Private Sector

SPF Compliance in the Private Sector

If you are a Government Department or Agency, or handle HMG physical or information assets, even as a service provider or private sector supplier, you must comply with guidance in the SPF.

To demonstrate compliance, your Departmental Security Officer (or equivalent) must:

  • Conduct an initial self assessment using external security specialists or internal audit functions;
  • Submit annual security returns to the Cabinet Office;
  • Carry out regular internal audits using external security specialists or internal audit functions.

For service providers and private sector suppliers, the Department or Agency you provide services to will determine what areas of the SPF apply to you.

To help you with these requirements, Advent IM can carry out a high level Compliance Review of your organisation against the mandatory requirements (MRs) within SPF. Our service includes:

  • A high-level assessment of your current compliance status against all 70 MRs;
  • A detailed report including current status and remediation requirements if necessary;
  • General guidance on remediation requirements.
  • If you are already compliant, we can provide a high-level an update review to provide assurance for annual security returns.

We work with many organisations providing guidance on all aspects of security best practice following SPF, Manual of Protective Security (MPS), Counter-Terrorist Security Policy Manual (CTSPM), ISO 27001 and BS 25999. We are therefore ideally placed to work with your organisation to ensure compliance with the SPF.

Why Choose Advent IM?