Cybersecurity specialist monitoring a digital network.
Case studyDefense (maritime security)

Securing Maritime Operations Through Security as a Service

Our customer keeps the UK’s seas safe and its trade moving. Protecting the digital systems behind that mission is non-negotiable. Vertage runs a central Security as a Service function that keeps the customer’s digital estate secure across every classification tier.

Before

The customer’s digital and information security work was siloed across many projects and teams, risking duplication, incoherence and gaps.

During

Vertage established a single Security as a Service function, with SQEPs delivering through-life information assurance across every classification tier.

After

A coherent, scalable security capability that has protected the customer’s digital estate for more than fifteen years.

Situation

The customer is central to the United Kingdom’s maritime security and economic prosperity, keeping seas safe and open across the globe. Behind that work sits a large, complex digital estate, and the security of that estate underpins everything the customer does.

Challenge

Historically, the customer’s digital and information security services were fragmented, spread across separate projects, programs and organizational structures. That fragmentation left room for incoherence, duplicated effort and inefficiency, the very weaknesses a determined adversary looks for.

What the customer needed was one coherent approach that followed a new accreditation model ‘Secure by Design’, which could ensure that the same standards are met consistently and securely and flex as threats and requirements changed.

Solution

Vertage helped establish, and continues to run, a central Security as a Service function that spans every capability area. This team enabled the MOD to move from the older systems accreditation model to 'Secure by Design' - a continuous approach factoring security into each phase from concept to end of life.

It makes sure every digital project and installation complies with UK Government, Ministry of Defence and Royal Navy security policies, and that security is delivered coherently, sustainably and at a scale that adapts to new and emerging requirements.

Vertage’s Suitably Qualified and Experienced Personnel (SQEP) work alongside key stakeholders, including the Cyber Defence and Risk (CyDR) Accreditor, to define and deliver through-life information assurance strategies.

That cover runs from inception to decommissioning, across all security classification tiers (OFFICIAL, SECRET and TOP SECRET), for ICT systems and services in the maritime domain.

Results

By embedding security through every stage of the delivery lifecycle, Vertage has helped the customer manage its digital estate securely for more than 20 years. As Secure by Design has become the expectation, that same depth of knowledge has made adoption straightforward, rolling the principles out while keeping the customer at full operational capability.

The result is security that enables the mission rather than slowing it, and a partnership that compounds in value the longer it runs.

Find out more about our Professional Services solution.