ccs-digitalmarketplace-frameworks 4.10.2 → 4.10.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -3,11 +3,11 @@ question: Confirm you can provide all types of information and cyber security ca
|
|
|
3
3
|
hint: >
|
|
4
4
|
<p class="govuk-body">Information and cyber security capabilities:</p>
|
|
5
5
|
<ul class="govuk-list govuk-list--bullet">
|
|
6
|
-
<li>
|
|
6
|
+
<li>Information assurance certification - Offer services as a NCSC Certified Cyber Professional (expiring 31 December 2026) or UKCSC Chartered Cyber Security Professional (ChCSP) in an appropriate specialism - the government’s approved standard for cyber security professionals</li>
|
|
7
7
|
<li>Firewall audit - Ensure deployed firewall rules match security policies, and identify where the rules should be changed</li>
|
|
8
8
|
<li>Incident response and forensics - Prepare for, and respond to a security incident. Determine what has gone wrong and how to resolve the incident. Understand and comply with forensic requirements</li>
|
|
9
9
|
<li>Infrastructure review - Review infrastructure to ensure the hardware and software meets security policies, and is appropriately configured and patched</li>
|
|
10
|
-
<li>IT health check - Conduct penetration testing using NCSC-
|
|
10
|
+
<li>IT health check - Conduct penetration testing using NCSC-assured firms</li>
|
|
11
11
|
<li>Risk management - Identify, analyse, document, mitigate and monitor the risks of a system</li>
|
|
12
12
|
<li>Security policy - Evaluate and develop security plans and policies to protect digital assets</li>
|
|
13
13
|
<li>Threat modelling - Take a structured approach to analysing the security needs of a system or service</li>
|