Answers
Is it mandatory for Local Authorities to engage with the Government Connect Programme?
No, engagement is not mandatory however GCSx is DWP, DCSF and CLG preferred common secure method for the electronic transfer of data between the three departments and local authorities. From April 2009 the three departments will begin phasing out internet and postal based solutions. GC are not currently aware of alternative infrastructure solutions that satisfy the Departments' immediate and strategic ambitions and therefore it is expected that all local authorities will connect to GC
See the Permenant Secretary letter dated 1st April 2008
GCSx can also help Local Authorities achieve the objectives and benefits associated with their Transformational Government and Efficiency Agendas and is increasingly being seen as the preferred method for delivering joined up services between local and central government.
If an LA signs a Proforma, can they then change their mind?
Every Local Authority in England and Wales is expected to connect to GCSx as soon as possible, in preparation for 100% network connectivity by 31 March 2009.
The proforma is the first stage in the implementation process and should be returned to the GC team gctechteam@communities.gsi.gov.uk by 30 April 30 2008. This will enable the GC Team to order the connection on behalf of the LA, whilst they are beginning the preparatory work towards signing the service contracts and in becoming compliant with the Code of Connection. LAs are expected to work with the GC team to ensure site access for engineers to install the circuit and router (dates will be arranged at the LA's convenience).
The proforma, itself, is not a legally binding document, and the order (in the first instance) will be placed by the GC Programme. Risk and responsibility for this connection is with the central GC programme. It is anticipated however that the local authority will move forward to signing the OGCbs Terms & Conditions and C&W Service Contract with Cable and Wireless at the earliest opportunity. Template contracts are available on the GC website - Technical Implementation Pack
What is the new charging structure for GCSx, and how does it apply to partnerships?
Aggregated gateway (partnership) connections can be shared between a number of LAs:
- that are already connected to an existing, shared, Wide Area Network (WAN) that directly connects each partner (and there is no further 'sub' aggregation of GCSx services beyond those partners;
- that are part of an existing partnership (e.g. geographically);
- whose partnership does not exceed 40 members.
DWP, CLG and DCSF, with the support of the LGA, have announced a collective investment of £33 million up to 31 March 2011. This means that local authorities will only have to cover their internal costs during this period - this includes the procurement of any local hardware (if neccessary) and any local changes required in order for the LA to become compliant with the Code of Connection
Beyond CSR07 it is expected that ongoing operational costs will be shared across the GC user community. Each LA (whether it is connecting to GCSx directly, or through a partnership connection) will be required to share this cost.
Why are sustainability costs so high and why are LAs expected to pay when it is in the interests of Central Government that LAs join a secure network.
There will no charge until 1 April 2011. After that time it is expected that operational costs will be shared across the GC user community. The exact charge will be calculated, in consultation with the key stakeholders, once these costs are know. The costs are not anticipated to be high, but reflect the true costs of operating secure infrastructure. The programme approach maximises the purchasing power to deliver good value for money. Cost / supply chain efficiencies will be gained and (will continue to be gained) as a standard IT services are adopted throughout central and local Government. The benefits of local authorities joining GCSx will accrue to both local and central government.
When do connection bills start for a local authority?
Because of the £33m investment from DWP, CLG and DCSF it is anticipated this will start on April 1st 2011.
Will Cable & Wireless bill local authorities for their GCSx costs?
Because of the £33m investment from DWP, CLG and DCSF it is anticipated this will start on April 1st 2011. After that time all LAs will receive a bill directly from C&W which should be paid as normal. It should be noted that this is still sometime away and that the process will inevitably be reviewed in the light of events and consultation.
Who are approved vendors and what can they offer?
Government Connect does not approve any vendors to supply products on GCSx.
Intellect runs a Govenment Connect Industry Advisory Group on commercial providers with a diverse range of commercial interests including hardware suppliers, software developers, business reengineering suppliers and change management agencies. Services provided include:
- security assessment;
- installation;
- integration software;
Please contact Intellect to obtain the list of vendors who may offer services of interest to your authority.
What is the cost for a Local Authority to sign up to GCSx?
