Working in Partnership with Organisations and IT Professionals to Help You Deliver
Your Goals

The primary goal was to integrate Secure by Design principles across all new digital projects within the department, ensuring alignment with GDS requirements. The team’s role was to not only raise awareness across departments but also to communicate the practical implications of the shift and support operational readiness.

The team focused on internal engagement, communication, and enabling adoption across the organisation. While the Secure by Design framework itself originated from GDS, the department was responsible for applying it to its internal processes and procurement activities.

The team of four engaged key stakeholders across the organisation. Their responsibilities included:

• Delivering regular workshops and working groups with departments
• Publishing internal communications and updates through digital channels
• Supporting business units through the early implementation phase
• Gathering lessons learned from pilot projects and ongoing use

• Operational Readiness Achieved: All new digital initiatives launched after May 2025 are now aligned with Secure by Design standards, meeting GDS compliance requirements and fostering a culture of proactive security. 

• Widespread Organisational Engagement: Over a dozen departments participated in workshops and working groups, leading to a demonstrable uplift in awareness and understanding of Secure by Design principles across the department. 

• Smooth Transition and Early Wins: The initial three-month support period enabled real-time feedback loops, resolution of early adoption issues, and refinement of internal processes, setting the foundation for long-term sustainability. 

• Knowledge Transfer and Capability Building: The embedded delivery team’s structured approach helped upskill internal staff, reduce reliance on external support, and ensure Secure by Design becomes a permanent part of the organisation’s project delivery ethos. 

• Scalable Implementation Model: Lessons learned from the pilot phase were documented and shared internally, providing a blueprint for future projects and enabling scalable application across broader government services. 

By using Certes to embed Secure by Design as a foundational approach, the trading fund governmental department has not only met its strategic cybersecurity obligations but has also positioned itself as a forward-thinking leader in secure digital transformation within the UK government.