Industry Security Notice (ISN) - GOV.UK

Industry Security Notice (ISN) - GOV.UK

Play all audios:

Loading...

Guidance Industry Security Notice (ISN) A list of Industry Security Notices (ISNs) for defence personnel to highlight security changes or information.


From: Ministry of Defence Published 7 September 2010 Last updated 28 May 2025 — See all updates Get emails about this page Documents Requirement for defence suppliers to report all security


incidents affecting defence related classified material to the UK MOD Ref: ISN 2025/03


PDF, 167 KB, 5 pages


Revocation of the requirement for registration of supplier services processing MOD information Ref: ISN 2025/02


PDF, 113 KB, 2 pages


Interim Process in support of DEFCON 658 Ref: ISN 2025/01


PDF, 145 KB, 3 pages


Security Aspects Letters and Contractual Security Conditions Ref: ISN 2024/09


PDF, 254 KB, 16 pages


Changes to the MOD Form 680 process to incorporate US ITAR Ref: ISN 2024/08


PDF, 130 KB, 3 pages


UK-Australia arrangements for the handling and transmission of defence classified information Ref: ISN 2024/07


PDF, 144 KB, 4 pages


Cloud security control requirements for handling Official MOD Information Ref: ISN 2024/06


PDF, 138 KB, 5 pages


The National Security Act 2023 Ref: ISN 2024/03


PDF, 136 KB, 4 pages


The National Security Act 2023 - Annex A Ref: ISN 2024/03


PDF, 6.78 KB, 1 page


Subcontracting or collaborating on classified UK MOD programmes Ref: ISN 2024/05


PDF, 223 KB, 15 pages


Advance publication of DEFSTAN 05-138 (Issue 4) Ref: ISN 2024/02


PDF, 112 KB, 2 pages


Arrangements for the handling and transmission of classified and protected information concerning the Canadian Surface Combatant Frigate and UK Type 26 Frigate Ref: ISN 2023/17


PDF, 158 KB, 4 pages


Retention of documents following conclusion/termination of a UK MOD contract Ref: ISN 2023/15


PDF, 124 KB, 2 pages


Network Gas Supply Emergency (NGSE) Priority Listing Category B application for Defence Industry Ref: ISN 2023/14


PDF, 129 KB, 2 pages


Secure by Design requirements Ref: ISN 2023/09


PDF, 257 KB, 11 pages


Publication of revised Government Security Classifications policy Ref: ISN 2023/07


PDF, 201 KB, 2 pages


This file may not be suitable for users of assistive technology.


Request an accessible format. If you use assistive technology (such as a screen reader) and need a version of this document in a more accessible format, please email


[email protected]. Please tell us what format you need. It will help us if you say what assistive technology you use. Electronic movement of OFFICIAL-SENSITIVE MOD identifiable


information Ref: ISN 2023/04


PDF, 153 KB, 3 pages


Control and procedures for effective system patching and update Ref: ISN 2023/03


PDF, 180 KB, 4 pages


MOD Facility Security Clearance (FSC) policy and guidance for UK Defence contractors and MOD Contracting Authorities Ref: ISN 2023/02


PDF, 137 KB, 3 pages


Ongoing personnel security requirements for defence contractors – aftercare responsibilities Ref: ISN 2022/11


ODT, 34 KB


This file is in an OpenDocument format


Clarification on requirements for remote working with MOD material Ref: ISN 2022/10


PDF, 136 KB, 5 pages


National Security Vetting and social networking sites Ref: ISN 2022/06


PDF, 118 KB, 3 pages


Release of JSP 440 to industry Ref: ISN 2022/05


PDF, 117 KB, 2 pages


This file may not be suitable for users of assistive technology.


Request an accessible format. If you use assistive technology (such as a screen reader) and need a version of this document in a more accessible format, please email


[email protected]. Please tell us what format you need. It will help us if you say what assistive technology you use. Business continuity and resilience Ref: ISN 2022/01


PDF, 108 KB, 2 pages


Personnel security requirements – aftercare responsibilities related to providing accommodation to foreign nationals Ref: ISN 2022/02


PDF, 141 KB, 3 pages


Compliance with cyber security requirements from other nations Ref: ISN 2021/03


PDF, 150 KB, 4 pages


Exchange of classified information with the European Union Ref: ISN 2021/01


PDF, 171 KB, 3 pages


Canada/UK industrial security arrangement - arrangements for the handling and transmission of classified and protected information Ref: ISN 2020/05


