Secure by Design Summary

As part of our commitment to improving the cyber resilience of our digital services and technical infrastructure, all digital delivery teams and programmes/projects delivering digital services or technical infrastructure are required to adhere to the Secure by Design principles as set out in the government Secure by Design policy.

This policy requires that cyber security considerations are incorporated at every stage of the project lifecycle. From the development of business cases through to service design, development, deployment, and ongoing maintenance, security must be embedded as a core element. This ensures that potential vulnerabilities are proactively addressed, aligning with best practices to protect data, systems and services from evolving threats throughout their entire lifecycle.

This proactive approach not only aligns with broader government cyber security mandates but also enhances trust and safety for users interacting with digital services.

Contact and Feedback

For any further questions or advice relating to security, or for any feedback or suggestions for improvement, contact: security@justice.gov.uk.