Compliance built for the defence supply chain.
WHG is C10G's defence compliance division. We support UK and US defence suppliers in meeting the cyber and information security requirements that protect national security — and keep them on the approved supplier list.
Built for defence suppliers, not enterprise IT.
Most cyber compliance frameworks were written with large primes in mind. WHG exists to make them workable for the SMEs that make up the majority of the defence supply chain.
UK defence sub-contractors
Tier 2 and Tier 3 suppliers to UK primes who need to demonstrate compliance with DEFSTAN, DCC, or Cyber Essentials as a condition of contract.
US defence supply chain (CMMC)
UK-based companies bidding on US DoD contracts who need to achieve CMMC Level 1, 2, or 3 certification under the Cybersecurity Maturity Model Certification programme.
Dual-use technology companies
Organisations whose products or services span civil and defence markets, requiring compliance with both commercial and defence-specific security standards.
New entrants to defence
Companies entering the defence market for the first time who need to understand what compliance is required, in what timeframe, and at what cost.
Three frameworks. One specialist team.
A clear process. No surprises.
Scoping call
We start with a no-obligation scoping call to understand your contracts, timelines, and current security posture. We tell you exactly what you need and what it will cost.
Gap assessment
A structured assessment against the relevant framework — CMMC, DCC, or Cyber Essentials — producing a clear gap report with prioritised remediation actions.
Remediation support
We work alongside your team to implement the required controls, develop documentation, and build the evidence base needed for certification or assessment.
Certification & beyond
We prepare you for third-party assessment or certification, attend where required, and provide ongoing support to maintain compliance through contract renewals.
Defence compliance starts with a conversation.
Tell us which framework you need, your timeline, and your current position. We will give you a straight answer on what is required and what it will cost.