Industries ยท United Kingdom
Defence
Secure, accredited environments for the defence supply chain. ORCA Opti brings your risks, controls and AI governance into one living system of record, inside your Safe Zone.
Regulation
Frameworks built in
ORCA Opti ships with the frameworks UK organisations are measured against, and keeps your evidence current.
Privacy (ISO/IEC 27701)
Privacy (ISO/IEC 27701)
Privacy impact assessments over your data processing, with privacy controls managed against ISO/IEC 27701.
CIS Controls & NIST CSF
CIS Controls & NIST CSF
Recognised baseline security controls, each one owned, tested and evidenced.
Incident management
Incident management
Incidents recorded with an owner, priority, and regulatory and contractual impact, so the record is ready when someone asks for it.
ISO 27001
ISO 27001
Information security management, pre-mapped to your controls.
AI governance (ISO/IEC 42001)
AI governance (ISO/IEC 42001)
Responsible, accountable AI, with an AI system inventory and impact assessments managed against ISO/IEC 42001.
Your data stays in your Safe Zone
Your data stays in your Safe Zone
Your documents and data are not copied to an outside system, and nothing is used to train external AI models.
For Defence across the UK and Europe
See ORCA Opti for UK & European Defence
From MOD primes and Tier-1 suppliers to MSME innovators and European Defence Fund participants, defence supply chains across the UK and EU now face MOD DCPP, NATO STANAG, NCSC guidance, EU EDF and EDA rules, plus rising cyber threat from state-aligned actors. ORCA Opti gives the Pan-European defence supply chain one platform.
MOD DCPP and supplier-ready
MOD DCPP and supplier-ready
Ministry of Defence Defence Cyber Protection Partnership cyber risk profile mapped to controls, ready for primes and DE&S supplier assessment.
Classified-tier data in the Safe Zone
Classified-tier data in the Safe Zone
Engineering, design and operational data inside the Safe Zone with UK and EEA residency, plus AI Guardian blocking leakage to external AI.
NATO STANAG and EDF ready
NATO STANAG and EDF ready
NATO standardisation agreement evidence, European Defence Fund and EDA cooperative project records assembled in a living programme.
Defence export readiness
Defence export readiness
UK ECJU export licence, EU dual-use regulation and end-use evidence assembled, ready for the rapidly growing Pan-European defence export market.
The pressure
What defence supply-chain leaders face
State-aligned threat, export-control scrutiny across the UK and EU, and supply chain accountability cascading down to every tier.
State-sponsored cyber threat
State-sponsored cyber threat
Defence and dual-use suppliers face advanced persistent threat activity from state-aligned actors. Controls and detection must match the adversary.
MOD and EU prime flow-down
MOD and EU prime flow-down
BAE, Airbus, Leonardo, Thales and other primes flow Cyber Essentials Plus and DCPP expectations down every tier. One weak link is everyone's problem.
IP and design data exfiltration
IP and design data exfiltration
Defence IP and design data leaving via external AI tools, misconfigured SaaS or removable media is the most reported exfiltration path.
Indigenous supply chain integrity
Indigenous supply chain integrity
MOD and EU EDF participants increasingly assess the cyber posture of every supplier tier. Supply-chain risk is now a contractual obligation.
Frameworks built in
MOD, EDF and Pan-European standards
ORCA Opti ships with the obligations UK and European defence run on, from DCPP and DE&S to AS 9100D. Controls pre-mapped, evidence structured and reporting current.
MOD DCPP & cyber risk profile
Defence Cyber Protection Partnership cyber risk profile and DEFSTAN 05-138 controls mapped to evidence.
AS 9100D & ISO 9001
Aerospace and defence quality management requirements mapped to controls, evidence and management review.
Cyber Essentials Plus & ISO 27001
UK Cyber Essentials Plus baseline plus ISO 27001 information security, the Pan-European procurement passport for defence.
Export Control Joint Unit & EU dual-use
UK ECJU OGEL/SIEL licensing and EU dual-use regulation exposure tracked alongside operational evidence.
UK GDPR & EU GDPR
Employee, supplier and citizen data handling integrated with defence-specific evidence workflows.
NATO STANAG & EU EDF
NATO standardisation agreement, European Defence Fund and EDA cooperative-project records held in one programme.
See ORCA Opti for Defence in United Kingdom.
Work through a guided check with Opti Assist and get an immediate view of where you stand.
Join our mailing list
News and updates from ORCA Opti.