Answers
Is it mandatory for Local Authorities to engage with the Government Connect Programme?
No, engagement is not mandatory however GCSX is DWP, DCSF and CLG preferred common secure method for the electronic transfer of data between the three departments and local authorities. From April 2009 the three departments will begin phasing out internet and postal based solutions. GC are not currently aware of alternative infrastructure solutions that satisfy the Departments' immediate and strategic ambitions and therefore it is expected that all local authorities will connect to GC
See the Permanent Secretary letter dated 1st April 2008
GCSX can also help Local Authorities achieve the objectives and benefits associated with their Transformational Government and Efficiency Agendas and is increasingly being seen as the preferred method for delivering joined up services between local and central government.
What is the new charging structure for GCSX, and how does it apply to partnerships?
Aggregated gateway (partnership) connections can be shared between a number of local authoritys:
- that are already connected to an existing, shared, Wide Area Network (WAN) that directly connects each partner (and there is no further 'sub' aggregation of GCSX services beyond those partners;
- that are part of an existing partnership (e.g. geographically);
- whose partnership does not exceed 40 members.
DWP, CLG and DCSF, with the support of the LGA, have announced a collective investment of £33 million up to 31 March 2011. This means that local authorities will only have to cover their internal costs during this period - this includes the procurement of any local hardware (if necessary) and any local changes required in order for the local authority to become compliant with the Code of Connection
Beyond CSR07 it is expected that ongoing operational costs will be shared across the GC user community. Each local authority (whether it is connecting to GCSX directly, or through a partnership connection) will be required to share this cost.
Why are sustainability costs so high and why are local authoritys expected to pay when it is in the interests of Central Government that local authoritys join a secure network.
There will no charge until 1 April 2011. After that time it is expected that operational costs will be shared across the GC user community. The exact charge will be calculated, in consultation with the key stakeholders, once these costs are know. The costs are not anticipated to be high, but reflect the true costs of operating secure infrastructure. The programme approach maximises the purchasing power to deliver good value for money. Cost / supply chain efficiencies will be gained and (will continue to be gained) as a standard IT services are adopted throughout central and local Government. The benefits of local authorities joining GCSX will accrue to both local and central government.
When do connection bills start for a local authority?
Because of the £33m investment from DWP, CLG and DCSF it is anticipated this will start on April 1st 2011.
Will Cable & Wireless bill local authorities for their GCSX costs?
Because of the £33m investment from DWP, CLG and DCSF it is anticipated this will start on April 1st 2011. After that time all local authoritys will receive a bill directly from C&W which should be paid as normal. It should be noted that this is still sometime away and that the process will inevitably be reviewed in the light of events and consultation.
Who are approved vendors and what can they offer?
Government Connect does not approve any vendors to supply products on GCSX.
Intellect runs a Government Connect Industry Advisory Group on commercial providers with a diverse range of commercial interests including hardware suppliers, software developers, business reengineering suppliers and change management agencies. Services provided include:
- security assessment;
- installation;
- integration software;
Please contact Intellect to obtain the list of vendors who may offer services of interest to your authority.
What is the cost for a Local Authority to sign up to GCSX?
CLG and DCSF, with the support of the LGA, have announced an investment of £33 million up to March 2011. This means that local authorities will only have to cover their internal costs - this includes the procurement of any local hardware (if necessary) and any local changes required in order for the local authority to become compliant with the Code of Connection - during this period. Beyond CSR07 it is expected that ongoing operational costs will be shared across the GC user community.
What approach will the GC team adopt in using GC Solutions to re -engineer business processes?
The programme will be working to highlight and promote the opportunities enabled, though is not responsible for delivery of changed business processes, GC provides enabling technologies that enables local authorities to change their business processes. It supports the transformation agenda by creating a secure network over which data can be exchanged securely. This is significant in exchanging central government data with Local Authorities, such as the DWP’s CIS data.
Do we have to have a DIS box? A DIS box is a Departmental Integration Server.
No - a DIS 'box' is not required to connect to GCSX and has no impact on non-Government Gateway services available across GCSX.
A DIS compliant server is a current requirement for transactions routed via the Government Gateway. The requirement for Government Gateway routed transactions to take place via a DIS is Gateway's requirement not Government Connect's. The Government Gateway DIS specification, provides the interface between the service owner and the central Gateway, communicating using SOAP reliable messaging and XML GovTalk standards. The DIS sits at the edge of the local authority network and GCSX and acts as the secure bridge between local authority systems and Government Gateway XML message relays.
For more details on Government Gateway services please go to http://www.gateway.gov.uk/
Will GC Mail work with our existing mail system?
GC Mail will work with any commercially available SMTP (Simple Mail Transfer Protocol) based mail server solution. e.g. Microsoft Exchange Server.
Implementation and configuration information and guidance is available in the Pre-Connection Take on Guide.
If the GCSX connection is linking to a local authority that then provides information to citizens through their internet connection, is this not making the network unsecure?
The Code of Connection requires connecting organisations to install a firewall between their Local Area Network (LAN) and the GCSX router. In addition, evidence of other, appropriately placed, firewalls to all external connections (including the internet) will need to be provided in the form of a network diagram, before the Code of Connection can be approved.
Local Authorities are also required to train users appropriately to ensure that they do not pass sensitive information from GCSX to unauthorised recipients by unsecure means. Please see the Operational Support Guide for guidance on staff training.
