Policy paper

Security policy framework: protecting government assets

The standards, best practice guidelines and approaches that are required to protect UK government assets.

• From: Cabinet Office, Government Security Profession and National Security and Intelligence
• Published: 1 April 2013
• Last updated: 2 December 2022
  Show all updates

  1. 2 December 2022

     National Security Vetting levels updated to include Level 1B

  2. 8 February 2022

     National Security Vetting levels updated to include Accreditation Check (AC).

  3. 24 May 2018

     'HMG Security Policy Framework' document and HTML updated with new GDPR legislation

  4. 7 July 2014

     Contractual process document updated.

  5. 24 June 2014

     Added 'Contractual process - forms' document.

  6. 17 June 2014

     Added HTML version of the Security Policy Framework.

  7. 3 June 2014

     Updated (April 2014) Security Policy Framework published; 'Understanding the Security Policy Framework' removed as it related to the old version of the Framework.

  8. 2 April 2014

     The following documents have been updated with the latest (April 2014) versions: HMG Baseline Personnel Security Standard (previous update: Oct 2013) HMG Security Policy Framework (previous update: Oct 2013) Contractual process (previous update: April 2013) Industrial security: departmental responsibilities (previous update: April 2013) Security requirements for list x contractors (previous update: April 2013)

  9. 11 November 2013

     Updated HMG Security Policy Framework and associated documents with October versions

  10. 23 October 2013

      Added 'Supplier Assurance Framework' - a good practice guide for departments.

  11. 1 April 2013

      First published.

Documents

Security policy framework

HTML

Details

The security policy framework describes the standards, best-practice guidelines and approaches that are required to protect UK government assets (people, information and infrastructure). 

It focuses on the outcomes that are required to achieve a proportionate and risk-managed approach to security that enables government business to function effectively, safely and securely.