CLG and DCSF, with the support of the LGA, have announced an investment of £33 million up to March 2011. This means that local authorities will only have to cover their internal costs - this includes the procurement of any local hardware (if neccessary) and any local changes required in order for the LA to become compliant with the Code of Connection - during this period. Beyond CSR07 it is expected that ongoing operational costs will be shared across the GC user community.
What approach will the GC team adopt in using GC Solutions to re -engineer business processes?
The programme will be working to highlight and promote the opportunities enabled, though is not responsible for delivery of changed business processes.GC provides enabling technologies that enables local authorities to change thier business processes. It supports the transformation agenda by creating a secure network over which data can be exchanged securely. This is significant in exchanging central government data with Local Authorities, such as the DWP’s CIS data.
Do we have to have a DIS box? A DIS box is a Departmental Integration Server.
No - a DIS 'box' is not required to connect to GCSx and has no impact on non-Government Gateway services available across GCSx.
A DIS compliant server is a current requirement for transactions routed via the Government Gateway. The requirement for Government Gateway routed transactions to take place via a DIS is Gateway's requirement not Government Connect's. The Government Gateway DIS specification, provides the interface between the service owner and the central Gateway, communicating using SOAP reliable messaging and XML GovTalk standards. The DIS sits at the edge of the LA network and GCSx and acts as the secure bridge between LA systems and Government Gateway XML message relays.
For more details on Government Gateway services please go to http://www.gateway.gov.uk/
Will GC Mail work with our existing mail system?
GC Mail will work with any commercially available SMTP (Simple Mail Transfer Protocol) based mail server solution. e.g. Microsoft Exchange Server.
Implementation and configuration information and guidance is available in the Pre-Connection Take on Guide.
If the GCSx connection is linking to a LA that then provides information to citizens through their internet connection, is this not making the network unsecure?
The Code of Connection requires connecting organisations to install a firewall between their Local Area Network (LAN) and the GCSx router. In addition, evidence of other, appropriately placed, firewalls to all external connections (including the internet) will need to be provided in the form of a network diagram, before the Code of Connection can be approved.
LAs are also required to train users appropriately to ensure that they do not pass sensitive information from GCSx to unauthorised recipients by unsecure means. Please see the Operational Support Guide for guidance on staff training.
Government Connect is providing free consultancy to LAs in supporting them becoming compliant with the Code of Connection. To book your consultancy session, please contact your appropriate Account Manager.
Is the CoCo optional?
No. To connect to GCSx each local authority must comply with the CoCo. This applies to LAs who are directly connecting to GCSx, and those who are connecting through a partnership. Aggregated Gateway (partnership) networks must also demonstrate compliance with the CoCo, in addition to each connecting LA.
The CoCo sets the security standards that local authorities must meet in order to connect. Much of the CoCo is compliant with the requirments of ISO27001 and represents good ICT practice.
Government Connect is providing free consultancy to LAs in supporting them becoming compliant with the Code of Connection. To book your consultancy session, please contact your appropriate Account Manager.
How does the CoCo for GCSx differ from that for the GSi?
Essentially the CoCos are the same with additional annexes for GCSx as with the GSx network in Scotland.
For a copy of the CoCo, please apply by email, to GCtechteam@communities.gsi.gov.uk.
What is the minimum that a local authority must do to comply with the CoCo?
- Engage at the earliest opportunity with the GC Account Manager who can advice on how far away from compliance the local authority is.
- This meeting will result in a gap analysis of their security systems against GCSx CoCo requirements and help create an action plan in order to ensure compliance and show substantial progress against this plan.
- LAs need to be compliant with each of the 'MUST' controls, and be able to demonstrate a good level of compliance with the 'SHOULDs' in order for their CoCo to be approved.
- Government Connect is providing free consultancy to LAs in supporting them becoming compliant with the Code of Connection. To book your consultancy session, please contact your appropriate Account Manager.
If a local authority is signing up to GCSx as part of a partnership will each local authority in that partnership have to comply with the CoCo?
To connect to GCSx each local authority must comply with the CoCo. This applies to LAs who are directly connecting to GCSx, and those who are connecting through a partnership. Aggregated Gateway (partnership) networks must also demonstrate compliance with the CoCo, in addition to each connecting LA.
