Manage your risk
Test your capability or service
You need to check that your capability or service is secure.
Check your controls are working
It is not enough to put your controls in place. You need to check if your controls are working as you expect them to.
You need to check your controls when you:
- design them
- implement them
- make changes
- discover a new threat
Consider asking someone outside your team to assess your controls. You can do this as part of your security testing.
You can also use GOV.UK guidance on checking your controls (opens in a new tab).
Published August 2024