Skip to main content

UK Cyber Schemes

Cyber Improvement Plan

The dated plan a supplier submits where it cannot yet meet the DEFSTAN 05-138 controls required by a contract. It can become part of the contract.

Why it matters: it lets a supplier bid before it is compliant, but it creates a contractual commitment.

Related terms

Questions about how this applies to you? Book a free 45 minute diagnostic.

Back to the glossary

We use cookies and similar technologies to measure how this site is used, to see which organisations visit, and to measure our advertising. If you accept, we load Plausible, Google Analytics and Google Ads, Microsoft Clarity, which records session replays, and Apollo. Nothing loads until you accept. Read our Cookies policy.