Cipher

The Capability

Cipher will provide protection for all of MOD's sensitive information and communications both at home and overseas. The project encapsulates work to renew the MOD cryptographic inventory and key management systems. Cipher will replace a number of current systems, in particular the General Key Management System.

There are three business drivers for Cipher. The first is to overcome the obsolescence of existing equipment and key management systems. The second is to enable network agility and interoperability with our Allies. The final driver is to improve security and efficiency in the delivery of cryptographic services.

Cipher will be delivered in three increments. Increment 1 provides an Enduring Operational Capability, Increment 2 replaces all legacy services and Increment 3 provides the additional services required to satisfy new requirements.

Overview of Cost, Time and Performance

Approved

Forecast/Actual

Variation

IY Variation

Assessment Phase

£19m

***

***

***

The Assessment Phase

Cipher is a combination of two earlier MOD projects, the Future Crypto Programme (delivering the hardware) and Interoperable Electronic Key Distribution (the complementary system to deliver keying material, and other supporting configuration and management data).

Following Initial Gate approval, two consortia were down- selected and awarded Assessment Phase contracts in November 2008 to evaluate potential options, develop solutions, undertake demonstration programmes and deliver costed delivery phase proposals.

Recognising the importance of Cipher and its potential use across Government, the Government Communication Headquarters has engaged proactively, providing guidance on

standards to ensure that the resulting solutions and services can be readily adopted by other government departments and partners across Government and be interoperable with our Allies.

A Review took place in February 2011. The outcome was to proceed, but with caveats noting that all outstanding actions from the Performance Delivery Improvement Treatment Phase have been rolled up into the recommendations of this review. Additional funding required for the delivery of the extended Assessment Phase has been identified, and sufficient staff levels have been agreed.