LOADING…
Platform  /  Datasheets  /  Secure by Design Control Plane
Secure by Design regime

Secure by Design,under control.

The first purpose-built control plane for the UK Government Secure by Design regime - from intake to SRO sign-off. One live record per project, evidence-mapped and audit-ready, in your own sovereign tenant.

All datasheets
10 principlesEvidence -backedHIGH to comply
HIGH

Only a HIGH confidence profile - proven with evidence, not asserted - demonstrates compliance with the Secure by Design mandate’s ten principles. Run that security-assurance regime on an emailed spreadsheet spread across ten systems and you cannot prove your security: to an auditor, an accreditor, or yourself.

The challenge

A mandate run on an emailed spreadsheet.

The problem
Secure by Design tracked in the government’s own Excel file
The truth lives in ten places - SharePoint, Teams, Jira, inboxes
HIGH confidence asserted, never actually proven
The spend-control pack built by hand the night before the gate
The control plane
One live Secure by Design record per project
Evidence mapped to every activity, carried across phases
Gap-to-HIGH visible at all times
The governance pack generated from the live record in one click
What it does

Not features - outcomes.

Everything the regime needs in one place: policy model, lifecycle, evidence, workflow, confidence calculator, pack generator and audit record.

Tracker engine

One live source of truth for Secure by Design confidence, per project and across the portfolio.

Evidence mapping

Every answer linked to the evidence behind it - graded, reusable and carried across phases.

Gap tracker

A missing-information panel and a gap-to-HIGH list, so nothing surfaces late at the gate.

RASCI ownership

A named owner on every activity - completion is somebody’s job, not nobody’s.

SRO sign-off

Executives sign off against a live, auditable record they can actually defend.

Governance pack

The spend-control pack builds itself from the live record - no midnight assembly.

At a glance

The numbers that matter.

10
mandatory principles
2025
deadlines passed
1
live record per project
HIGH
the bar you must prove
How it works

Intake to sign-off, then continuous.

01
Intake
Short onboarding
Adoption is the point
02
Assess
Confidence re-scores
As evidence lands
03
Evidence
Mapped to activities
Carried across phases
04
Review
Quality states
A draft is not proof
05
Gate
SRO sign-off
Pack generated
06
Continuous
Live profile
Never out of date
Where it fits

Built for the regime.

Gov Secure by DesignAll 10 mandatory principles, native
Spend controlsEvidence the HIGH profile that unlocks approval
NCSC CAF v3.2Secure configuration and assurance outcomes
ISO 27001:2022A.8.25-A.8.28 secure development
NIST SSDFSecure software development practices
OFFICIAL-SENSITIVEClassification handling and RBAC from day one
What you get

Proof, not assertion.

Portfolio control plane

Every project, its phase and its confidence on one screen - CISO, SRO and DPO lenses.

One-click governance pack

The spend-control pack assembled from the live record, on demand.

Append-only audit record

Every answer, N/A justification, sign-off and export logged and defensible.

Next step

Your next gate should not depend on a spreadsheet.

A 30-minute walkthrough on your projects - live gap-to-HIGH dashboards, no slides.

All datasheets →