The NCSC will lead in creating, chairing and implementing a new Public Sector IT
Security forum, with Heads of IT security from across Government Departments and
Agencies. The forum will meet quarterly to exchange and share information around best
practice, inter organisational processes, cyber security threats and measures to comply
with the new public sector cyber security baseline standard.
11. The NCSC will be tasked by Government to issue recommendations with regard
to the use of specific software and hardware on Government IT and
telecommunications infrastructure.
The NCSC will be tasked to issue recommendations with regard to the procurement and
use of certain types of IT infrastructure and software in securing Government data and
services, and to recommend the prohibition or removal of certain infrastructure from
Government IT networks and communications if the NCSC determines that its presence
poses an unacceptable risk to the security of Government data.
Measure 8: The NCSC will develop a baseline security standard to be applied by all
Government Departments and key agencies.
Actions for Delivery
Timeline by
Lead
Quarter
1
Design suitable minimum standard
Q4 2021
for Government IT, in conjunction
2
Key
Stakeholders
NCSC/OGCIO/Govt Government
IT Forum
Departments
with Government IT Security
and key
Forum.
agencies
Develop detailed measures,
Q1 2022
controls and implementation
NCSC/OGCIO/Govt Government
IT Forum
procedures.
Departments
and key
agencies
3
Draft guidance and support
Q2 2022
materials for IT teams and Internal
4
NCSC/OGCIO/Govt Government
IT Forum
Departments
Audit Units on compliance
and key
assessment.
agencies
Support Government Departments
and Key Agencies in
implementation of the baseline
Ongoing
NCSC/OGCIO/Govt Government
IT Forum
Departments
and key
33
Select target paragraph3
Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents