arckit-mod-secure

Secure by Design replaces legacy accreditation with continuous risk management mandated by JSP 440 Leaflet 5C since August 2023. It requires assessing new Defence capabilities against the 7 MOD SbD Principles and NIST Cybersecurity Framework throughout the capability lifecycle, rather than relying on point-in-time accreditation.

Continuous risk management under JSP 440 Leaflet 5C replaces legacy accreditation with ongoing security assessment throughout the capability lifecycle. It enforces adherence to the 7 MOD SbD Principles and NIST Cybersecurity Framework for all new Defence capabilities, ensuring persistent cyber security posture evaluation.

Use this assessment for any new MOD Defence capability, technology project, or program requiring JSP 440 Leaflet 5C compliance. It evaluates capabilities against the 7 MOD SbD Principles and NIST Cybersecurity Framework, making it suitable for diverse applications like naval communication systems throughout their lifecycle.

To conduct a Secure by Design assessment, you need the details of your MOD technology project, program, or capability. The assessment enforces JSP 440 Leaflet 5C compliance, evaluating your project against the 7 MOD SbD Principles and NIST Cybersecurity Framework to generate actionable remediation steps.

You need a Secure by Design assessment for all new MOD Defence capabilities to comply with the continuous risk management mandate effective August 2023. This replaces legacy accreditation by enforcing JSP 440 Leaflet 5C and assessing against the 7 MOD SbD Principles throughout the capability lifecycle.

The MOD Secure by Design assessment identifies critical security gaps and provides actionable remediation steps aligned with MOD policy. It enforces JSP 440 Leaflet 5C compliance by evaluating projects against the 7 MOD SbD Principles and NIST Cybersecurity Framework to improve overall cyber security posture.