oversight, and independent audit capacity when your own team is stretched.
Proportionate systems that meet flow-down requirements without drowning a small team in paperwork – and evidence your prime will accept.
A clear route from commercial to defence: what the contract will ask for, what you need first and how to get there without wasted effort.
Every engagement follows the same disciplined approach, scaled to your size and risk. You always know where you stand, what’s next and what evidence exists.
New procurement law, an SME spending drive, a new cyber model and a 31 December deadline for DCC Level 0. Here is what has changed in defence supply chain management, and how WHG can manage it for you.
The most significant update to environmental management requirements in over a decade – and why defence suppliers should start preparing now.
Cyber threats are a business risk, a supply chain risk and increasingly a contractual requirement – especially for defence and government suppliers.
Tell us about the contract or requirement. We’ll set out what applies, where you stand and a practical plan to close the gaps.
