Security Policy and Design

QinetiQ's Security Policy, Strategy and Design Consultancy concentrates on getting information security to work in harmony with the day to day operations of business not against it.

We ensure that information security integrates seamlessly with our customers' business by helping them to plan, validate and design information assurance regimes to counter the many threats to business such as operational reliability, information integrity, business confidentiality and system availability.

The consultancy covers three key areas:

Policy and Strategy Development - We work with our customers to help them produce a focused security policy that supports the businesses objectives, we will also devise a strategy to implement the policy and an effective operational plan to process it.

Requirements Analysis - Customers gain a focussed understanding of their business, so that they can prioritise, agree and implement effective Information Assurance measures.

System Architecture - We design an architecture that incorporates appropriate processes, procedures and technologies to implement the desired strategy and policies. We use our own system architecture methodology, Domain Based Security (DBSy) to achieve this.

We will also address corporate governance issues, operational objectives and internal and external controls to ensure that our customers' Information Assurance policy and strategy are aligned effectively.