Government Connect is providing free consultancy to local authoritys in supporting them becoming compliant with the Code of Connection. To book your consultancy session, please contact gcsx.security@siemens-enterprise.gse.gov.uk.
Is the CoCo optional?
No. To connect to GCSX each local authority must comply with the CoCo. This applies to local authoritys who are directly connecting to GCSX, and those who are connecting through a partnership. Aggregated Gateway (partnership) networks must also demonstrate compliance with the CoCo, in addition to each connecting local authority.
The CoCo sets the security standards that local authorities must meet in order to connect. Much of the CoCo is compliant with the requirements of ISO27001 and represents good ICT practice.
Government Connect is providing free consultancy to local authoritys in supporting them becoming compliant with the Code of Connection. To book your consultancy session, please contact gcsx.security@siemens-enterprise.gse.gov.uk.
How does the CoCo for GCSX differ from that for the GSi?
Essentially the CoCos are the same with additional annexes for GCSX as with the GSx network in Scotland.
All local authorities have now been isues with a copy of the CoCo, if you still require a copy please apply by
email, to gcsx.security@siemens-enterprise.gse.gov.uk.
What is the minimum that a local authority must do now to comply with the CoCo?
- Local Authorities need to be compliant with each of the 'MUST' controls, and be able to demonstrate a good level of compliance with the 'SHOULDs' in order for their CoCo to be approved.
- Government Connect is providing free consultancy to local authoritys in supporting them becoming compliant with the Code of Connection. To book your consultancy session, please contact gcsx.security@siemens-enterprise.gse.gov.uk
If a local authority is signing up to GCSX as part of a partnership will each local authority in that partnership have to comply with the CoCo?
To connect to GCSX each local authority must comply with the CoCo. This applies to local authoritys who are directly connecting to GCSX, and those who are connecting through a partnership. Aggregated Gateway (partnership) networks must also demonstrate compliance with the CoCo, in addition to each connecting local authority.
Government Connect is providing free consultancy to local authoritys in supporting them becoming compliant with the Code of Connection. To book your consultancy session, please contact gcsx.security@siemens-enterprise.gse.gov.uk.
What is the position on connecting aggregated partnerships to the GCSX network?
GCSX connectivity can either be provided to an individual local authority, or indirectly through an aggregated gateway (partnership).
Appropriateness of aggregated gateway (partnership) connections will be deemed on a case by case basis, but essentially, aggregated gateway (partnership) connections can be shared between a number of Local Authorities:
- that are already connected to an existing, shared, Wide Area Network (WAN) that directly connects each partner (and there is no further 'sub' aggregation of GCSX services beyond those partners;
- that arepart of an existing partnership (e.g. geographically);
- whose partnership does not exceed 40 members.
If a group of Local Authorities want to connect to GCSX via their WAN but not all members of the WAN want to/can comply to the CoCo can other partners still connect?
Yes each local authority is identified through the aggregated gateway's connection by its individual IP address. GCSX traffic to and from IP addresses of non-compliant local authorities will not be allowed.
Will GC Mail mean that all emails by a local authority will be secure?
Local Authorities will need to to set up second mailboxes for their users who have a requirement for sending mail securely. Users should use their existing .gov.uk addresses for all internet based emails. The individual user will choose to send/receive email from their appropriate inbox.
For further information on the implementation of GC Mail, please refer to the Pre-Connection Take on Guide.
Is there any exception to the rule that all persons using/administering GCSX must have appropriate security clearance?
All users and administrators of GCSX must be cleared to the Baseline Personal Security Standard. This also applies to any third party staff employed by the local authority to administer its IT.
Higher clearance may be required to access data transferred over the network, as appropriate (and determined by the data owners).
For further information on staff clearance, please refer to the CoCo FAQs document.
Can GC provide monitoring reports of activity across the GCSX network?
Yes appropriately cleared GC / Local Authority staff can monitor some aspects of activity. In addition GC will be provided with activity reports by the Service Provider.
For information on activating your local authority's access to network logs, please refer to the Operational Support Guide.
What is the relocal authoritytionship between GC secure mail and that provided by Criminal Justice?
GC and Criminal Justice both provide a Secure Mail solution. The Criminal Justice Secure Mail (CJSM) is provided to Users engaged in work with the Criminal Justice service. Unlike GCSX, it is an internet based solution.
A GC mail account will enable local authority Users to securely email staff in other (GCSX connected) local authoritys, Central Government departments, NHS departments, Police National Network (PNN) as well as Criminal Justice Secure Mail (CJSM) Users. It uses a private secure resilient network and is an enterprise solution.
What is the relocal authoritytionship between GC secure mail and that provided by NHS?
GC and NHS both offer a secure mail Service. Where local authority Users are engaged in work which requires access to patient confidential data, then an NHS mail account will be required because patient data cannot be transmitted over GCSX. NHS mail accounts will only be provided to staff that require this type of access. All other local authority staff sending secure mail will require a GC Mail account.
A GC mail account will enable local authority Users to securely email other local authoritys, Central Government Users, Criminal Justice Secure Mail (CJSM) Users, Police National Network (PNN) Users as well as NHS mail Users.
What is the new charging structure for GCSX, and how does it apply to partnerships?
Will GC Mail mean that all emails by a local authority will be secure? 
Is there any exception to the rule that all persons using/administering GCSX must have appropriate security clearance?
What is the relocal authoritytionship between GC secure mail and that provided by NHS?
©2009 Government Connect |