We use cookies to provide you with a better experience. If you continue to use this site, we'll assume you're happy with this. Alternatively, click here to find out how to manage these cookies

hide cookie message
80,259 News Articles

Google aims for higher government security accreditation for Apps

Cloud giant explores possibility of getting IL2 accreditation

Google is looking to gain higher security accreditations that would enable wider use of Google Apps by the UK government.

It was recently revealed that Google Apps is currently being used by the Cabinet Office's Government Digital Services (GDS).

The government applies a Business Impact Level (IL) classification to ICT suppliers to indicate the security level of their services. IL0 (protected) is the lowest level of security, while IL6 (top secret) is the highest. IL2 is often the minimum requirement for government services, for example, it is the minimum requirement for providers biddings for network contracts.

However, the Cabinet Office has confirmed that GDS only uses Google Apps and Google Docs at IL0, which it said is relevant to the majority of its work.

"If a higher security level is required, the staff can access products that have been given a relevant higher security level," a spokesperson for the Cabinet Office said.

Google has a number of security certifications for its Google Apps, including SSAE 16 Type II and its international counterpart ISAE 3402 Type II. The apps are also certified by the US government's Federal Information Security Management Act (FISMA).

The company said that it is exploring a number of possible, additional, security certifications, including IL2 accreditation.

"Certifications help communicate certain assurances to customers, but they only tell part of the story. Most were not developed with the cloud infrastructure in mind.

"Google Apps has secured several important certifications while developing our own security technology specific to cloud computing," a Google spokesperson said.

As part of the government's G-Cloud programme, its information assurance body, CESG, said it is also working on creating information assurance guidance for the overall assurance and accreditation process for G-Cloud suppliers.

The government expects assurance for the G-Cloud programme to be completed by next Friday, 10 February.


IDG UK Sites

Best Black Friday 2014 tech deals: Get bargains on smartphones, tablets, laptops and more

IDG UK Sites

What the Internet of Things will look like in 2015: homes will get smarter, people might get fitter

IDG UK Sites

See how Trunk's animated ad helped Ade Edmondson plug The Car Buying Service

IDG UK Sites

Yosemite tips: Complete Guide to OS X Yosemite