The Security Policy Framework (SPF) describes the standards, best-practice guidelines and approaches that are required to protect the States of Jersey government assets (people, information and infrastructure).

This framework was developed based on the UK Security Policy Framework and what is already in use by the States of Jersey Police (SOJP), it describes expectations of how the States and third parties handling States information and other assets will apply protective security to make sure the States can function effectively, efficiently and securely. 

All departments (and partners handling States information) must meet a range of mandatory security outcomes described in the framework. These outcomes do not specify particular processes but describe what good security will look like.