The Central Sponsor for Information Assurance (CSIA) is a unit within the UK Government's Cabinet Office providing a central focus for Information Assurance (IA) activity across the UK.
Cyber Security Strategy
The new Cyber Security Strategy builds on this work of the National Information Assurance Strategy, first produced in 2003 (and was refreshed in 2007). The NIAS addressed the first steps for the UK in assuring the integrity, availability and confidentiality of Information & Communications Technology systems and the information they handle. The Cyber Security Strategy will continue the work already being done to protect the UK from threats to information security in Government and in conjunction with industry and other sectors.
Use it - Don’t Lose it
An e-learning package has been produced by the CSIA in the Cabinet Office in conjunction with the National School of Government. It is designed to be used as part of an overarching training programme for all those who handle data on behalf of government. ‘Protecting Information’ Level 1 provides basic training for all staff on data security. Using the package avoids duplication of effort and resources across government and ensures that departments are meeting the basic level of requirement on training for staff that handle personal data as required by the Data Handling Report.
Data handling procedures across government
The final report on data handling procedures across government published [PDF, 218KB] on 25th June 2008 sets out how Government is improving its arrangements around information and data security, by putting in place core protective measures, getting the working culture right, improving accountability and scrutiny of performance.
As part of this, Government has published more detail on new arrangements for data handling procedures [PDF, 342KB] including technical details and further information on cross government actions and mandatory minimum measures.
A final report on government information assurance activities [PDF, 167KB] by Nick Coleman, former Head of Security Services at IBM, is published alongside the data handling procedures report and is helping to inform the direction of information assurance work across government.
Information Assurance (IA) is the confidence that information systems will protect the information they carry and will function as they need to, when they need to, under the control of legitimate users.
Information is a critical asset to any organisation or individual, as such it should be safeguarded. The CSIA is responsibility for providing a strategic direction for the UK in managing risks to information. Our vision is to enable ‘a UK environment where citizens, businesses and government use and enjoy the full benefits of ICT with confidence’.
The CSIA works in partnership with the wider IA centre comprising the Cabinet Office, National Technical Authority for Information Assurance (CESG) and the Centre for Protection of the National Infrastructure (CPNI).
The CSIA produces and maintains the National Information Assurance Strategy and, along with partner organisations, coordinates and sponsors work programmes to deliver on the strategy's recommendations.
The CSIA has a lead role in helping government to ensure the following strategic outcomes:
There are a number of government departments and organisations involved in the field of information assurance with which we work including: