The NCSC’s Technology Assurance activities provide a means to gain confidence in the cyber security of the services and technologies on which the UK relies.
Pages
Page 5 of 35
What is technology assurance?
For the NCSC, assurance is a statement of confidence. It reflects how firmly we believe a technology or system can keep itself, and the people and systems that depend on it, safe from both the remote and close access threats it is likely to encounter throughout its lifetime.
By exploring the context in which a technology is to be used, assurance can facilitate transparency and enable knowledge transfer. This, in turn, will foster richer discussions about cyber security risk of the system.
The statement of confidence in a technology’s security should be arrived at in a reliable, rigorous and repeatable manner, allowing us to understand exactly how much trust we can place in a given technology, in a given situation.
The method used to gain assurance should also be flexible enough that it can evolve, keeping pace with technology’s rapid advancements.
