Adaptive Security Service

A DWP-wide decision has been taken to adopt the NIST Cybersecurity Framework as a benchmark for security controls, covering digital services as well as the wider department. An initial assessment has been made across digital to establish the current levels of compliance against the Tier-4 "Adaptive" level to create a gap-analysis, and roadmap and a formal programme is to be established to deliver the implementation of appropriate security controls. The department is looking for a service to assist the engineering transformation mapped to the NIST Cybersecurity Framework Adaptive Security tier of capability.