Planned changes to CESG's charging model

8 Feb 2016 02:26 PM

Part of a number of initiatives aimed at achieving better focus on HMG's national security policies.

Following the Strategic Defence and Security Review (SDSR) and announcement of the establishment of a National Cyber Centre as part of GCHQ, CESG is working towards reforming the charging regime for some of our services from the beginning of the new Financial Year. This policy change is part of a number of initiatives aimed at achieving better focus on HMG's national security priorities.

It is currently the intention (though this policy may be extended to other services in due course) to stop recovering full costs for the following services:

• IA Consultancy and Advice for Government customers or in pursuance of the Government's national security priorities
• CESG Assisted Products Service (CAPS)
• TEMPEST

Specific details are still being worked through and in certain circumstances, some chargeable elements will remain (eg if there is any exchange of IPR, where CESG is asked to buy specific equipment for you to use, or to maintain consistency with other service offerings).

However, we are pleased to announce that in relation to:

• IA Consultancy and Advice for Government customers
• CAPS Pre-Evaluation Consultancy and Advice (and Fit for Purpose Evaluation)
• CAPS Cryptographic Evaluation (including Bugfix)
• IA Consultancy and Advice provided in the context of the CESG Formal TEMPEST Certification Scheme (including TEMPEST training)

the following arrangements will apply:

• any new work agreed following the beginning of the Financial Year (FY) 16/17 will no longer be invoiced
• any work already in progress, or agreed before the end of FY 15/16, but which will not be completed until sometime during 16/17 or a later FY, will be invoiced for any costs incurred until the end of 15/16 (in practice this may mean payment occurs in FY 16/17)
• there will continue to be a written process for confirming the scope of the work to be undertaken free of charge and setting out the roles and responsibilities of CESG and the recipient customer

In relation to:

• CAPS In-Service Assurance (CISA)
• CPTAS (CESG Platform TEMPEST Accreditation Scheme)
• CFTCS (CESG Formal TEMPEST Certification Scheme)

we will be contacting customers to discuss proposed changes to existing contracts and other relevant paperwork.

Any services offered by CESG will remain subject to CESG prioritisation, guided by HMG's national security priorities, and resource availability.

Please address any queries you have to your Customer Relationship Manager in the first instance, or to CESG enquiries on 01242 709141 or email enquiries@cesg.gsi.gov.uk