The GEN Secure Communications (GSC) network is a purpose-built, secure communication environment designed to protect critical staff from external threats by isolating them from standard internet-based communication systems. It operates on a zero-trust security model, ensuring that only authorised users and devices can access sensitive communications, while all external communications is blocked or filtered.

Isolated Network Environment

• GSCN creates a private, internal communication network separate from the public internet and other public communications networks.
• Critical staff can only communicate within this secure environment, preventing exposure to external threats such as phishing, malware, or social engineering attacks, as well as preventing accidental data leaks or exposures. 

End-to-End Encryption (E2E)

• All messages, voice calls, and file transfers within GSCN are encrypted from sender to recipient.
• Encryption keys are issued and rotated to endpoints continually, ensuring no third party, including GEN, can snoop on the content.

Zero Trust Architecture

• Users must authenticate every time they access the network with hardware keys and MFA.
• Access is granted only after verifying identity, device health, and location.
• Continuous monitoring ensures any suspicious activity is flagged immediately.

No External Connectivity

• GSCN does not allow direct or even indirect access to the public internet except via private proxies, that screen all traffic. Access to client sites and configurations is permitted within our wireguard mesh from a single engineer to the required endpoint and no wider. This one to one tunnel principle keeps any attack surface really low and is tightly scoped. 

Secure Communication Channels

• Internal messaging, voice calls, and file sharing are handled through secure encrypted protocols that add a second layer of protection. No one can call or message in, or out but staff can all talk to each other freely. 

User Safety and Anonymity

• Staff do not need to share personal contact details or use public email addresses.
• Communication remains private and untraceable outside the GSCN network and no one can pierce the network without an secure provisioned endpoint.

More information on Genuinely Secure Communications

https://www.gen.uk/index.php?page=what-is-secure-communications