Cinos earns Police-Assured Secure Facilities (PASF) Accreditation

PASF is a widely recognised accreditation amongst UK police forces. It is managed by The National Policing Information Risk Management Team (NPIRMT) of the UK Home Office who set the standards and controls for law enforcement agencies that are assessing the risk of moving police information systems to the cloud.

To successfully achieve the PASF accreditation, the NPIRMT must complete a comprehensive physical security assessment of an organisations’ datacentres and review the internal policies and procedures concerning data protection and management.

Cinos have a longstanding history serving the public sector and work with a number of police forces across the UK. We hold internationally recognised security accreditations including ISO 27001 and Cyber Essentials Plus. To ensure that we can continue to deliver services from Cinos Cloud to UK police forces, Ryan Messer, Chief Security Officer at Cinos, created a comprehensive Security Management Plan to ensure the datacentres where Cinos Cloud resides would become PASF certified.

Following the completion of Cinos’ Security Management Plan, the NPIRMT undertook an inspection of the Cinos Cloud datacentres. From a physical assessment perspective, the security measures we have in place ensured compliance with PASF. These measures including assessing aspects such as on-premises CCTV systems, access control systems and ensuring the racks where Cinos Cloud is hosted were physically secure.

For data management, Cinos Cloud underwent an IT Health Check (ITHC) performed by the NCC Group and designed to test the services’ resilience to attempts of unauthorised access. The Cinos Cloud datacentres successfully passed the ITHC by demonstrating we have the necessary backup, encryption, detection, and intrusion prevention measures in place to ensure the data is protected against malicious code and attempts of unauthorised access. This was further supported with evidence of how we manage, process, and destroy data, detailed in the Security Management Plan.

For more information on the accreditations Cinos hold, please click here. If you are considering moving your information systems to the cloud and would like to speak with an approved provider, please get in touch with our team, they would be delighted to help.