MoJ adopts new framework to manage cyber security risk

The Ministry of Justice has agreed a radical two-year contract for security services provided through a managed service arrangement.

The contract will cover a full spectrum of information assurance and cyber security services.

BAE Systems Detica will focus initially on support and advice around the ministry’s IT architecture, its security policy, governance and risk management and compliance with regulatory requirements. It will also advise on cyber security and protective measures.

Optional components include security testing, protective monitoring of both internal and external activity, and forensics.

The MoJ says the engagement offers a significant benefit from traditional security engagements in that it provides a very efficient way for the it to secure a wide range of information assurance and cyber security services through one supplier, thus enabling a substantial cost saving.

Traditionally, departments have

augmented their security teams through the use of contractors, often in response to temporary requirements. These arrangements have led to an ad hoc mix of suppliers and teams which doesn’t always deliver the desired result within budget.

The new contract will provide an on-going service to the MoJ, which should enable it to make substantial cost-savings around its security requirements.

Bob Nicholls, head of the information assurance (IA) information communications technology (ICT) team at the MoJ, explained: “This contract introduces a new way of working for my ICT IA team and we anticipate it will deliver real benefits to the MoJ, both in terms of security and cost efficiency.

“Protecting the ministry’s data and systems is vital to the smooth running of the justice system.”

Vicki Saward, head of Detica’s government practice, said the new approach to security provision could effectively save the MoJ as much as 30 per cent in yearly IA costs.