Frequently Asked Questions
Frequently Asked Questions
In this section, we have grouped together questions that existing and potential customers and suppliers regularly ask us. If you cannot find the information you need, please telephone our Customer Service Desk on 0345 410 2222 or e-mail: info@buyingsolutions.gsi.gov.uk
What is the GSi
The GSi (Government Secure Intranet) is the primary IP intranet for the UK public sector and the UK's National Network for EU public sector IP networking. It provides multi-media connectivity up to confidential level, facilitating smarter working across the UK public sector and their suppliers.
The GSi supports a family of communities offering them resilient fully managed secure services including the following:
- Internet access
- Secure Email
- Intranet publishing and browsing
- Pro-active heuristic Messagelabs anti-virus service
- Anti-spam and content filtering
- Managed firewall services
- Remote access
- Hosting including ancillary application development services - Shared Applications Managed Service (SAMS) including the Knowledge Network (KN) platform
- Customer to Customer IP connections.
- Supporting consultancy services
Most public sector organisations are either direct GSi Customers or are indirectly connected to the GSi via sector specific networks.
The GSi (please note - mixed case) is the umbrella name for the entire procurement, commercial and contractual arrangement that is the Government Secure Intranet. Within this arrangement there are currently five communities (GSI, GSX, xGSI, GCSx and GSE). GSi customers must belong to one or more of these communities, according to the nature of the information the organisation typically handles. Conditions of membership for each community are published in the GSi Code of Connection, and associated Annex Bs for each community.
Who can join the GSi?
The GSi is open to UK Public Sector organisations such as UK and National Government Departments and Agencies, Non-Departmental Public Bodies and Local Authorities and private sector organisations as required, all of whom are subject to meeting the criteria set out in the GSi Code of Connection and associated Annex B. Non-public sector bodies must obtain a sponsorship form signed by a public sector organisation who is an existing GSi customer to demonstrate a business requirement for secure connection.
Does the GSi have connections to other networks?
The GSi is connected to the following secure networks
- Police National Network (PNN / CJX)
- NHS Connecting for Health network (N3)
- Criminal Justice Secure Mail (CJSM)
- EU Council of Ministers (ECM)
- Ministry of Defence (MoD)
There is also currently a direct connection to the Trans-European Service for Telematics between Administrations (TESTA II). However we do not recommend TESTA is used to transmit any sensitive or protectively marked information. Any transmission of such information is at your own Departments risk.
GSi Customers are also connected to the public internet through a secure central gateway.
What is the GSI Community within the GSi?
The GSI is provided for organisations that need to regularly communicate at RESTRICTED level. Organisations wishing to be part of the GSI community must adhere to the Manual of Protective Security (MPS). This part of the network is at Confidentiality Impact Level 3.
What is the xGSI community within the GSi?
The xGSI allows organisations to securely share information classified at CONFIDENTIAL level. Organisations wishing to be part of the xGSI community must adhere to the MPS. This part of the network is at Confidentiality Impact Level 4. Not all of the services listed above are available to the xGSI community because of security constraints.
What is the GSX community within the GSi?
This community is for organisations that occasionally need to receive and securely store and process information at the protective marking of up to RESTRICTED. This community is for organisations whose connecting system and subsequent security management process and procedures adhere to commercial best practice such as the Information Security Policy Documentation, the Security Framework documents, and the e-Government Strategy Framework (equivalent to Confidentiality Impact Level 2).
What is the GCSX community within the GSi?
Similar to GSX this community is for organisations whose connecting system and subsequent security management processes and procedures adhere to commercial best practice (equivalent to Confidentiality, Integrity or Availability Impact Level 2). This grouping is for organisations that occasionally need to receive and securely store and process information at the protective marking of up to RESTRICTED. These are typically English and Welsh Local Authorities under the Department for Communities and Local Government (DCLG) led Government Connect Programme. Customers wishing to join the GCSx community should contact Government Connect (http://www.govconnect.gov.uk/).
What is the GSE community within the GSi?
The GSE is available to private sector organisations with whom public sector organisations need to deal electronically with through the secure mechanism of the GSi, at either RESTRICTED or CONFIDENTIAL level. This enables companies to provide services to public sector organisations, joint projects, and the necessary sharing of sensitive information with private sector partners. GSE customers are required to adhere to the security procedures set out in the Code of Connection and must be MPS compliant. The connection is normally directly to the particular public organisation(s) rather than a general connection to the GSi. Useful information for these private sector organisations is to be found in the e-Government Strategy Framework. GSE customers can choose to join at Confidentiality Impact Level 2, 3 or 4.
