REF: 2019-487
Subject: Cyber security
Request:
I am writing with a request about cyber security under the Freedom of Information Act 2000.
CHECK is the umbrella term for the National Cyber Security Centre approved penetration test companies and the method in which they conduct a penetration test.
Could you please tell me whether you have had a CHECK test in i) 2016/17, ii) 2017/18 and iii) 2018/19?
Could you also tell me what cyber security do you have aside from CHECK work including the following i) user education ii) other penetration tests iii) internal security team iv) other.
Response:
| CHECK is the umbrella term for the National Cyber Security Centre approved penetration test companies and the method in which they conduct a penetration test. | |
| Could you please tell me whether you have had a CHECK test in i) 2016/17, ii) 2017/18 and iii) 2018/19? | Our 2018/2019 Pen test was check accredited.
Previous Testers were Crest or equivalent qualified. |
| Could you also tell me what cyber security do you have aside from CHECK work including the following | |
| i) user education | Yes |
| ii) other penetration tests | Yes see above |
| iii) internal security team | Not a specific security team |
| iv) other. | Yes |