Change description : 2025-10-03 11:30:00: Added ‘Implementation of CSM (v4) and revocation of Interim measures in support of DEFCON 658’. [Guidance and regulation]
This file may not be suitable for users of assistive technology.
Request an accessible format.
If you use assistive technology (such as a screen reader) and need a version of this document in a more accessible format, please email ddc-modinternet@mod.gov.uk. Please tell us what format you need. It will help us if you say what assistive technology you use.
This file may not be suitable for users of assistive technology.
Request an accessible format.
If you use assistive technology (such as a screen reader) and need a version of this document in a more accessible format, please email ddc-modinternet@mod.gov.uk. Please tell us what format you need. It will help us if you say what assistive technology you use.
A Industry Security Notice (ISN) is an official document that tells people in industry about important instructions, guidance or other information relating to security.
Important notice
‘ISN 2014/04 Farnborough International Air Show 2014: exhibition clearances’ has been removed
‘ISN 2014/01: Government Security Classification Scheme’ updated April 2014
‘ISN 2011/05 Defence & Security Equipment International (DSEi) 2011: exhibition clearances’ has been removed
‘ISN 2011/02: incident report’ has been superseded by ‘2011/07: incident reporting’
‘ISN 2011/03: Nato personnel security clearances’ has been superseded by ‘2014/03: Procedure for UK contractors to obtain Nato personnel security clearances’
Removed: 'DART: risk balance case process'. The Defence Assurance Risk Tool (DART) Risk Balance Case (RBC) Process has been replaced by Secure by Design.
10 June 2025
'Requirement for defence suppliers to report all security incidents affecting defence related classified material to the UK MOD' updated.
28 May 2025
Updated: Requirement for defence suppliers to report all security incidents affecting defence related classified material to the UK MOD.
19 May 2025
Added 'Revocation of the requirement for registration of supplier services processing MOD information'. Removed 'Arrangements for the registration and assurance of supplier systems processing MOD information'.
2 April 2025
Added 'Interim Process in support of DEFCON 658'.
5 December 2024
Updated 'Requirement for defence suppliers to report all security incidents affecting defence-related classified material to the UK MOD'.
22 October 2024
Updated: ISN 2023/17, Arrangements for the handling and transmission of classified and protected information concerning the Canadian Surface Combatant Frigate and UK Type 26 Frigate, replacing ISN 2022/03. Removed: ISN 2023/16, Arrangements for the handling and transmission of defence classified information concerning the Australian Hunter Class Frigate and UK Type 26 Frigate (superseded by new ISN); ISN 2021/04, Industry personnel security assurance (superseded by existing policy); and ISN 2018/06, Australia-UK security arrangement: arrangements for the handling and transmission of defence classified information (superseded by new ISN).
24 September 2024
'Security Aspects Letters and Contractual Security Conditions' updated.
21 August 2024
Added: Security Aspects Letters and Contractual Security Conditions.
16 August 2024
Added: 'Changes to the MOD Form 680 process to incorporate US ITAR'.
14 June 2024
Added 'UK-Australia arrangements for the handling and transmission of Defence Classified Information'.
6 June 2024
Added 'Cloud security control requirements for handling Official MOD Information'.
30 April 2024
Updated 'Security Aspects Letters and Contractual Security Conditions'.
17 April 2024
Updated The National Security Act 2023 and annex A, Security Aspects Letters and Contractual Security Conditions and Subcontracting or Collaborating on Classified UK MOD Programmes.
13 March 2024
Added: Advance publication of DEFSTAN 05-138 (Issue 4).
31 January 2024
Added: The National Security Act 2023.
14 December 2023
Added 'Arrangements for the Handling and Transmission of Classified and Protected Information Concerning the Canadian Surface Combatant Frigate and UK Type 26 Frigate' and 'Arrangements for the Handling and Transmission of Defence Classified Information Concerning the Australian Hunter Class Frigate and UK Type 26 Frigate'.
14 December 2023
Removed 'Definition of MOD Identifiable Information', superseded by existing policy.
14 December 2023
Removed 'Definition of MOD Identifiable Information'.
29 November 2023
Added 'Retention of documents following conclusion/termination of a UK MOD contract'.
16 November 2023
Added 'Network Gas Supply Emergency (NGSE) Priority Listing Category B application for Defence Industry'.
15 November 2023
Updated 'Security Aspects Letters and Contractual Security Conditions'.
26 September 2023
Added: 'Requirement for defence contractors to report all security incidents affecting defence-related classified material to the MOD' ISN 2023/11, and 'Security Aspects Letters and Contractual Security Conditions' ISN 2023/12.
1 August 2023
Removal of ISNs: 2022/07, superseded by 2023/05. 2020/06, superseded by existing policy. 2017/03, superseded by 2023/05. 2017/01, superseded by 2023/10. 2016/04, no longer current. 2016/03, no longer current. 2015/04, no longer current. 2015/02, superseded by existing policy. 2015/01, superseded by existing policy. 2011/04, superseded by existing policy. 2011/01, superseded by 2022/06. 2010/03, superseded by existing policy. 2010/01, superseded by existing policy.