Where can I download GSi documentation?
Non-customers can download the following documentation from the Connecting to GSi web page on this web site:
- GSi Information Notice: Planning Your Organisation's Application for Connection to the GSi
- GSi Terms & Conditions
- Code of Connection
- GSE Sponsorship Form
Existing GSi customers may download all GSi documentation directly from the http://www.gsi.gov.uk/, as they contain RESTRICTED information and are not available on the public Internet.
What services are available under the GSi framework?
The following services are currently provided although we are always looking to increase our provision of secure solutions.
- Internet access
- Secure Email
- Intranet publishing and browsing
- Pro-active heuristic Messagelabs anti-virus service
- Anti-spam and content filtering
- Managed firewall services
- Remote access
- Hosting including ancillary application development services - Shared Applications Managed Service (SAMS) including the Knowledge Network (KN) platform
- Customer to Customer IP connections.
- Supporting consultancy services
How much does the GSi cost?
Your organisation needs to sign up to the GSi Terms & Conditions (previously Code of Practice) and return that to the GSi Team at Buying Solutions before we can provide commercial information. On receipt of this, you will be given access to the GSi eRoS. Please call Buying Solutions on 0345 410 2222 or Cable & Wireless on 0800 316 2045 if you would like to discuss GSi services, or arrange a meeting.
What is the eRoS?
The eRoS is the Cable & Wireless GSi Electronic Register of Services. It is a catalogue of services specific to the GSi. The Register of Services specifies the Services available to CUSTOMERS under Service Contracts, subject to Service Usage Rules for the Specific Services.
How do I Access the Cable & Wireless Electronic Register of Services?
Your organisation needs to sign up to the GSi Terms & Conditions (previously Code of Practice) and return to the GSi Team at Buying Solutions before we can provide commercial information. On receipt of this you will be given access to the GSi eRoS. Please call Buying Solutions on 0345 410 2222 or Cable & Wireless on 0800 316 2045 if you would like to discuss GSi services, or arrange a meeting.Existing GSi customers can use the following link - http://gsi-direct.energis.com/
Can Private Sector Organisations Join the GSi?
Yes - Private sector organisations can join the GSE community in order to trade or communicate securely with GSi connected organisations. A sponsorship form must be completed by the sponsoring department and included when returning the GSi Terms and Conditions. GSE organisations must also demonstrate compliance with the GSi Code of Connection, and the applicable annexes for the particular GSi community they wish to communicate with.See also ˜What is the GSE?'
What is GSi Authorisation, and who is responsible for it?
Organisations wishing to join the GSi must comply with the GSi Code of Connection and submit certain items of supporting documentation. This process is termed 'Authorisation'. Buying Solutions is the body responsible for authorising GSi applications, with technical security support from CESG.
Where can I seek advice on the GSi Code of Connection?
Specific questions on the content of the GSi Code of Connection and associated documents can be posted to Buying Solutions by email to gsi@ogcbs.gsi.gov.uk. General HMG Information Assurance advice can be obtained through a number of routes, for example:
- GSi Framework Agreement,
- RoS: F600 - Consultancy Service
- CESG's CLAS scheme
- CESG IA bookstore (only available to GSi customers)
- Security Matters website including MPS information (only available to GSi customers)
Who is responsible for contract management?
Buying Solutions is the commercial and contractual authority for the GSi. The Buying Solutions GSi team manage the service provider (currently Cable & Wireless).
What do the GSi Terms & Conditions (Code of Practice) mean?
For historic, contractual and security reasons, the GSi Framework has a set of Terms & Conditions.
The GSi Terms & Conditions represent the administrative agreement between each GSi Customer organisation and the GSi central management structure (being represented by Buying Solutions). It sets out the roles of the Customer and Buying Solutions, and is a preliminary to Customers ordering GSi services from Cable&Wireless.
While drafted to read a little like a contract, the GSi Terms & Conditions do not represent a contract, and do not obligate the organisation to purchase any services.
There is no cost incurred by signing the GSi Terms & Conditions. Once signed, submitted and approved by the GSi Team on behalf of the GSi Management Board, you will be sent details of how to access the GSi electronic Register of Services (eRoS), detailing the options and charges for the GSi services you may order from Cable&Wireless.
Your IS/IT partner will need to know about the GSi T&C's, but the staff management roles regarding end users must remain with the customer; so you, as the customer, must sign it even if your partner manages the GSi connection.
