i3Secure were approached by a trusted partner to provide a Security Assurance Consultant (SAC) as part of the design and build team for an experimental data platform for the Ministry of Defence (MOD).
The team comprised personnel from a range of commercial companies, government laboratories and His Majesty’s Armed Forces. Having such a diverse team required the understanding of MOD policies and directives as well as national and international cyber security standards and methodology.
The Security Assurance Consultant (SAC) role required the formulation of all papers and plans to support the cyber security elements of the project throughout the Concept, Assessment, Demonstration, Manufacture, In-Service and Disposal (CADMID) lifecycle.
Appointed during the CONCEPT phase, the SAC was fully immersed in the project from the early design stages. They advised and directed on the relevant MOD policies, how to apply them in conjunction with the National Institute of Science and Technology (NIST) Risk Management Framework process, and selection of appropriate controls.
The MOD accreditation process is complicated and lengthy. The SAC was responsible for undertaking and directing all security work strands as well as completing all accreditation support documentation. They acted as a conduit between MOD agencies and the commercial sector: a key element for successful delivery.
Our SAC quickly gained the confidence of all collaborative partners and built effective professional relationships with all elements of the project. In order to ensure timely progress, the SAC produced a document set fulfilling the requirements defined in JSP 440 and JSP 604, consisting of:
They also produced Security Working Group (SWG) documents and presentations and chaired the bi-weekly SWG.
The professional ability of the Security Assurance Consultant coupled with the nature of interactions with all elements of the project resulted in them being requested to join the team again during the next evolution of the system. Our SAC had full understanding of the processes involved which consequently allowed the project to deliver within tight timelines and changing requirements. Collaborative working, striving for excellence, and high professional competence produced an outstanding product.
Get in touch with our specialists to learn how we can enhance your cyber security posture.
Contact Us 
Contact