Codes of Connection (CoCo) Consultancy

What are Codes of Connection (CoCo)?

A code of connection (CoCo), are used when a formally accredited information system wishes to connect to another “unknown” information system. There are a variety of reasons for wishing to connect information systems together, but they usually involve a requirement to exchange data and information.

Please email us or telephone + 44 (0)845 070 1750 and talk to us about how our CoCo Consultancy service might work for you!

How does CoCo Work?

A code of connection works by the accredited system stipulating a baseline set of controls to be implemented, or commented on, by the connecting organisation. These controls are usually selected from best practice (ISO 27002) or - more usually - various HMG Information Assurance requirements.

The controls can broadly be broken down into the following types:-

1. Technical – Such as implementing an assured barrier between the two organisations or performing an IT Health Check;

2. Procedural – Such as ensuring that all security incidents are reported to the partner organisation.

3. Physical – Such as ensuring that physical security of assets is adequate.

4. People – Such as ensuring that all staff involved have appropriate background and identity checks or appropriate education, training and awareness.

When the code of connection is completed, the accredited information system will take a view as to what threat the connecting organisation poses. If they believe that the risks are acceptable, they will authorise the connection.

How stringent a code of connection is depends on the level of assurance that is required between the participant organisations.

What Specific Codes of Connection (CoCo) services are we likely to require?

• Connecting to N3 –
  N3 is the new, integrated network for the NHS, a combination of broadband connections and network services that is intended to link all NHS sites in England and Wales. Our N3 Consultancy service will help you to comply with NHS security policies.
  
  
• Gambling Commission –
  Our experienced consultants can help you map a route to compliance with the technical requirements of the Gambling Commission.
  
  
• GSI,  xGSI, GSX, GCSX, GSE.
  
  Please email us or telephone + 44 (0)845 070 1750 and talk to us about how our CoCo Consultancy service might work for you!