Whitehall departments will be required to go through an external audit of their cyber resilience to help ministers “understand cyber risk across government”.
Called “Gov Assure”, the regime will ask all government entities to undergo independent assessment of their cyber set-up and risk profile. This process will be based on the guidelines set out in the Cyber Assessment Framework of the National Cyber Security Centre .
The measures were first unveiled as part of the Government Cyber Security Strategy, published earlier this year.
Cabinet Office minister and paymaster general Michael Ellis said: “This will create a single lens through which we can understand cyber risk across government and enable government departments to accurately assess their level of cyber assurance and highlight priority areas for improvement. Gov Assure will also help us to take a strategic view of government vulnerability – to help inform a strategic roadmap to truly defend as one.”
Ellis’s comments were made during CSW sister title PublicTechnology’s annual Cyber Security Summit event, held in London last week. Delivering the opening keynote presentation, the…

























