How to Win MOD and Defence Contracts in the UK

1. How the MOD buys: DE&S, DSP and frameworks

Most major requirements run through Defence Equipment and Support (DE&S), the arms-length body that equips and supports the armed forces. A wide range of services, estate, and logistics work is advertised on the Defence Sourcing Portal (DSP) and the Find a Tender Service, and Crown Commercial Service frameworks carry defence-relevant lots that many suppliers reach the MOD through.

A large share of defence spend also flows through prime contractors. For SMEs and specialist suppliers, subcontract and framework call-off work behind a prime is often the most realistic route in.

• Defence Sourcing Portal (DSP) - the MOD supplier and opportunity portal
• DE&S - major equipment and support requirements
• Find a Tender Service and Contracts Finder - above and below threshold notices
• Prime contractor supply chains - subcontract and framework call-offs

2. JOSCAR: the accreditation that gates the supply chain

JOSCAR, the Joint Supply Chain Accreditation Register operated by Hellios, is the common pre-qualification across the UK defence and aerospace supply chain. Most prime contractors require suppliers to hold JOSCAR before they will place work, so completing it early is a practical gate to winning defence business rather than an afterthought.

The questionnaire covers financial, quality, safety, environmental, and security information, and is refreshed periodically. Treat it as a live asset, not a one-off form.

3. Security: BPSS, SC and the clearance question

Many defence requirements specify cleared personnel. The two most common levels are Baseline Personnel Security Standard (BPSS) and Security Check (SC), with higher tiers such as DV for the most sensitive work. Cyber Essentials Plus and ISO 27001 are frequently mandatory alongside clearance.

Clearance is often arranged after award for the named delivery team, but buyers still expect you to evidence a credible route to it, and to hold the required organisational certifications at bid stage.

4. DEFCON and DEFSTAN: the contractual backbone

Defence contracts are governed by DEFCON conditions and DEFSTAN standards. These shape how the commercial and technical response must be written, from intellectual property and data rights to quality and configuration management. A response that ignores the applicable DEFCONs reads as inexperienced and scores accordingly.

5. What a winning defence bid evidences

• A named, credible delivery team with a clear clearance route
• Current JOSCAR, Cyber Essentials Plus and ISO 27001 where required
• Relevant, quantified past performance on comparable defence or regulated work
• A compliant response to the published evaluation scheme, question by question
• A pricing schedule aligned to the DEFCON commercial terms
• Assurance, security and configuration management evidenced, not asserted

6. Where defence bids go wrong

• No JOSCAR, so a prime cannot place the work regardless of bid quality
• Missing or mismatched security certifications at submission
• Generic corporate answers that ignore the defence-specific scoring
• Underestimating DEFCON and data rights implications on price
• Leaving mobilisation and clearance timelines vague