PDF, 158 KB, 14 pages


Encryption of MODII at rest Ref: ISN 2020/07 replaces ISN 2020/03


HTML


DART: risk balance case process Ref: ISN 2018/01


PDF, 189 KB, 8 pages


Release of UK OFFICIAL-SENSITIVE and equivalent third party classified material to foreign non-government recipients Ref: ISN 2017/07


PDF, 153 KB, 4 pages


Procedure for UK contractors to obtain NATO personnel security clearances (supersedes ISN 2011/03) Ref: ISN 2014/03


PDF, 89 KB, 4 pages


Defence Trade Cooperation Treaty (DTCT) Ref: ISN 2012/01


PDF, 199 KB


Defence Trade Cooperation Treaty (DTCT): application form Ref: ISN 2012/01 Annex A


PDF, 838 KB, 11 pages


Advice on providing national security vetting (NSV) details to non-governmental organisations Ref: ISN 2011/06


PDF, 176 KB


Policy to protect portable information and communications technology (ICT) devices and media Ref: ISN 2010/04


PDF, 242 KB, 5 pages

Details


A Industry Security Notice (ISN) is an official document that tells people in industry about important instructions, guidance or other information relating to security.


Important notice ‘ISN 2014/04 Farnborough International Air Show 2014: exhibition clearances’ has been removed ‘ISN 2014/01: Government Security Classification Scheme’ updated April 2014


‘ISN 2011/05 Defence & Security Equipment International (DSEi) 2011: exhibition clearances’ has been removed ‘ISN 2011/02: incident report’ has been superseded by ‘2011/07: incident


reporting’ ‘ISN 2011/03: Nato personnel security clearances’ has been superseded by ‘2014/03: Procedure for UK contractors to obtain Nato personnel security clearances’ Updates to this page


Published 7 September 2010 Last updated 28 May 2025 + show all updates 28 May 2025 Updated: Requirement for defence suppliers to report all security incidents affecting defence related


classified material to the UK MOD.


19 May 2025 Added 'Revocation of the requirement for registration of supplier services processing MOD information'. Removed 'Arrangements for the registration and assurance of supplier


systems processing MOD information'.


2 April 2025 Added 'Interim Process in support of DEFCON 658'.


5 December 2024 Updated 'Requirement for defence suppliers to report all security incidents affecting defence-related classified material to the UK MOD'.


22 October 2024 Updated: ISN 2023/17, Arrangements for the handling and transmission of classified and protected information concerning the Canadian Surface Combatant Frigate and UK Type 26


Frigate, replacing ISN 2022/03. Removed: ISN 2023/16, Arrangements for the handling and transmission of defence classified information concerning the Australian Hunter Class Frigate and UK


Type 26 Frigate (superseded by new ISN); ISN 2021/04, Industry personnel security assurance (superseded by existing policy); and ISN 2018/06, Australia-UK security arrangement: arrangements


for the handling and transmission of defence classified information (superseded by new ISN).


24 September 2024 'Security Aspects Letters and Contractual Security Conditions' updated.


21 August 2024 Added: Security Aspects Letters and Contractual Security Conditions.


16 August 2024 Added: 'Changes to the MOD Form 680 process to incorporate US ITAR'.


14 June 2024 Added 'UK-Australia arrangements for the handling and transmission of Defence Classified Information'.


6 June 2024 Added 'Cloud security control requirements for handling Official MOD Information'.


30 April 2024 Updated 'Security Aspects Letters and Contractual Security Conditions'.


17 April 2024 Updated The National Security Act 2023 and annex A, Security Aspects Letters and Contractual Security Conditions and Subcontracting or Collaborating on Classified UK MOD


Programmes.


13 March 2024 Added: Advance publication of DEFSTAN 05-138 (Issue 4).


31 January 2024 Added: The National Security Act 2023.


14 December 2023 Added 'Arrangements for the Handling and Transmission of Classified and Protected Information Concerning the Canadian Surface Combatant Frigate and UK Type 26 Frigate' and


'Arrangements for the Handling and Transmission of Defence Classified Information Concerning the Australian Hunter Class Frigate and UK Type 26 Frigate'.


14 December 2023 Removed 'Definition of MOD Identifiable Information', superseded by existing policy.


14 December 2023 Removed 'Definition of MOD Identifiable Information'.


29 November 2023 Added 'Retention of documents following conclusion/termination of a UK MOD contract'.


16 November 2023 Added 'Network Gas Supply Emergency (NGSE) Priority Listing Category B application for Defence Industry'.


