Successful adoption of GovAssure for Ministry of… | UBDS Digital
Computer operator using laptop maintenance artificial intelligence neural networks simulating human thought processes computerized model tech support doing checkup ai systems close up
Cyber Security
Digital Consulting

Successful adoption of GovAssure for Ministry of Housing, Communities & Local Government (formerly DLUHC).

Overview
The Ministry of Housing, Communities & Local Government (formerly DLUHC), was one of the first government departments to implement the new GovAssure cyber security assurance approach, replacing the previous Departmental Security Health Check (DSHC). Faced with the challenges of complexity, capacity, and the need for objectivity, DLUHC enlisted UBDS Digital to ensure the successful adoption of GovAssure across the department and its arm’s length bodies (ALBs).
Key Services
Digital Consulting
Cybersecurity
Technologies
Cybersecurity
The Challenge

All government organisations to adopt NCSC's Cyber Assessment Framework.

Government agencies and public sector bodies are frequent targets for cyber attacks due to the sensitive nature of the data they hold, ranging from personal citizen information to classified national security details. Between September 2020 and August 2021, 40% of the incidents managed by the National Cyber Security Centre (NCSC) were aimed at the public sector. In response, the UK Government launched the Government Cyber Security Strategy: 2022 to 2030, mandating all governmental organisations to adopt NCSC’s Cyber Assessment Framework (CAF) through the new GovAssure programme.

Ministry of Housing, Communities & Local Government (formerly Department for Levelling Up, Housing and Communities - DLUHC) faced a number of specific challenges, relating to the complexity of their environment and the span of the GovAssure assurance approach, and to the ways in which their teams would be working with internal and external stakeholders.

Secured access govassure
The Solution

Structured, outcome based delivery, aligned with GovAssures key stages.

To address these challenges, UBDS Digital provided a structured, outcome-based delivery aligned with GovAssure’s key stages. The solution included the following key activities:

  • Programme Launch: Establishing roles, responsibilities, and key objectives, and mapping internal and external stakeholders.
  • Stakeholder Engagement: Developing a detailed engagement plan to drive awareness and understanding of GovAssure requirements among stakeholders, utilising existing communication channels and creating new ones where appropriate.
  • GovAssure Stage 1 - Capturing Organisational Context: Reviewing existing documentation to understand the Ministry of Housing, Communities & Local Government (formerly DLUHC)’s organisational context, essential services, and critical systems.
  • GovAssure Stage 2 - In Scope Systems: Identifying and prioritising critical systems for GovAssure, determining the appropriate CAF Profile based on specific threats.
  • GovAssure Stage 3 - CAF Self-Assessment: Facilitating self-assessment activities, including workshops and evidence reviews, against CAF guidance and objectives. Ensuring thorough documentation and verification of evidence through the project platform.
  • GovAssure Stage 4 - Independent Assurance Review: Supporting an external service provider to carry out the independent review, providing clarifications and additional evidence as needed.
  • GovAssure Stage 5 - Final Assessment and Targeted Improvement Plans: Facilitating acceptance of the Independent Assurance Review Report and collaborating on Targeted Improvement Plans for systems flagged in the report. Additionally, creating a GovAssure Knowledge Centre to outline processes and best practices.
cyber assessment framework govassure
The Outcome

Improved cyber-resilience and more efficient GovAssure adoption process.

The comprehensive support provided by UBDS Digital led to significant outcomes for MHCLG:

  • Successful GovAssure Process: Ensuring critical systems successful passed through the GovAssure process in a staged and timely fashion.
  • Comprehensive Artefacts: Comprehensive and objective artefacts were collated as evidence against a broad range of Good Practice (IGPs), with UBDS Digital interpreting the CAF in accessible terms and facilitating a better understanding among stakeholders.
  • Repeatable Methodology: A process flow and blueprint were created, detailing key actions, outcomes, and useful templates for each phase. This was developed into an interactive knowledge centre, providing a lasting resource for MHCLG.
  • Enhanced Cyber Compliance: The GovAssure Knowledge Centre enables MHCLG to efficiently self-serve and adopt GovAssure at scale, ensuring more systems achieve cyber compliance in the future.

Overall, the UBDS Digital engagement positioned MHCLG for improved cyber resilience, facilitating a smoother and more efficient GovAssure adoption process, ultimately contributing to the broader Government Cyber Security Strategy.

Analyst GovAssure

You might also like these

Explore our successstories and see how UBDS has transformed Cloud Platform challenges intoopportunities for organisations like yours.

View all case studies
Houses
Digital Consulting
Design Thinking Methodology for ERP Transformation at Leading UK University
A renowned UK university, acclaimed for its focus on science, engineering, medicine, and business, embarked on a strategic initiative to revamp its Enterprise Resource Planning (ERP) system. This initiative was a key part of its wider digital transformation agenda, aimed at enhancing operational efficiency, embracing modern technology solutions whilst staying ahead of the new trends.
Image 3 2x 14 57 13
Cloud
Cyber Security
Migrating Applications to the Cloud at Scale
We partnered with a major Government organisation, in migrating their applications to the cloud, proudly saving them £30 million per year.
DWP Shadow IT Blog
App
The Department for Work and Pensions Tackles Shadow IT for More Secure and Efficient Operations.
Until 2015, DWP outsourced most of its IT. This proved difficult as implementation of a new digital service often took 18 – 24 months and many requests were declined due to the cost. The DWP had to evolve its operation to deliver the very best service possible. One way this was possible was through the creation of unique applications, each designed to fulfill a specific but critical role.
Case study2
Cloud
Migrating File Storage to Cloud
UBDS supported a large Central Government organisation in its migration to O365 by moving all documentation and file storage from an outsourced IT provider to Microsoft Azure.
Case study3
Cloud
Moving to Agile Cloud-Native Delivery
Supporting an organisation to transform for cloud
DWP Case Study
Networks
Network Transformation at the Department for Work and Pensions
The DWP has and continues to actively pursue a ‘cloud-first’ strategy, transforming and migrating its applications to Public Cloud platforms.

Looking for
exceptional outcomes?

Get in touch
UBDS MANCHESTER MEETINGS 0591920