Security Accreditation

Sharing information is core to improving service delivery. However, it also exposes organisations to more risk in terms of cyber security threats and data loss. The growing need for legislative or regulatory compliance means that security accreditation is now a key part of any security architecture project or programme.

VEGA’s approach to information accreditation

Whether needing to adhere to formal security standards, or to informal requirements to prove security and resilience, VEGA’s security accreditation service provides clients with confidence that they are conducting business in accordance with requirements.

VEGA has many years’ experience in the UK and European military, civil, and commercial sectors, including delivering accreditation up to the most stringent UK military standards. This experience enables us to advise clients on the most appropriate security approach to help define and achieve their security needs, according to the relevant accreditation scheme.

Providing a security accreditation scheme

While system security is important (particularly for integrity, availability, and for access control), often there is not the appropriate accreditation scheme in place to provide the assurance required, especially in emerging nations and commercial spheres. VEGA recognises, however, that alongside security, clarity of process is essential to keep on-board the potential mix of stakeholders who may be involved. As a result, our clear and logical approach to security accreditation is well documented, enabling confidence of a clear conclusion.

VEGA can provide a full accreditation scheme, proving that security threats are met in accordance to the analysed risk. The accreditation support services include:

• Analysis of relevant security risks
• Definition of accreditation strategy – defining the relevant approach to meet the customer specific security needs
• Definition of accreditation policy – enabling a mature scientific approach to clearly defining the requirements on the system developer to provide the client with the confidence of achieving successful accreditation
• Training and advice to accreditor(s), evaluators, and system designers, to enable understanding and compliance with the accreditation process.
• Analysis and review support, against the accreditation policy
• Project management of accreditation processes, to enable timely, predictable, and successful completion
• Change management and re-accreditation service through operational life, enabling confidence that new threats are addressed, and system security is maintained through system evolutions

Contact VEGA for more information about security accreditation