The Provision of IT Security Testing

Security testing that provides the level of assurance required by HSE and our stakeholders must be performed to the CHECK standard overseen by the National Cyber Security Centre. This requires testers to maintain certification that guarantees a level of expertise and experience that is not available to HSE. HSE have a need for frequent security testing of services we have developed, have been developed on our behalf or have a legal obligation to provide. HSE do not have the requisite skills or tools to meet the various criteria of assurance bodies. HSE must provide assurances to our parent body, the Department for Work and Pensions (DWP), Cabinet Office (CO), and the HSE board that we are safe to do work with. This includes our obligations to be GDPR and DPA 2018 compliant.