15 November 2023 Updated 'Security Aspects Letters and Contractual Security Conditions'.


26 September 2023 Added: 'Requirement for defence contractors to report all security incidents affecting defence-related classified material to the MOD' ISN 2023/11, and 'Security Aspects


Letters and Contractual Security Conditions' ISN 2023/12.


1 August 2023 Removal of ISNs: 2022/07, superseded by 2023/05. 2020/06, superseded by existing policy. 2017/03, superseded by 2023/05. 2017/01, superseded by 2023/10. 2016/04, no longer


current. 2016/03, no longer current. 2015/04, no longer current. 2015/02, superseded by existing policy. 2015/01, superseded by existing policy. 2011/04, superseded by existing policy.


2011/01, superseded by 2022/06. 2010/03, superseded by existing policy. 2010/01, superseded by existing policy.


31 July 2023 Added: Arrangements for the registration and assurance of supplier systems processing MOD information.


21 July 2023 Updated 'Secure by Design Requirements'.


17 July 2023 Updated 'Security Aspects Letters and Contractual Security Conditions'.


30 June 2023 Added: 'Publication of revised Government Security Classifications Policy'


12 June 2023 Updated: Subcontracting or Collaborating on Classified UK MOD Programmes


15 March 2023 Added: 'Requirement for defence contractors to report all security incidents affecting defence-related classified material to the MOD', ISN 2023/05.


9 February 2023 Added: ISN 2023/04 Electronic Movement of OFFICIAL-SENSITIVE MOD Identifiable Information.


17 January 2023 'Control and procedures for effective system patching and update' updated.


5 January 2023 Added 'MOD Facility Security Clearance (FSC) policy and guidance for UK Defence contractors and MOD Contracting Authorities'.


4 January 2023 Updated ISN 2023/01 'Security Aspects Letters and Contractual Security Conditions'.


3 January 2023 'Security Aspects Letters and Contractual Security Conditions' added.


15 December 2022 Added 'Control and procedures for effective system patching and update'.


15 December 2022 'Ongoing Personnel Security Requirements for Defence Contractors – Aftercare Responsibilities' updated.


25 November 2022 'Ongoing personnel security requirements for defence contractors - aftercare responsibilities' updated.


18 November 2022 'Electronic Movement of OFFICIAL-SENSITIVE MOD Information' updated.


8 November 2022 Updated Electronic Movement of OFFICIAL-SENSITIVE MOD Information.


13 October 2022 Updated 'Clarification on requirements for remote working with MOD material'.


24 August 2022 Updated ISN Clarification on requirements for remote working with MOD material.


22 August 2022 Added: Industry Security Notice: Requirement to report security incidents affecting MOD material to the MOD. Removed: ISN 2011/07 (Incident Reporting).


18 August 2022 Removed as the content contained within all of these ISNs has been superseded by new policy and guidance: Update to the Defence Cyber Protection Partnership’s (DCPP) Risk


Assessment and Supplier Assurance Questionnaires, Introduction of Verify to the cyber security model and risk management guidance, Requirement to report security incidents affecting MOD


material to the MOD, Defence industry WARP CANNEL state notification, MOD basic grade messaging (email) address routing changes, MOD implementation of cyber essentials scheme, Government


security classification scheme: update, Government Security Classification Scheme, Government Security Classification Scheme (updated April 2014), Industry Supplier Guidance on DEFCON 658


(Flow - Down) – Amended.


1 August 2022 Added ISN Electronic Movement of OFFICIAL-SENSITIVE MOD Information and ISN Subcontracting or Collaborating on Classified UK MOD Programmes.


29 July 2022 Added Industry Security Notice: Defence Industry WARP Change of Ownership and Contact Details.


27 July 2022 Added National Security Vetting and Social Networking Sites ISN 2022/06.


30 June 2022 Addition of 'Release of JSP 440 to Industry'.


30 May 2022 Added: Secure by Design Requirements.


25 May 2022 Added ISN 2022/04: Design Requirements.


17 May 2022 Added: Arrangements for the Handling and Transmission of Classified and Protected Information Concerning the Canadian Surface Combatant Frigate and UK Type 26 Frigate.


31 March 2022 Added: Business Continuity and Resilience


24 March 2022 Added: Personnel Security Requirements – Aftercare Responsibilities Related to Providing Accommodation to Foreign Nationals.


