Implementation and delivery of IA: Making it happen

1
Her Majestys Government Chief Information
Officer
Implementation and delivery of IAMaking it
happen
John Suffolk Her Majestys Government Chief
Information Officer, Transformational Government,
Cabinet Office
2
Implementation Delivery of IAMaking it Happen

• John Suffolk
• Her Majestys Government Chief Information officer

2
November 09
3
The Agenda
The world is crazy about IT
1
The human challenge
2
A framework for Making it Happen
3
Summary remarks
4
3
November 09
4
The world is crazy about IT
4
November 09
5
The 15 (17) most populous nations
Doubling every 6 months
120 million
110 million
60 million
5
November 09
6
IT in the Public Sector
We operate in 144 countries at over 2,000 sites
serving over 315,000 users
DWP, HMRC, Health have some of the worlds
largest systems
The Home Office Group is a world leader in
biometric systems
GCHQ has the largest local area network in Europe
and has one of the largest wide area networks on
earth
The Automatic Number Plate Recognition is
Europes largest Oracle database
NHS N3 Network is the world's largest virtual
private network
6
November 09
7
IT in the Public Sector
There are over 800 services available online to
Citizens
7
November 09
8
The human challenge what do they have in common?
Mirror Signal Manoeuvre
A 1986 advert to stop Drink driving
The Green Cross Code
8
November 09
9
The human challenge what do they have in common?
9
November 09
10
The human challenge what do they have in common?
10
November 09
11
The human challenge what do they have in common?
11
November 09
12
The human challenge what do they have in common?
IA
We know it, but we dont always do it
12
November 09
13
Making It Happen
5 Strands of Focus
Awareness understanding education
Applying the standards and rules
Developing our IA Community
Monitoring, compliance and learning
Anticipating and adapting to the future threat
13
November 09
14
The Green Cross Code of IA
What is IA
Awareness understanding education
Why IA is important
Who is accountable for what
Developing our IA Community
What knowledge, skill and experience does each
role need
Sharing of knowledge and best/worst practice
14
November 09
15
The Drink Driving of IA
Ensuring the policies/rules balance security with
Citizen service
Applying the standards and rules
When we agree a policy/rule then we apply it it
isnt guidance
Whilst we trust people will comply we will
require independent assurance of compliance
Monitoring, compliance and learning
If an issue/event does occur, the centre must be
notified loop and learn
If you fail the IA Drink Drive tests you lose
your licence.
15
November 09
16
Anticipating and adapting to the threat
Taking the best from Industry, Academia, Public
Private Sector
Looking ahead for technology, people and process
change
Anticipating and adapting to the future threat
Optimising security with Citizen service
Deciding what product gaps we need to fill with
industry
Aligning hearts and minds with reality and
capability
16
November 09
17
And so to governance
Agrees strategy
Officials Senior Scrutiny
Ministerial Scrutiny
Takes input from
Reviews system compliance
Resolves Conflict/ Sets Balance
Citizens
Builds strategy/policy/guidance
Cabinet Office
Making IA Happen Group
Academia
Takes holistic input to IA matters
GCHQ/CESG
Industry
Executes strategy through depts.
Key SIROs
NAO/Audit
Assists bodies in implementation
CIO Council
ICO
Event - Learn - Policy - Loop
Compliance, monitoring, audit
Grow IA awareness knowledge
Public Sector Bodies Deliver IA
Execute IA policy/rules/guides
Feedback pain/gain/ blockers
17
November 09
18
Summary and conclusions
Government recognises the need for change and has
set the challenge of driving to the best IA
holistic capability
UK Public Sector can make a huge impact by its
actions and driving force behind IA
Our approach is to make progress by real clarity
of what is acceptable, simple governance, broad
involvement and action
Our emerging action plan, requirements and
governance repositions IA to be a top agenda item
for all public bodies
18
November 09