The Security Policy Framework (or "SPF") is a set of high-level policies on security, mainly affecting the UK government and its suppliers. The structure has changed over time. Version 11 was published in October 2013; it has 20 "Mandatory Requirements" grouped into four policy areas. Previously the SPF had as many as 70 Mandatory Requirements, which were more detailed, and which were grouped into 7 areas: :1: Governance, Risk Management & Compliance :2: Protective Marking & Asset Control :3: Personnel Security :4: Information Security & Assurance :5: Physical Security :6: Counter-Terrorism :7: Business Continuity These mandatory requirements are a baseline which apply to all UK government departments; higher requirements may apply in some cases. Public-sector bodies are responsible for managing their own technical security risks, but can draw on expertise and guidelines provided by CESG and the

Cabinet Office The Cabinet Office is a department of His Majesty's Government responsible for supporting the prime minister and Cabinet. It is composed of various units that support Cabinet committees and which co-ordinate the delivery of government objecti ...

. The

Centre for Protection of National Infrastructure Center or centre may refer to: Mathematics *Center (geometry), the middle of an object * Center (algebra), used in various contexts ** Center (group theory) ** Center (ring theory) * Graph center, the set of all vertices of minimum eccentricity ...

also helps protect critical infrastructure. The

Ministry of Defence {{unsourced, date=February 2021 A ministry of defence or defense (see spelling differences), also known as a department of defence or defense, is an often-used name for the part of a government responsible for matters of defence, found in states ...

has its own separate policies and systems. The SPF superseded the

Manual of Protective Security Manual may refer to: Instructions * User guide * Owner's manual * Instruction manual (gaming) * Online help Other uses * Manual (music), a keyboard, as for an organ * Manual (band) * Manual transmission * Manual, a bicycle technique similar to ...

. Part of the SPF is produced by CESG, and part by the

's Security Policy Division.

External links

Current SPF

SPF resources on CESG's website

Older copies of the SPF and MPS requested under the Freedom of Information Act

Resources for the SPF

References

{{reflist Classified information Government of the United Kingdom Information sensitivity Public policy in the United Kingdom