21 January 2022 Added: Industry Supplier Guidance on DEFCON 658 (Flow - Down) – Amended.


28 July 2021 Addition of: Cyber Security Model – Interim Process in support of DEFCON 658.


4 June 2021 Addition of: Industry Personnel Security Assurance.


21 May 2021 Updated: ISN Encryption Of MODII At Rest.


29 April 2021 Added: Compliance with Cyber Security Requirements from Other Nations and Encryption Of MODII At Rest.


15 March 2021 Added: Advice on completing the 2021 United Kingdom Census.


11 February 2021 Added: Exchange of Classified Information with the European Union.


11 September 2020 Addition of: Canada/UK industrial security arrangement - Arrangements for the Handling and Transmission of Classified and Protected Information.


11 September 2020 Addition of: ISN Supplier Guidance on renewal of the Supplier Assurance Questionnaire under DEFCON 658 (Cyber).


29 June 2020 Addition of: List V - Industry Personnel Security Assurance.


24 June 2020 Addition of: Encryption Of MODII At Rest.


6 April 2020 Industry security notice regarding cyber security model and cyber essentials plus certification during COVID-19 isolation added.


27 March 2020 Added the Clarification on requirements for remote working with MOD material, ISN 2020/01.


13 November 2019 Added Update to the Defence Cyber Protection Partnership’s (DCPP) Risk Assessment and Supplier Assurance Questionnaires.


10 January 2019 Updated Australia-UK security arrangement: Arrangements for the handling and transmission of defence classified information which has been amended.


5 December 2018 Added: Australia-UK Security Arrangement: Arrangements for the Handling and Transmission of Defence Classified Information


1 November 2018 Added Ongoing personnel security requirements for defence contractors - Aftercare responsibilities.


18 October 2018 Updated Interpretation of US DFARS clauses in relation to CDI and cyber reporting.


16 October 2018 Added Interpretation of US DFARS Clauses in relation to CDI and Cyber Reporting (ISN 2018/04).


23 July 2018 Added Introduction of Verify to the Cyber Security Model and Risk Management Guidance.


26 April 2018 Added Encryption of removable storage media holding MOD data ISN.


15 January 2018 Added ISN 01/18 DART – Risk Balance Case Process.


27 December 2017 Added Release of UK OFFICIAL-SENSITIVE and equivalent third party classified material to foreign non-government recipients.


15 December 2017 Added Encryption of removable storage media holding MOD data.


12 October 2017 Added ISN 03/2017: Requirement to report security incidents affecting MOD material to the MOD


28 September 2017 Added Industry supplier guidance on DEFCON 658 (ISN 2017/06) that replaces an earlier version of the guide (ISN 2017/05).


27 September 2017 Added Industry supplier guidance on DEFCON 658 (flow-down) ISN 2017/05.


1 August 2017 Added industry supplier guidance on DEFCON 658 (cyber).


28 April 2017 Added ISN 2017/02 Defence industry WARP CANNEL state notification


23 February 2017 Added MOD ICT security accreditation and the defence assurance risk tool (DART).


16 February 2017 Updated: Definition of MOD Identifiable Information


30 November 2016 Added: Definition of MOD Identifiable Information


23 August 2016 Added ISN 2016/04 key email address changes for the Ministry of Defence


23 June 2016 Added new ISN 2016/03.


26 May 2016 Added new Industry security notice ISN 2016/02.


25 January 2016 Added ISN 2016/01.


9 October 2015 Added ISN 2015/05.


21 September 2015 Added new ISN 2015/04.


11 May 2015 Removed out of date notices.


23 March 2015 Added ISN 2015/03: Guidance on Security Technology at OFFICIAL.


16 March 2015 Added ISN 2015/02: Introduction of the electronic private venture security grading and exhibition clearance processes on SPIRE.


3 February 2015 Replaced ISN 2015-01 Marking of MOD Commercial Information with amended version.


27 January 2015 Added ISN 2015/01: Marking of MOD commercial information.


16 December 2014 Added new ISN 2014/06


30 October 2014 Added ISN 2014/05.


21 May 2014 Added ISN 2014/04: Farnborough International Air Show 2014: exhibition clearances


4 April 2014 Replaced Government Security Classification Scheme with the updated April 2014 file.


18 March 2014 Removed 2011/03 which was superseded by 2014/03. Added 2014/02 and 2014/03.


19 February 2014 Added ISN 2014/01: Government Security Classification Scheme


7 September 2010 First published.


Sign up for emails or print this page Get emails about this page Print this page Related content Cyber security for defence suppliers (Def Stan 05-138) Defence condition 658: cyber


(flow-down) Industry Security Notices (ISN) Cyber Implementation Plan (CIP) Defence Cyber Protection Partnership Collection Industry Security Notices (ISN) Explore the topic Military


equipment, logistics and technology Cyber security National security