As technology evolves and work environments become more interconnected, traditional approaches to information security fall short. This case study explores how a collaborative effort led by the Sirius consortium, including key contributions from Nexor, addressed modern security challenges and delivered a ground breaking solution.

About the Client

Dstl, a leader in secure information systems, established CSIIS (Command, Control, Communications, Computing, Intelligence, Surveillance, and Reconnaissance Secure Information Infrastructure and Services). The initiative, supported by the Sirius consortium; a collective of over 40 organisations led by QinetiQ; aims to develop advanced solutions for secure information sharing across diverse environments.

The Information Security Challenge

In modern workplaces, sharing information securely has grown increasingly complex due to:

• The rise of Bring Your Own Device (BYOD) policies, where employees use personal devices.

• Reliance on external cloud-based applications beyond organisational control.

• The need for seamless collaboration with partner systems in coalition settings.

Traditional boundary-based security measures cannot provide the granularity needed to address these challenges, as they focus on system-level controls rather than securing individual pieces of information. This gap hinders organisations from achieving both security and flexibility.

Rethinking Security: The Information-Based Approach

The Sirius consortium proposed an innovative Information-Based Security paradigm, which focuses on:

• Applying security controls directly to data, regardless of the system or platform.

• Allowing information owners to define access policies, improving control and adaptability.

This paradigm represents a significant shift from conventional methods, addressing the demands of dynamic and decentralised environments.

Collaborative Innovation: The Sirius Consortium

The success of the project hinged on collaboration among leading organisations, including Airbus Defence and Space, BAES, HW Comms, Nexor, QinetiQ, and Thales. Despite being competitors in other contexts, the consortium members worked transparently towards a shared goal, leveraging their collective expertise to tackle complex technical challenges.

Nexor’s Contribution to the Solution

As a key member of the Sirius consortium, Nexor brought extensive experience in secure network connectivity and cybersecurity best practices. Nexor:

• Played a central role in developing the scoping study report.

• Presented the findings at the UK Information Assurance Advisory Council Symposium in 2014, earning recognition for excellence in research.

• Provided independent technical reviews to ensure the solution’s robustness and reliability.

Real-World Impact of the Solution

This research delivers an adaptable framework for secure information sharing, with applications in industries like:

• Defence: Enabling coalition forces to collaborate securely and efficiently.

• Finance: Protecting sensitive financial data while ensuring operational agility.

• Commerce: Supporting organisations in adopting innovative cloud-based solutions without compromising security.

By empowering organisations to operate flexibly and securely, the solution ensures they can meet the demands of modern work environments.

Enabling Modern Workplaces with Secure Sharing

The new paradigm supports organisations in adopting advanced technologies and working methods, such as remote collaboration and cross-organisation partnerships, without being constrained by legacy security models. This approach fosters efficiency, responsiveness, and innovation.

Securing the Future: Lessons and Next Steps

The project demonstrates the power of collaboration and innovative thinking in addressing modern security challenges. Key takeaways include:

• The importance of moving beyond system-level security to data-centric approaches.

• The value of cross-industry collaboration in tackling complex problems.

Future efforts will focus on refining and implementing these solutions across industries, ensuring organisations can fully embrace the benefits of secure and flexible information sharing.