Government & public sector

Pressures we help with

• National cybersecurity mandates
• Anti-bribery and integrity expectations
• Continuity of essential public services
• Supplier certification requirements in tenders

What you get

• A clear list of the requirements that apply to you
• A prioritised, costed roadmap
• One control set mapped to every framework
• Evidence ready for customer, regulator and certification audits

How we work with you

1. Map your obligations

   List the standards, regulations and customer requirements that apply to your organisation in government & public sector.

2. Gap assessment

   Measure current practice against each requirement and rank the gaps by business and regulatory risk.

3. Build one programme

   Implement controls once and map them to every framework, so evidence serves auditors, regulators and customers alike.

4. Certify, attest and stay ready

   Support through certification and attestation audits, then managed compliance to stay ready all year.

Popular standards and regulations for this sector

• ISO/IEC 27001Information security management systemsThe international benchmark for managing information security risk, and the certificate enterprise buyers ask for first.
• ISO 37001Anti-bribery management systemsA certifiable framework to prevent, detect and respond to bribery across your organisation and business partners.
• ISO 37000Governance of organisationsPrinciples for effective, ethical and accountable governance by boards and governing bodies.
• ISO 9001Quality management systemsThe world’s most widely used management standard, consistent products, services and customer satisfaction.
• ISO 22301Business continuity management systemsKeep critical services running through disruption, and prove it to customers and regulators.
• NCA ECCSaudi National Cybersecurity Authority Essential Cybersecurity ControlsMandatory baseline cybersecurity controls for Saudi government entities and critical infrastructure operators.
• UAE IA StandardUAE Information Assurance Regulation (TDRA)The UAE’s national information assurance controls for government entities and critical sectors.
• Dubai ISRDubai Information Security Regulation (Dubai Electronic Security Center)Dubai’s information security regulation for government entities and critical sectors in the emirate.
• Qatar NIAQatar National Information Assurance Policy and StandardQatar’s national information assurance framework for government and critical sectors.
• GIGW & STQC website auditGuidelines for Indian Government Websites and Apps (GIGW 3.0) and STQC certificationQuality, accessibility and security requirements for government websites and apps.
• MeitY cloud empanelmentMeitY empanelment of cloud service offerings for governmentEmpanelment that allows cloud service providers to host Indian government workloads.

Need something not listed? Ask us. We support many more sector rules than we can show here.

Frequently asked questions