31 July 2023
Added: Arrangements for the registration and assurance of supplier systems processing MOD information.
21 July 2023
Updated 'Secure by Design Requirements'.
17 July 2023
Updated 'Security Aspects Letters and Contractual Security Conditions'.
30 June 2023
Added: 'Publication of revised Government Security Classifications Policy'
12 June 2023
Updated: Subcontracting or Collaborating on Classified UK MOD Programmes
15 March 2023
Added: 'Requirement for defence contractors to report all security incidents affecting defence-related classified material to the MOD', ISN 2023/05.
9 February 2023
Added: ISN 2023/04 Electronic Movement of OFFICIAL-SENSITIVE MOD Identifiable Information.
17 January 2023
'Control and procedures for effective system patching and update' updated.
5 January 2023
Added 'MOD Facility Security Clearance (FSC) policy and guidance for UK Defence contractors and MOD Contracting Authorities'.
4 January 2023
Updated ISN 2023/01 'Security Aspects Letters and Contractual Security Conditions'.
3 January 2023
'Security Aspects Letters and Contractual Security Conditions' added.
15 December 2022
Added 'Control and procedures for effective system patching and update'.
'Electronic Movement of OFFICIAL-SENSITIVE MOD Information' updated.
8 November 2022
Updated Electronic Movement of OFFICIAL-SENSITIVE MOD Information.
13 October 2022
Updated 'Clarification on requirements for remote working with MOD material'.
24 August 2022
Updated ISN Clarification on requirements for remote working with MOD material.
22 August 2022
Added: Industry Security Notice: Requirement to report security incidents affecting MOD material to the MOD. Removed: ISN 2011/07 (Incident Reporting).
18 August 2022
Removed as the content contained within all of these ISNs has been superseded by new policy and guidance:
Update to the Defence Cyber Protection Partnership’s (DCPP) Risk Assessment and Supplier Assurance Questionnaires,
Introduction of Verify to the cyber security model and risk management guidance,
Requirement to report security incidents affecting MOD material to the MOD,
Defence industry WARP CANNEL state notification,
MOD basic grade messaging (email) address routing changes,
MOD implementation of cyber essentials scheme,
Government security classification scheme: update,
Government Security Classification Scheme,
Government Security Classification Scheme (updated April 2014),
Industry Supplier Guidance on DEFCON 658 (Flow - Down) – Amended.
1 August 2022
Added ISN Electronic Movement of OFFICIAL-SENSITIVE MOD Information and ISN Subcontracting or Collaborating on Classified UK MOD Programmes.
29 July 2022
Added Industry Security Notice: Defence Industry WARP Change of Ownership and Contact Details.
27 July 2022
Added National Security Vetting and Social Networking Sites ISN 2022/06.
30 June 2022
Addition of 'Release of JSP 440 to Industry'.
30 May 2022
Added: Secure by Design Requirements.
25 May 2022
Added ISN 2022/04: Design Requirements.
17 May 2022
Added: Arrangements for the Handling and Transmission of Classified and Protected Information Concerning the Canadian Surface Combatant Frigate and UK Type 26 Frigate.
31 March 2022
Added: Business Continuity and Resilience
24 March 2022
Added: Personnel Security Requirements – Aftercare Responsibilities Related to Providing Accommodation to Foreign Nationals.
21 January 2022
Added: Industry Supplier Guidance on DEFCON 658 (Flow - Down) – Amended.
28 July 2021
Addition of: Cyber Security Model – Interim Process in support of DEFCON 658.
4 June 2021
Addition of: Industry Personnel Security Assurance.
21 May 2021
Updated: ISN Encryption Of MODII At Rest.
29 April 2021
Added: Compliance with Cyber Security Requirements from Other Nations and Encryption Of MODII At Rest.
15 March 2021
Added: Advice on completing the 2021 United Kingdom Census.
11 February 2021
Added: Exchange of Classified Information with the European Union.
11 September 2020
Addition of: Canada/UK industrial security arrangement - Arrangements for the Handling and Transmission of Classified and Protected Information.
11 September 2020
Addition of: ISN Supplier Guidance on renewal of the Supplier Assurance Questionnaire under DEFCON 658 (Cyber).
29 June 2020
Addition of: List V - Industry Personnel Security Assurance.
24 June 2020
Addition of: Encryption Of MODII At Rest.
6 April 2020
Industry security notice regarding cyber security model and cyber essentials plus certification during COVID-19 isolation added.
27 March 2020
Added the Clarification on requirements for remote working with MOD material, ISN 2020/01.
13 November 2019
Added Update to the Defence Cyber Protection Partnership’s (DCPP) Risk Assessment and Supplier Assurance Questionnaires.
10 January 2019
Updated Australia-UK security arrangement: Arrangements for the handling and transmission of defence classified information which has been amended.
5 December 2018
Added: Australia-UK Security Arrangement: Arrangements for the Handling and Transmission of Defence Classified Information