Government Security Program (GSP)

Government Security Program (GSP) is the agreement on security issues which provides to governmental bodies access to the source code and the technical information of the software and Microsoft services and also an opportunity to estimate their security and integrity by testing in the so-called "centers of transparency". The GSP program is started in 2002.

Comment of SAP company of January, 2018

"Some clients of SAP from public sector carry out an inspection of security of products regarding vulnerabilities in the software to provide security of the data and the internal environment. For this SAP uses the Government Security Program mechanism (the Program of Government Security) which allows to test SAP solutions according to certain state requirements and meets needs of national law enforcement agencies ^[1].

This program of the analysis of the code guarantees security of the source code of SAP products using measures for prevention of expanded access to this code. For this purpose in SAP so-called "clean rooms" (‘clean rooms’) where there takes place verification of the source code of SAP without any writer devices (mobile devices, handles, cameras, etc.) which are strictly prohibited were created. The staff of SAP monitors integrity of check and a certification process. The company works with all governments and the government organizations for this model, without any exceptions".

2015: Agreement with NATO

On September 14, 2015 Microsoft announced signing of the new agreement with NATO within long-term cooperation and the GSP program. The American software giant will provide to the authorities information on the products (including initial year) and threats of information security.

As it appears from the message of Microsoft, the company signed the agreement with the representing NATO communication agency and information (NATO Communications Information, NCI) which will get access to the technical information and documentation connected with products and Microsoft services, such as Windows Windows Server Office Lync, SharePoint 2010 and Windows Embedded. Besides, Microsoft undertakes shares to data on vulnerabilities of the solutions and potential threats.

Representatives of Microsoft and NCI shake hands after signing of the new agreement within the GSP program

Taking into account the new agreement with NATO 44 government departments in 26 countries of the world, including in Russia became participants of the GSP program. Now members of the North Atlantic Alliance can share with different state structures information in the field of security for joint protection against cyberthreats.

Among the government organizations NATO is the first participant of the Microsoft GSP program. Cooperation began in 2002, and 12 years later it was expanded and concerns new key products. It it was announced at the conference which is annually held by NATO devoted to questions of cyber security.

According to one of deputies the NATO Secretary General Sorin Ducaru, strengthening of partner communications with Microsoft is one more step on the way to implementation of industry cyberpartnership (Industry Cyber Partnership). This initiative was started in 2014.^[2]

Read Also

• Microsoft opened source codes of Windows for Chinese
• The source code of a server part of .NET is open

Notes