BlackBerry 10 OS rejected by UK government as not secure enough for essential work [UPDATED]
UPDATE:
GCHQ have issued the following statement: (GCHQ is the organisation above CESG.)
Discussions with BlackBerry are ongoing about the use of the BlackBerry 10 platform in government. We have not yet performed an evaluation of the security of that platform, but we expect to be issuing Platform Guidance in the summer. This will cover a number of platforms including Blackberry 10 (and the use of ‘Balance’).
We have a long standing security partnership with BlackBerry and this gives us confidence that the BlackBerry 10 platform is likely to represent a viable solution for UK Government.”
BlackBerry have issued the following statement:
“Media reports alleging that BlackBerry 10 has been ‘rejected’ for U.K. government use are both false and misleading.
BlackBerry has a long-established relationship with CESG and we remain the only mobile solution approved for use at ‘Restricted’ when configured in accordance with CESG guidelines.
“This level of approval only comes following a process which is rigorous and absolutely necessary given the highly confidential nature of the communications being transmitted.
“The current re-structuring of this approval process, due to the Government Protective Marking Scheme review and the new CESG Commercial Product Assurance scheme has an impact on the timeline for BlackBerry 10 to receive a similar level of approval.
“The U.S. government’s FIPS 140-2 certification of BlackBerry 10 and the selection of BlackBerry 10 by the German Procurement Office and Federal Office for Information Security (BSI) underline how our new platform continues to set the standard for government communications.
“We are continuing to work closely with CESG on the approval of BlackBerry10 and we’re confident that BlackBerry 10 will only strengthen our position as the mobile solution of choice for the U.K. government.”
The UK government has rejected the BlackBerry 10 OS, stating that it is not secure enough over BlackBerry version 7.1 for government work.
BlackBerry 10 is said to bring several security enhancements over the previous version, but that’s not the case according to UK’s Computer Experts Security Group. BlackBerry is reportedly working with the CESG to get the order revised through a new software update.
One of the biggest security features on the BlackBerry is its Balance technology that is designed to separate work and personal info in a secure manner. Work info is kept away from personal apps and vise-versa.
The CESG didn’t go into specifics on what it thinks is wrong with BlackBerry 10.
BlackBerry stated:
“We have a long-established relationship with CESG and we remain the only mobile solution approved for use at ‘Restricted’ when configured in accordance with CESG guidelines. This level of approval only comes following a process which is rigorous and absolutely necessary given the highly confidential nature of the communications being transmitted.
The current restructuring of this approval process, due to the Government Protective Marking Scheme review and the new CESG Commercial Product Assurance scheme has an impact on the timeline for BlackBerry 10 to receive a similar level of approval. The US government’s FIPS 140-2 certification of BlackBerry 10 and the selection of BlackBerry 10 by the German Procurement Office and Federal Office for Information Security underline how our new platform continues to set the standard for government communications.
We are continuing to work closely with CESG on the approval of BlackBerry 10 and we’re confident that BlackBerry 10 will only strengthen our position as the mobile solution of choice for the UK government.”
BlackBerry 10 has already been certified by the US government and the German Procurement Office and Federal Office for Information Security.
When announcing the US approval last year, BlackBerry had said:
“What differentiates BlackBerry is that it integrates end-to-end security, and includes certified encryption algorithms for data at rest and data in transit. No other mobile solution has achieved the level of security accreditation that the BlackBerry solution has.”
Missing out on government business could cost BlackBerry millions in lost revenues, even if rivals are unable to fill the same security space: the government and NHS are two of its biggest clients in the UK.
Whatever the issue is, CESG know what they are doing.
I’m sure that BlackBerry are already working on correcting the issue(s).
I am sure BlackBerry will comply with what the UK Government requires. Though, BB10right now is more secure than BB7.1, so not sure what they are talking about.