There are a number of key government organisations involved in all aspects of protecting the UK’s information systems, from combating hi-tech crime to promoting information security to business.
Central Sponsor for Information Assurance (CSIA) – Cabinet Office
Government has recognised that there is a need for a strategic and co-ordinated approach to protecting the nation's information systems. The CSIA in the Cabinet Office plays a role in pulling together all the various projects going on across government and looking at any gaps or overlaps that might need to be addressed. It works with partners across government and the private sector, as well as its international counterparts, to help maintain a reliable, secure and resilient national information infrastructure.
Home Office [External website]
The Home Office fulfils a number of functions in relation to information security. It is responsible for ensuring that the UK’s Critical National Infrastructure (CNI) is protected as well as policing for hi–tech crime (e.g. crimes that are committed either against computers or with the support of computers or computer networks). It also deals with a wide range of crime reduction, police and anti-social behaviour initiatives which have an information security impact.
Centre for the Protection of National Infrastructure (CPNI) [External website]
CPNI is an interdepartmental organisation set up by the Home Office in 1999 in order to minimise the risk of electronic attack against the UK’s CNI. It works in partnership with the owners of the systems that support critical services in both the public and private sectors and offers a wide range of information and advice on best practice in protecting organisations' information systems. CPNI advises on how best to protect information systems and, through investigation and work with UK and international partners, it assesses the threat of attack. It issues alerts and warnings, manages the responsible disclosure of new vulnerabilities, undertakes R&D work with partners, and promotes information sharing.
National Hi–Tech Crime Unit (NHTCU) [External website]
The NHTCU plays a key role in combating serious and organised hi–tech crime, both nationally and internationally. The team covers electronic crime (e-crime) prevention, reporting and investigation. Information assurance has a key role to play in ensuring that private and public organisations protect themselves from hi-tech crime and attempts to commit such crimes.
Department of Trade and Industry (DTI) [External website]
The DTI aims to increase the productivity of UK businesses and encourage confidence in the use of new information and communications technologies. It has responsibility for all businesses, including small-medium enterprises (SMEs), and includes customers in the CNI. The DTI works with business to raise awareness of the importance of effective information security management and to encourage the adoption of security standards such as ISO/IEC 17799 and BS 7799. ‘Foresight’ [External website] is a DTI initiative which leads a project looking at future developments in IT in relation to Cyber Trust and Crime Prevention.
CESG [External website]
CESG is the national technical authority for information assurance. It provides security guidance for government departments, agencies, local government and the wider public sector to help them achieve their business aims securely.