Please be aware that if you later decide to sign a GSi Service Contract with Cable&Wireless, the GSi Terms & Condition's Appendix 4 ˜Customer's Responsibilities' become part of that GSi Service Contract.
Buying Solutions has already selected the GSi contractor, terms and conditions have already been negotiated and charges are centrally defined and are not subject to best commercial bilateral negotiation by your IS/IT partner; so it will normally be more appropriate for the public contracting authority to retain the procurement role and itself later order GSi services from Cable and Wireless.
However it may occasionally be appropriate for the IS/IT partner to sign too; e.g. if the GSi connection is to be delivered to the premises of the IS/IT partner, if the partner will be placing orders for GSi services, or if the IS/IT partner will be absorbing the cost of GSi within some wider overall tariff.
Who supplies the network?
Cable & Wireless now provide the GSi Service. Customer GSi Service Contracts with Energis Communications Limited are guaranteed by C&W (UK) Ltd and C&W plc. Further information on Cable & Wireless can be found on their website: http://portal.cw.com/wps/portal/internet
How is the GSi funded?
GSi customer's pay Cable & Wireless directly for services provided. DCLG is starter funding English LA's under the Government Connect programme for the first year only. Customer organisations contract with Cable & Wireless under the terms of a standard Service Contract (as laid out in the Framework), and will otherwise be invoiced directly by C&W.
What is the Buying Solutions GSi Team?
The GSi Team is Norwich based and exists to ensure smooth end-to-end GSi service to customers. The team manages the GSi framework contract and service with Cable&Wireless, works with CESG, CPNI and CSIA regarding the central accreditation of the GSi infrastructure; and co-ordinates with CESG, and for English LA's with the Gov Connect Management Body, the authorisation of connecting customers, deals with connection queries, and acts as an escalation point for any customer problems.
What is the Managed Telecoms Executive (MTE)?
The Managed Telecoms Executive (MTE) is a formal standing body with ultimate executive responsibility for the GSi and Mts (Managed Telephony Service, also managed by Buying Solutions.) The Executive supports and empowers the rest of the governance structure and gives it authority to act. The MTE is chaired by the MT SRO (Senior Responsible Officer) and reports to the responsible Minister.
The Board of Buying Solutions is responsible for the commercial delivery of the Mts and GSi services, and the procurement and delivery of their successors.
How is the Buying Solutions GSi Team funded?
The GSi Team and their CESG technical security support are funded by levy on Customer organisations collected by C&W. This fund is designed to cover only the direct and indirect costs of the teams, which are non-profit making.
What is the GSi Code of Connection?
The GSi Code of Connection (CoCo) is a statement of the security standards organisations must meet in order to connect and remain connected to the GSi. The primary purpose of the CoCo is to safeguard the operation of the GSi central infrastructure and the organisations that are connected to it.
Organisations wishing to join the GSi must prove that they have taken adequate steps to protect the GSi infrastructure and the information carried over it, which in turn protects other GSi connected organisations.
The CoCo is actually a document set comprising the main GSi Code of Connection, common for all, and a set of supporting annexes, one for each community. GSE customers will use the annexes of the same community as the organisation they wish to connect to.
Where can I seek advice on the GSi Code of Connection?
Specific questions on the content of the GSi Code of Connection and associated documents can be posted to Buying Solutions by email to mailto:gsi@buyingsolutions.gsi.gov.uk. General HMG Information Assurance advice can be obtained through a number of routes, for example:
- GSi Framework Agreement,
- RoS: F600 - Consultancy Service
- CESG's CLAS scheme
- CESG IA bookstore (only available to GSi customers)
- Security Matters website including MPS information (only available to GSi customers)
Does the GSi scan communications?
All email sent from the Internet to GSi and from GSi to the Internet is scanned by an anti-virus service as contracted with Cable & Wireless. Other monitoring is undertaken as appropriate.
Commonly Requested Documents
Non-GSi customers who are interested in joining can download the following documents from the Connecting to GSi page on this web site:
- GSi Information Notice: Planning Your Organisation's Application for Connection to the GSi
- GSi Terms & Conditions
- Code of Connection
- GSE Sponsorship Form
Existing GSi customers will be able to find GSi documents, such as the Code of Connection and Annex B's from http://www.gsi.gov.uk/authorisation.htm. The GSi Electronic Register of Services (which lists the various services available on the GSi) can be downloaded accessed via http://gsi-direct.energis.com/.