Cyber Security Policy evidence pack
Network security evidence for government agencies’ annual reporting, with a plan for any gaps.
The problem
Your agency must report against the policy each year, and network evidence takes time to gather.
Controls exist, but the records that prove them are spread across teams and systems.
What’s included
- Mapping to the policy’s mandatory requirements, including network security controls
- Network evidence collection
- Review of segmentation, access and logging
- Gap analysis
- Remediation plan
Deliverables
- Requirement-to-evidence mapping
- Evidence pack
- Gap and remediation plan
How it works
Assess & understand
We confirm the current policy version, your scope and reporting dates.
Design & plan
We map network controls to the requirements and list the evidence to collect.
Implement & configure
We gather evidence with your teams and record its source.
Test & handover
We deliver the pack and review the gaps and remediation plan.
Frequently asked questions
Does this cover the whole policy?
No. It focuses on network security evidence, which feeds into your agency’s wider report.
Who signs off the report?
Your agency does. We provide evidence and analysis to support your reporting.
How early should we start?
Ideally well before your reporting date, so there is time to fix any gaps you want closed first.
Ready to talk about cyber security policy evidence pack?
Tell us what you are planning and get a written list of next steps.