What is CESG Good Practice Guides (GPG)? - Definition from WhatIs.com

Definition

CESG Good Practice Guides (GPG)

Part of the Security management glossary:

Good Practice Guides (GPG) are documents created by the CESG to help organisations manage risk effectively. CESG is the UK government's national technical authority for information assurance (IA).

CESG Good Practice Guides (GPGs) are supplemented by CESG Developers’ Notes, Cryptographic Standards and Implementation Manuals. Guides may be accessed only by suppliers working with a government department that sponsors the supplier to access one or more of the guides. 

The GPGs were originally written as a set of 35 guides. Some are no longer available because they have become obsolete. Others, which address currently critical topics, are offered on the CESG website.

Some of the Good Practice Guides that have received recent attention are:

  • GPG number 6, which provides guidance on managing the risks of offshoring.
  • GPG number 13, which describes a framework for addressing risks to government systems and includes protective monitoring controls for collecting information and communications technology (ICT) log information and configuring ICT logs in order to produce an audit trail.
  • GPG number 8, which focuses on protecting external connections to the Internet. 
  • GPG number 10, which addresses the risks of remote working.
  • GPG number 12, which provides guidance on managing the security risks of virtualisation for data separation.
  • GPG number 13 forms part of the Code of Connection (CoCo), a prescriptive technical standard that public-sector organizations must meet in order to gain access to the UK Government Connect Secure Extranet.
  • GPG number 18, which describes principles for security forensics.

This was last updated in May 2012
Contributor(s): Tracey Caldwell
Posted by: Margaret Rouse

Related Terms

Definitions

  • Wi-Fi Protected Access (WPA)

    - Wi-Fi Protected Access, or WPA, is a security standard for Wi-Fi wireless internet connections that gave way to WPA2 in 2004. WPA2 uses the Counter Mode Cipher Block Chaining Message Authentication... (SearchMobileComputing.com)

  • Certified Information Systems Auditor (CISA)

    - Certified Information Systems Auditor is a credential that demonstrates an IT professional's ability to assess risk and institute technology controls. The certification is intended for IT auditors,... (SearchSecurity.com)

  • data shadow

    - A data shadow is the collective body of data that is automatically generated and recorded as we go about our lives rather than intentionally created. Sources include sensors and IP surveillance, me... (WhatIs.com)

Glossaries

  • Security management

    - Terms related to security management, including definitions about intrusion detection systems (IDS) and words and phrases about asset management, security policies, security monitoring, authorizati...

  • Internet applications

    - This WhatIs.com glossary contains terms related to Internet applications, including definitions about Software as a Service (SaaS) delivery models and words and phrases about web sites, e-commerce ...

Ask a Question About CESG Good Practice Guides (GPG)Powered by ITKnowledgeExchange.com

Get answers from your peers on your most technical challenges

Tech TalkComment

Share
Comments

    Results

    Contribute to the conversation

    All fields are required. Comments will appear at the bottom of the article.