What is Code of Connection (CoCo)? - Definition from WhatIs.com


Code of Connection (CoCo)

Part of the Compliance glossary:

The Code of Connection (CoCo) is a mandatory set of requirements that must be demonstrated before local authorities in England and Wales can connect to the Government Secure Intranet (GSI).

CoCo, which has been in effect since September 2009, requires local authorities (LAs) to provide a compliance statement that documents how their information technology (IT) meets baseline requirements set up by the central government. The requirements are adopted from ISO 27001, which specifies requirements for an information security management system (ISMS). The parameters for risk can be divided into four broad categories: technical, procedural, physical and human.

ISO27001 was published by the International Organization for Standardization (ISO). It does not mandate specific actions, but includes suggestions for documentation, internal audits, continual improvement, and corrective and preventive action.

CoCo compliance is assessed annually and a local authority can be audited at any time. To assist local authorities with demonstrating compliance, a government-to-government (g2g) program called Government Connect (GC) provides free support.

This was last updated in September 2016
Posted by: Margaret Rouse

Related Terms


  • access recertification

    - Access recertification is an information technology (IT) control that involves auditing user access rights to determine if they are correct and adhere to the organization’s internal policies and co... (WhatIs.com)

  • access governance (AG)

    - Access governance (AG) is an aspect of information technology (IT) security management that seeks to reduce the risks associated with excessive access rights, inactive users and orphan accounts. (WhatIs.com)

  • Amazon Simple Storage Service (Amazon S3)

    - Amazon Simple Storage Service (Amazon S3) is an object storage service from Amazon Web Services that enables developers to back up and archive data. (searchAWS.com)


  • Compliance

    - Terms related to compliance, including regulatory definitions and words and phrases about governance and mitigating IT risk.

  • Internet applications

    - This WhatIs.com glossary contains terms related to Internet applications, including definitions about Software as a Service (SaaS) delivery models and words and phrases about web sites, e-commerce ...

Ask a Question. Find an Answer.Powered by ITKnowledgeExchange.com

Ask An IT Question

Get answers from your peers on your most technical challenges

Ask Question

Tech TalkComment



    Contribute to the conversation

    All fields are required. Comments will appear at the bottom of the article.