The ASSC has been working to develop guidance on the acquisition of secure systems. Experience gained during this programme of work suggested that there was significant variation between Integrated Project Team’s (IPT’s) ability to effectively manage their security responsibilities. It had previously been intimated that the inability of some IPTs to effectively manage their security risk is due to a number of factors including a:

1. Failure to adopt a structured risk management process.
2. Shortage of suitable expertise.
3. Lack of applicable standards and guidance.

To clarify the validity of such suggestions the ASSC has undertaken a questionnaire based survey of Ministry of Defence (MoD) staff employed in positions relating to the security of defence equipment.

Due to the sensitive nature of the data collected the report publishing the findings of the study will not be made publicly available.

Point of contact: ERA Technology Ltd, Tel: +44 (0) 1372 367141, assc@era.co.uk