Google aims for higher government security accreditation for Apps

Google aims for higher government security accreditation for Apps

Cloud giant explores possibility of getting IL2 accreditation

Article comments

Google is looking to gain higher security accreditations that would enable wider use of Google Apps by the UK government.

It was recently revealed that Google Apps is currently being used by the Cabinet Office's Government Digital Services (GDS).

The government applies a Business Impact Level (IL) classification to ICT suppliers to indicate the security level of their services. IL0 (protected) is the lowest level of security, while IL6 (top secret) is the highest. IL2 is often the minimum requirement for government services, for example, it is the minimum requirement for providers biddings for network contracts.

However, the Cabinet Office has confirmed that GDS only uses Google Apps and Google Docs at IL0, which it said is relevant to the majority of its work.

"If a higher security level is required, the staff can access products that have been given a relevant higher security level," a spokesperson for the Cabinet Office said.

Google has a number of security certifications for its Google Apps, including SSAE 16 Type II and its international counterpart ISAE 3402 Type II. The apps are also certified by the US government's Federal Information Security Management Act (FISMA).

The company said that it is exploring a number of possible, additional, security certifications, including IL2 accreditation.

"Certifications help communicate certain assurances to customers, but they only tell part of the story. Most were not developed with the cloud infrastructure in mind.

"Google Apps has secured several important certifications while developing our own security technology specific to cloud computing," a Google spokesperson said.

As part of the government's G-Cloud programme, its information assurance body, CESG, said it is also working on creating information assurance guidance for the overall assurance and accreditation process for G-Cloud suppliers.

The government expects assurance for the G-Cloud programme to be completed by next Friday, 10 February.


Send to a friend

Email this article to a friend or colleague:

PLEASE NOTE: Your name is used only to let the recipient know who sent the story, and in case of transmission error. Both your name and the recipient's name and address will not be used for any other purpose.

We use cookies to provide you with a better experience. If you continue to use this site, we'll assume you're happy with this. Alternatively, click here to find out how to manage these cookies

hide cookie message
* *