A multi-year retained security advisory relationship spanning PSPF agency security planning, personnel security review, and a post-COVID insider threat and work-from-home risk assessment.
THE CHALLENGE
A Commonwealth agency with significant data custodianship responsibilities needed ongoing, expert-level security advisory support to remain compliant with successive iterations of the PSPF across a rapidly shifting threat landscape. From initial agency security planning, through a personnel security review, to a post-COVID insider threat assessment, the agency required a trusted partner who understood both its data custodianship obligations and the evolving PSPF requirements, including changes to personnel security vetting standards and APS guidance on remote work.
OUR APPROACH
Agilient maintained a sustained, responsive advisory relationship with the agency across eight years. In the first engagement, Agilient delivered a full Protective Security Risk Assessment (PSRA), an Agency Security Plan, and updated Site Security Plans, all aligned with PSPF. Agilient then conducted a Personnel Security Review benchmarked against the revised PSPF PERSEC requirements. Later, Agilient returned to assess insider threat and work-from-home risks introduced by COVID-19 operational changes, and to conduct a gap analysis against personnel security vetting requirements, APS conditions of service and APS remote work guidance. Each engagement was built directly on the last.
THE OUTCOME
- Delivered three distinct security engagements over eight years, each directly responsive to a new regulatory or operational trigger
- Produced a comprehensive PSRA, Agency Security Plan, and Site Security Plans aligned to the PSPF.
- Delivered a post-COVID insider threat and work-from-home risk assessment with a clear gap analysis against current personnel security and APS standards
Related services: protective security and PSPF consulting, security risk assessment consultants. Sector experience: government security consultant. To discuss a similar project, contact Agilient.