Get the facts you need to know about how the collection, management and analysis of log data are integral to meeting many GCSx requirements. Read this whitepaper to learn more…
GCSx Logging & Compliance
UK Government Connect Secure Extranet (GCSx) Log Management and Monitoring requirements
Requirement overview stOn 1 April 2008, an announcement by the permanent secretaries of DWP, DCSF and CLG along with Paul Coen of the LGA and Janet Callender was made, highlighting changes to the Government Connect Programme. stSince 1 April, Government Connect has engaged with and received excellent support from the local government community. Huge progress towards the stated target of 100% availability by 31st March 2009 has been made and currently all but 47 of the 410 English and Welsh local authorities have either implemented or are actively progressing implementation of Government Connect. stBuilding on the 1 April announcement and clearer data handling guidelines, DWP is announcing a revised policy concerning access to DWP case data. On 31st March 2009, DWP will cease the provision of RESTRICTED data to local authorities and the receipt of "sensitive personal data" from local authorities through means other than a government approved secure IT communications channel. This essential measure means that we now urge all local authorities (LAs) to make information security a top priority and to commit to completing the Government Connect implementation process without delay. What is GCSx? GCSx stands for Government Connect Secure Extranet. It is a private UK Wide Area Network (WAN) across which secure interactions between connected organisations can occur. These include GC Solutions such as GC Mail and GC Exchange. GCSx is linked to the UK Government Secure Intranet (GSi), allowing secure exchanges between local and central government. GCSx uses a range of connectivity options to access the GSi network and its hosted services without using the Internet or public networks. GCSx can provide secure access to other secure networks such as: . Government Secure Extranet (GSX) . Government Secure Intranet (GSi) . National Health Service (NHS) . Criminal Justice Extranet (CJX)
Copyright 2008 LogRhythm, Inc. Page 1 of 10
GCSx Logging & Compliance
What are the benefits of GCSx? The provision of a national secure network with connectivity to the wider local and central government community will be of huge benefit to local authorities. Key reasons are that GCSx: . Provides a mechanism to join up English local authorities with central government, the NHS, the Scottish local authorities and the Criminal Justice Community into a trusted secure community . Supports a secure email service with antivirus checking . Supports secure data sharing . Is scalable . Is cost effective . Supports aggregated network connectivity into the secure community so that several local authorities can share a single connection onto GCSx (provided that the appropriate security is in place) . Supports the creation of closed user groups . Enables collaboration and joint working . Can carry data, voice and video traffic . Enables outbound web browsing . Will be a launch pad for transforming government within local authorities How does GCSx work? GCSx is provided by a managed service provider (Cable and Wireless). The service will be hosted from two geographically separate data centres, ensuring back-up is available at all times. No single point of failure in the system would be capable of bringing the core network down. The diagram below shows how GCSx interacts with GSi and the internet to deliver a secure communication network to local authorities.
Copyright 2008 LogRhythm, Inc. Page 2 of 10
GCSx Logging & Compliance
Connectivity Options GCSx has a range of connectivity options to access the GSi hosted services without using the internet or public networks which are provided as IP Connect WAN services. Local authorities need to sign-up to the Code of Connection (CoCo) that stipulates the standards and processes an authority must comply with before being able to connect to GCSx. Achieving compliance to the CoCo may be one of the most time-consuming aspects of preparation for the adoption of GC Solutions and should be started as soon as possible.
Copyright 2008 LogRhythm, Inc. Page 3 of 10
GCSx Logging & Compliance
Internet Access The GCSx platform allows secure access to the internet for browsing. Other protocols will be implemented when approved by the pan-... [download for more]