Government Connect | contact us |

GCSX Code of Connection Reassessment

A mandatory requirement of being connected to the Government Connect Secure Extranet (GCSX) is that each connecting organisation has to submit a new Code of Connection (CoCo) annually. Siemens Enterprise Communications Limited (Siemens) has been contracted by the DWP to undertake the CoCo renewal assessments. A letter was sent to all Section 151 officers and IT leads in English and Welsh councils to this effect. The assessment will determine whether the submitting local authority is compliant with the CoCo or where not compliant, what appropriate measures are being taken to address this.

An assessment schedule has been established. If you would like to confirm when the assessment for your local authority is scheduled, please contact Siemens using the email address below. Due to the number of assessments that have to be undertaken, a large number are being performed on a monthly basis. It is essential therefore that the necessary information (as detailed below) is provided to Siemens as soon as possible to allow this schedule to be adhered to.

Where compliance can be demonstrated, Siemens will recommend that the connection is renewed for another year. Where it has not been possible to establish satisfactory compliance with the CoCo then this will be escalated to DWP. It should be noted that the ultimate sanction against non-compliance is disconnection from the GCSX.

A number of assessments will be undertaken on-site with the rest being performed off-site. To allow the assessment process to work effectively, it is vital that the following information is provided to Siemens:

1. A completed proforma with detailed information where applicable;
2. A detailed control table CoCo submission form. The more information that is provided, the less likely it is that Siemens will need to obtain additional information to allow the assessment to complete
3. Evidential information to support the control statements being made. For example, the report from your IT Health Check should be able to support a number of the technical statements made within your CoCo submission. Without any evidential documentation it will be very difficult for a detailed assessment to be undertaken.
4. Contact details for those who have responsibility for the GCSX connection and (where relevant) those who will be involved in the on-site assessment.

The diagram below represents a simplified version of the process that Siemens has adopted in undertaking the assessment.

Siemens will engage with the local authority well in advance of the planned assessment date. Should you have concerns regarding meeting this date, it is essential that you contact Siemens as soon as possible so that we can determine the best approach to the assessment.

Once the assessment is complete, Siemens will provide you with written confirmation of its findings which will include any remedial work that needs to be undertaken. Siemens will also convey these findings to Buying Solutions and CESG.

The Siemens assessment team can be contacted via email: Gcsx.security@siemens-enterprise.gse.gov.uk.