Sector
Public Sector
Public-sector platforms carry a different kind of weight: lives, livelihoods, citizen trust. We deliver cloud, cyber and reliability programmes inside Scottish Government and other UK public-sector organisations, at the cadence the work requires.
Sector context
UK public-sector technology operates under standards that civilian enterprise rarely encounters: NCSC Cloud Security Principles, Government Security Classifications, Service Standard, and the kind of public scrutiny that turns a routine outage into a national news item. Cipherer's principal consultant holds National Security Vetting at SC/IL3 and has delivered three separate Scottish Government engagements (network architecture, SRE capability, and cyber security at organisational level), plus the NHS Digital SUS+ migration during COVID-19.
Track record
- Scottish Government Cyber Security
Org-level cyber security programme delivering CrowdStrike, a SecOps target operating model and defence-in-depth controls. Security automation, policy-as-code and continuous compliance integrated into delivery.
- Scottish Government SRE
Built Site Reliability Engineering capability and practices from the ground up for Scottish Government cloud services. Cloud engineering, observability, incident management and platform reliability uplift.
- Scottish Government Network Architecture
Existing IT and network architecture investigated, documented and baselined as the foundation for national modernisation. Deployment of 300+ network switches across national government sites.
- NHS Digital SUS+ National Data Platform
Zero-downtime migration of the NHS Secondary Uses Service to AWS during COVID-19, supporting national vaccine research and pandemic response.
How we approach this sector
Government-grade security as a default
We deliver against NCSC principles and government security classifications by default, not as a compliance bolt-on. The work assumes the threat model and the public-scrutiny model from day one.
Reliability that survives political weather
Public-sector platforms get attention they did not ask for. SRE, observability and operational practice are designed to make failure modes legible and recovery fast.
Cleared, accountable, sole-bidder delivery
SC/IL3 cleared principal. No sub-contracting on Standard Procurement Documents. Sole-bidder accountability throughout an engagement.