Translate the text from Welsh to English.



 
Polisi Dosbarthiadau Diogelwch 07/23 Llywodraeth y DU


Cafodd Polisi Dosbarthiadau Diogelwch y Llywodraeth (GSCP) ei ddiweddaru er mwyn mynd i'r afael â bylchau’r polisi blaenorol. Mae'r polisi yn berthnasol i unrhyw wybodaeth neu ddata sy'n cael ei greu, ei brosesu, ei storio neu ei reoli fel rhan o gontract gan y llywodraeth, gan gynnwys contractau Llywodraeth Cymru fel corff Llywodraeth Ganolog.


Mae'r GSCP yn defnyddio tri dosbarth:


* Swyddogol
* Cyfrinachol
* Cyfrinachol iawn


Mae pob dosbarth â set o ymddygiadau a argymhellir yn ogystal â set o reolaethau amddiffynnol. Mae'r rhain yn gymesur â phroffil bygythiad y dosbarth dan sylw ac effaith bosibl unrhyw fygythiad, colled ddamweiniol neu ddatgeliad anghywir o’r wybodaeth a gedwir o fewn y dosbarth hwnnw.


Dylai cynnwys y PPN fod wedi’i weithredu erbyn Mehefin 2024\. Mae'r cyfnod gweithredu 12 mis hwn yn caniatáu digon o amser i integreiddio gofynion y polisi dosbarthiadau diwygiedig o fewn gweithgareddau masnachol.


Rhaid i sefydliadau sydd o fewn y cwmpas sicrhau bod rheolaethau diogelwch amddiffynnol priodol ar waith ar gyfer contractau newydd a phresennol, yn unol â'r Polisi diwygiedig. Mae cyfres lawn o ddogfennau cyfarwyddyd ar gael ar GOV.UK, gyda chanllawiau penodol ar gyfer cyflenwyr a thimau masnachol. Mae modiwl e\-ddysgu, Polisi Dosbarthiadau Diogelwch y Llywodraeth, ar gael ar wefan Dysgu’r Gwasanaeth Sifil.


Mân\-ddiwygiadau yw’r rhan fwyaf o’r newidiadau i’r polisi, ac ni fyddant yn arwain at amrywio contractau presennol. Fodd bynnag, efallai bydd angen adolygu contractau penodol mewn rhai achosion.


Dylai Sefydliadau sydd o fewn y cwmpas hysbysu eu cyflenwyr presennol bod Polisi Dosbarthiadau Diogelwch y Llywodraeth wedi'i ddiwygio, gan nodi unrhyw newidiadau sydd eu hangen eu gwneud i’r contract.  


Os oes gennych unrhyw ymholiadau ynghylch PPN 07/23, e\-bostiwch: ICTProcurement@llyw.cymru


 







Translation:


 
PPN 07/23 Security Classification Policy


The Government Security Classifications Policy (GSCP) has been updated to address gaps in the previous policy. The policy applies to any information or data that is created, processed, stored or managed as part of a government contract, including Welsh Government contracts as a central government body.


The GSCP uses 3 classification tiers


* Official
* Secret
* Top secret


Each tier provides a set of recommended behaviours and a set of protective controls. These are proportionate to the threat profile for that tier and the potential impact of a compromise, accidental loss or incorrect disclosure of information held within that tier.


The contents of the PPN should be implemented by June 2024\. This 12\-month implementation window is to allow sufficient time for the requirements of the updated classifications policy to be integrated into commercial activity.


In\-scope organisations must ensure that appropriate protective security controls are in place for new and existing contracts in line with the updated Policy. A full suite of guidance documents is available on GOV.UK, with specific guidance for commercial teams and suppliers. An e\-learning module, Government Security Classification Policy, is available on the Civil Service Learning website.


Most of the updates are minor which will not require a contract variation to existing contracts. However, there might be some instances where specific contracts need to be reviewed.


In\-Scope Organisations should notify existing suppliers that the Government Security Classification Policy has been updated and set out any changes needed to the contract.


If you have any queries about PPN 07/23, please e\-mail: ICTProcurement@gov.wales