Guidance

DWP procurement: security policies and standards

These apply to DWP suppliers and contractors where explicitly stated in the security schedule of the contract.

Documents

Policy: Acceptable Use

Policy: Information Security

Policy: Physical Security

Security standard SS-001 (part 2): Privileged User Access Controls

This file may not be suitable for users of assistive technology. Request an accessible format.

If you use assistive technology (such as a screen reader) and need a version of this document in a more accessible format, please email accessible.formats@dwp.gsi.gov.uk. Please tell us what format you need. It will help us if you say what assistive technology you use.

Security standard SS-012: Protective Monitoring Standard

This file may not be suitable for users of assistive technology. Request an accessible format.

If you use assistive technology (such as a screen reader) and need a version of this document in a more accessible format, please email accessible.formats@dwp.gsi.gov.uk. Please tell us what format you need. It will help us if you say what assistive technology you use.

Security standard SS-029: Securely Serving Web Content

This file may not be suitable for users of assistive technology. Request an accessible format.

If you use assistive technology (such as a screen reader) and need a version of this document in a more accessible format, please email accessible.formats@dwp.gsi.gov.uk. Please tell us what format you need. It will help us if you say what assistive technology you use.

Security Standard SS-030: Oracle Database Security

This file may not be suitable for users of assistive technology. Request an accessible format.

If you use assistive technology (such as a screen reader) and need a version of this document in a more accessible format, please email accessible.formats@dwp.gsi.gov.uk. Please tell us what format you need. It will help us if you say what assistive technology you use.

Security Standard SS-031: Domain Management

This file may not be suitable for users of assistive technology. Request an accessible format.

If you use assistive technology (such as a screen reader) and need a version of this document in a more accessible format, please email accessible.formats@dwp.gsi.gov.uk. Please tell us what format you need. It will help us if you say what assistive technology you use.

Details

Please note, the Department for Work and Pensions (DWP) is unable to reply to general enquiries or questions about these security standards and policies.

These security standards and policies apply to DWP suppliers and contractors only. They do not apply to other government departments, their agencies or arm’s length bodies.

They have been published to help inform DWP Invitations to Tender and other contracting processes.

DWP may choose in an Invitation to Tender or the bid process to reference the standards and policies published here. Questions about a specific standard or policy should be sent to the DWP team managing responses to bids. This team is the only DWP authorised responder on any question about a bid and a standard or policy.

A new or changed policy or standard does not mean a new requirement for any existing contract. DWP will notify contract holders or partners of any changes to a contract.

Suppliers and contractors should contact their DWP contract managers with any questions about:

  • varying contracts
  • changing the agreed delivery of contracted services
  • the applicability of a standard or policy for their contracts
Published 9 April 2018
Last updated 27 June 2018 + show all updates
  1. Published revised versions of Acceptable Use (version 2.5), Information Security (version 1) and Physical Security (version 1) policies.
  2. Added 'Security standard SS-012: Protective Monitoring Standard'.
  3. Added 'Security standard SS-001 (part 2): Privileged User Access Controls'.
  4. First published.