Criminal Records Bureau

Vega provided specialist information accreditation to protect the data held by one of the Government’s most sensitive agencies.

The Challenge

The Criminal Records Bureau (CRB) wished to increase the fidelity and quality of their risk management decisions. They wanted to address the issues with organisational change in mind, as well as the movement of staff and how this was rapidly changing.

How Vega helped

Vega provided the CRB with accreditor support, CHECK IT Penetration Testing and CLAS services to support the CRB’s ongoing operation and service enhancements. This included CLAS support to specific projects, review of designs and architectures, review of security policies, advice on specific security barriers, support to CRB in light of changing INFOSEC policy, identifying potential vulnerabilities, and penetration testing (including recommending treatment plans) specific areas of the CRB network.

Base line standards used in this work included Manual of Protective Security (MOPS), HMG INFOSEC Policy (CESG Bookstore), ISO/IEC27001, The Data Handling Review (Hannigan Report), and industry standard guidance from established agencies.

Value being delivered

As a result of work undertaken by Vega’s information assurance experts, the CRB is able to pass a ministerial security check, matching the demanding requirements of the 2008 Hannigan report on Data Handling procedures across Government. In addition, Vega provided the client with the ability to work remotely and in doing this reduce travel costs for the client. Vega continues to provide specialist security support in a flexible manner which significantly de-risks accreditation decisions, providing excellent value-for-money in a trustworthy and reliable manner.

Testimonial

Senior Accreditor, Elaine Carlyle, said of Vega: “Prior to my appointment as security accreditor for CRB, I had no experience of Vega. I am entirely content with the service and benefits that Vega brings to bear. I have been able to rely completely on Vega working for CRB as they have always delivered a reliable service on time, within budget, to specification and therefore to my satisfaction.

“I would recommend Vega to others; Vega services have exceeded expectation and have contributed to the security and assurance of the CRB service.”

Contact Vega for further information about our work in Government