CLAS Consultancy
Typical Work
Due to the nature of CLAS work, Sapphire cannot usually disclose details of the work performed, however, we have specific experience in the following areas:-
- Implementing the standard Government approach to information assurance by applying the Cabinet Office’s Security Policy Framework.
- Performing risk assessments using HMG IS 1 version 2 and HMG IA Standard 1 version 3 and upgrading between the two.
- Development of Risk Management and Accreditation Documentation Sets.
- Agreeing and implementing suitable countermeasures to mitigate risk in accordance with HMG IA Standard 1 Part 2.
- Development of Security Operating Procedures (SyOPs) including:-
- Incident management
- Forensics readiness
- Asset classification and handling - Secure network design using assured barriers. This can include:-
- Remote access
- Authentication
- Mobile e-mail - Benchmarking against best practice to verify the suitability of information governance or to check the minimum assumptions for HMG IA Standard 1 Part 1.
- Interpretation of Codes of Connection for organisations linking to the “Government Ring” and other trusted connections including:
- CJX
- xGSI
- GSI
- GSX
- GCSX - Accreditation function and services.
- Corporate management of risk and the evaluation of an appropriate level of risk appetite.
- Safeguarding the Critical National Infrastructure of the UK.
- Complying and certifying with ISO/IEC 27001.
- The IA Maturity Model.
- Handling Government Protective Marking Scheme (GPMS) information.
- Background and identity checks and the detection of fraudulent documentation.
For further information about the type of work that Sapphire can provide please download the Sunderland Council case study or read the press release about the work we carried out with the DfT.
