Code of Connection (CoCo) Compliance

What is CoCo Compliance?

A Code of Connection (CoCo) is a mechanism often used where organisations have a requirement to connect their information systems together, usually to share data or services. These networks frequently have rigorous governance processes and standards to give assurance of information security. In order to connect to many secure networks and systems, organisations must comply with a Code of Connection.

 

Connecting to Government Connect Secure Extranet (GCSX)

The GCSX is part of the Government Secure Intranet (GSi) community of networks. The GCSX allows Local Authorities in England and Wales to share data securely with other local and central government departments. VEGA successfully supported the Government Connect Programme by assisting to ensure that all 375 Local Authorities in England and Wales gained CoCo compliance.

 

VEGA's Code of Connection (CoCo) Advice Service

VEGA provides specialist expert CoCo compliance advice to any organisation in gaining and maintaining compliance and connectivity to secure Government networks such as GCSX (for local authorities), GSI and GSX (for government departments), and CJX (for police). VEGA has a proven track record assisting organisations in completing their CoCos, measuring compliance against the CoCo and implementing action plans to gain compliance.

 

VEGA offers a range of services in the form of service modules, from which organisations can select the most appropriate and cost-effective way to gain CoCo compliance depending on the size and complexity of the organisation. These services may be commissioned individually, as a combination, or as a complete end-to-end service package:

 

  1. Express CoCo Compliance Review – a high-level review of current ICT infrastructure against CoCo requirements, identifying compliancy gaps and areas of concern
  2. Full CoCo Compliance Review – a full review of current ICT infrastructure, provision of a gap analysis of current vs. future compliancy state, identification of non-compliant areas, and formulation of an action plan to address these areas
  3. CoCo Compliance Delivery – following on from the second module, start-up and management of a project to deliver the required CoCo compliance, including additional support such as technical architecture reviews and CHECK IT Health Checks
  4. CoCo Compliance Maintenance – for those clients who are CoCo compliant, our team will evaluate, assist and ensure CoCo compliance is maintained, via a simple subscription agreement with VEGA

 

As an independent consultancy, VEGA is not tied to any vendor and will recommend solutions which best meet customer requirements. VEGA consultants have extensive CoCo knowledge and are experienced in reviewing and advising on CoCo requirements. Our consultants are also experienced in transferring their skills and knowledge to ensure that organisations develop their own understanding of what is required to achieve CoCo compliance.

 

Case study: VEGA supports Government Connect programme

Case study: Surrey County Council – CoCo compliance

 

Contact VEGA for more information about ICT Code of Connection Compliance

Secure Government Networks

CoCo compliance to GCSX, GSI and GSX

Discover how VEGA can help government organisations comply with access requirements to GSI, GCSx and other secure government networks.

Learn more about VEGA's CLAS services

CESG CLAS

VEGA has a substantial amount of CESG listed advisors (CLAS Consultants).

Penetration Testing

Learn more about VEGA's comprehensive and independent penetration testing services, which uses a team of experienced and UK Government-accredited penetration testers.