Annual IT Health Check for The National Archives' PSN Accreditation

About

The National Archives awarded a contract to IRM Ltd.

for an annual IT health check as part of the accreditation process to the Public Services Network (PSN).

The contract, valued at AUD 19,500, required CHECK scheme certified testers cleared to SC level to test internal and external facing systems.

External testing covered VPN (Juniper), mobile device solutions (AirWatch and Blackberry), internet facing web servers, and perimeter firewalls (one HA firewall pair).

Internal testing included desktop and server build and configuration (Windows 7, Server 2008 and 2012 R2), patching at operating system, application and firmware levels, configuration of remote access solutions, build and configuration of laptops and mobile devices, internal security gateway configuration (two HA firewall pairs), and wireless network configuration.

Access was provided to around 120 devices across the entire estate, including desktops, servers, thin clients, iPads, and Blackberrys.

The report was required to detail individuals involved, communicate background, scope and context, accurately identify and explain vulnerabilities, and associate each vulnerability with a remedial solution, including short-term actions where appropriate.