HMRC has become the latest government organisation to deploy CPA certified encryption software from Becrypt.
The CPA scheme was announced by CESG earlier this year as a more user-friendly option for protecting data up to Impact Level 3 (restricted) and in some cases, IL 4. HMRC has deployed Becrypt's Disk Protect across 7,000 laptops after it, Becrypt and CESG worked closely together to ensure that Disk Protect met the functional and security requirements of the former Inland Revenue.
Stewart Weston-Lewis, head of service design at HMRC, said: “We considered a need/use case and believe that the CPA solution is appropriate for these devices where we would have traditionally defaulted to the CAPS solution (CESG Assisted Products Service). The security is appropriate for the protective marking of these devices.
“Implementing a CAPS solution was not justified given that the cost would have been £2.4 million more and the CPA solution is sufficient for our requirements. CPA does not compromise standards. It balances the security of the product to the risks it is exposed to.”
According to Becrypt, the technology offers the ability to encrypt in the background while the user is still using the machine, with no discernible loss in performance. It said its unique key management processes within Becrypt's CPA certified solution allows management to be centralised.
Jonathan Hoyle, director general for government and industry cyber security at GCHQ, said: “CESG developed CPA to help UK public sector organisations identify good commercial security products and thus help to keep information secure. We needed to ensure that we maintained a pragmatic level of security, ensuring UK government can deliver its business whilst remaining safe against the likely risks we face.”
Bernard Parsons, CEO of Becrypt, said: “In these austere times where all organisations, particularly those in the public sector, are facing budget cuts, Becrypt is more committed than ever to providing innovative solutions to protect data. Even though budgets are reducing, cyber crime and threat levels are on the increase, which is why it is crucial for organisations to find new ways of working.
“The collaboration between CESG, HMRC and Becrypt to deliver this new cost effective solution supports the government's cyber security agenda and shows what can be achieved in the public sector when organisations work together.”