Guidance
Connected Places Cyber Security Principles
Secure design, build and management of public realm technology, infrastructure, and data-rich environments for local authorities.
Page 2 of 19
About the connected place principles
These principles will highlight key considerations that you need to keep in mind to ensure your connected place is designed, built, and operated in a secure manner. It is split into three sections:
These principles should be used in conjunction with existing NCSC and NPSA guidance. You should read, understand and implement the following:
- If your connected place is going to be built and operated within the cloud, refer to our Cloud security guidance and Virtualisation secure design principles.
- To help design your connected place system, refer to our Secure design principles and our white paper on Security architecture anti-patterns. You should also refer to our guidance on Systems administration architecture, Zero trust architecture design principles, Public Key Infrastructure principles and Secure communications principles (alpha release).
- To help manage your supply chain, please refer to our Supply chain principles.
- As a method of assessing the extent to which your organisation is managing cyber security risks in relation to your connected place’s essential functions, refer to the Cyber Assessment Framework.
- For physical and personnel security principles (including security minded approaches) relevant guidance is available on the NPSA website. Examples include NPSA's guidance of Physical Security Systems, such as CCTV and access control
