The NCSC’s Technology Assurance activities provide a means to gain confidence in the cyber security of the services and technologies on which the UK relies.
Pages
Page 4 of 35
The audience for technology assurance
Technology assurance helps people decide whether a technology is secure enough for their needs.
The precise nature of those needs will vary from case to case, but some important examples are:
businesses needing technologies to enable production and communication
government departments rolling out technology at scale and in critical applications
defence & national security
the use of technology in regulated environments
consumers purchasing connected technologies
A single point in time, ‘one size fits all’ assessment of a given device or system cannot satisfy every one of these cases.
What’s needed in the real world, is a method for generating assurance statements which reflect the nature of the intended use and which people can understand and act on.
