Common use of INFORMATION ASSURANCE Clause in Contracts

INFORMATION ASSURANCE. 42.1. In April 2014 the UK Government Cabinet Office introduced the Government Security Classifications - xxxxx://xxx.xxx.xx/government/publications/government-security- classifications – which allows information assets to be classified into three types: Official, Secret and Top Secret. Additionally, in cases where there is a clear and justifiable requirement to reinforce the “need to know‟, assets should be conspicuously marked as Official-Sensitive. 42.2. This replaced the previous Government Protective Marking Scheme and removed links to the Communications-Electronics Security Group Business Impact Level scale which had been widely used to differentiate security requirements across IT systems and services. 42.3. The Contractor must be able to provide all core requirements at the Official classification and should be capable of providing some of the requirements at a higher classification.

INFORMATION ASSURANCE. 42.1. In April 2014 the UK Government Cabinet Office introduced the Government Security Classifications - xxxxx://xxx.xxx.xx/government/publications/government-security- classifications xxxxx://xxx.xxx.xx/government/publications/government-security-classifications – which allows information assets to be classified into three types: Official, Secret and Top Secret. Additionally, in cases where there is a clear and justifiable requirement to reinforce the “need to know‟, assets should be conspicuously marked as Official-Sensitive. 42.2. This replaced the previous Government Protective Marking Scheme and removed links to the Communications-Electronics Security Group Business Impact Level scale which had been widely used to differentiate security requirements across IT systems and services. 42.3. The Contractor must be able to provide all core requirements at the Official classification and should be capable of providing some of the requirements at a higher classification.