Government Connect is providing free consultancy to LAs in supporting them becoming compliant with the Code of Connection. To book your consultancy session, please contact your appropriate Account Manager.
What is the position on connecting aggregated partnerships to the GCSx network?
GCSx connectivity can either be provided to an individual LA, or indirectly through an aggregated gateway (partnership).
Appropriateness of aggregated gateway (partnership) connections will be deemed on a case by case basis, but essentially, aggregated gateway (partnership) connections can be shared between a number of LAs:
- that are already connected to an existing, shared, Wide Area Network (WAN) that directly connects each partner (and there is no further 'sub' aggregation of GCSx services beyond those partners;
- that arepart of an existing partnership (e.g. geographically);
- whose partnership does not exceed 40 members.
What is the lead time from an accepted order by Cable & Wireless?
Contractually, from the time of placing an order with C&W (for a 2Mb connection), there is a 45 day lead time for the provisioning of a GCSx connection. This can happen in a shorter period of time, but your LA will be contacted by C&W to arrange installation appointments.
Please note - for orders of 10Mb and above the lead time will be longer. LAs will be advised on predicted 'Ready for Service' dates, and of progress of the connection.
Who is responsible for updating the role based Directory?
The GC Directory function is currently under review by GC after feedback and consulation with Local Authorities. This issue the stakeholders are collectively trying to solve is who is responsible for data provision. In light of central Government experience gained through GSI and market developments incoporated into new GSI contract alternative solutions are being considered that may provide benefits to LAs and CG.
If a group of local authorities want to connect to GCSx via their WAN but not all members of the WAN want to/can comply to the CoCo can other partners still connect?
Yes each local authority is identified through the aggregated gateway's connection by its individual IP address. GCSx traffic to and from IP addresses of non-compliant local authorities will not be allowed.
Will GC Mail mean that all emails by a local authority will be secure?
LAs will need to to set up second mailboxes for their users who have a requirement for sending mail, securely. Mail from this mailbox cannot be sent over the internet. The individual user will choose to send/receive email from their appropriate inbox (local.name@LA.gcsx.gov.uk).
For further information on the implementation of GC Mail, please refer to the Pre-Connection Take on Guide.
How will job roles be defined in the Directory?
The GC Directory function is currently under review by GC after feedback and consulation with Local Authorities. This issue the stakeholders are collectively trying to solve is who is responsible for data provision. In light of central Government experience gained through GSI and market developments incoporated into new GSI contract alternative solutions are being considered that may provide benefits to LAs and CG.
Is there any exception to the rule that all persons using/administering GCSx must have appropriate security clearance?
All users and administrators of GCSx must be cleared to the Baseline Personal Security Standard. This also applies to any third party staff employed by the local authority to administer its IT.
Higher clearance may be required to access data transferred over the network, as appropriate (and determined by the data owners).
For further information on staff clearance, please refer to the CoCo FAQs document.
Can GC provide monitoring reports of activity across the GCSx network?
Yes appropriately cleared GC / Local Authority staff can monitor some aspects of activity. In addition GC will be provided with activity reports by the Service Provider.
For information on activiting your LA's access to network logs, please refer to the Operational Support Guide.
What is the relationship between GC secure mail and that provided by Criminal Justice?
GC and Criminal Justice both provide a Secure Mail solution. The Criminal Justice Secure Mail (CJSM) is provided to Users engaged in work with the Criminal Justice service. Unlike GCSx, it is internet based solution.
A GC mail account will enable LA Users to securely email staff in other (GCSx connected) LAs, Central Government departments, NHS departments, Police National Network (PNN) as well as Criminal Justice Secure Mail (CJSM) Users. It uses a private secure resilient network and is an enterprise solution.
What is the relationship between GC secure mail and that provided by NHS?
GC and NHS both offer a secure mail Service. Where LA Users are engaged in work which requires access to patient confidential data, then an NHS mail account will be required because patient data cannot be transmitted over GCSx. NHS mail accounts will only be provided to staff that require this type of access. All other LA staff sending secure mail will require a GC Mail account.
A GC mail account will enable LA Users to securely email other LAs, Central Government Users, Criminal Justice Secure Mail (CJSM) Users, Police National Network(PNN) Users as well as NHS mail Users.
©2008 Government Connect |