Next-Generation National Security Applications
Using the Cross Domain Hybrid Application (CDHA) Framework
The problem
Cross-domain working is a key challenge area for the National Cyber Security Centre (NCSC)
As national security threats evolve, data silos and fragmented security domains create operational inefficiencies and elevate security and compliance risks. These challenges are further compounded by two critical issues:
• Data Aggregation Risks:
Unprotected sensitive data at the OFFICIAL classification is a prime target for Hostile State Actors.
• Restricted Visibility & Access:
Isolated SECRET systems, limit operational agility and cross-domain collaboration.
To mitigate these risks, appropriate security measures must be implemented, enabling secure interoperability.
The Solution
Cross Domain Hybrid Application (CDHA) Framework - Enabling Secure Interoperability across Security Domains
With increasing regulatory pressure from NIS2, CAF, and the Cyber Resilience Bill, organisations must adopt solutions that go beyond basic data transfer – they need operational efficiency, cryptographic security and seamless cross-domain application functionality.
CDHA is a next-generation approach – a secure application framework designed to address these challenges. It enables data protection across all classification levels , mitigating data aggregation risks at OFFICIAL and enabling authorised access to SECRET environments without compromising security.
With quantum computing poised to disrupt traditional encryption, Acubed IT is integrating Post-Quantum Cryptography (PQC) into the CDHA Framework (in collaboration with Edinburgh Napier University), to ensure future-proof data security across OFFICIAL and SECRET domains.
Key innovations include:
• ML-KEM and ML-DSA Algorithms: Strengthening encryption against quantum-based threats.
• Homomorphic Encryption (HE): Enabling secure computations on encrypted data without decryption.
• Attribute-Based Encryption (ABE): Allowing controlled data sharing across domains based on user roles and security clearances.
• AI & ML-Driven Export Controls: Automating compliance and security checks for secure cross-domain transfers.
Together, these innovations will reinforce CDHA’s long-term security and resilience, ensuring it remains ahead of emerging cyber threats.
CDHA is more than just another Cross Domain Solution - it represents the next generation of secure applications, bridging the gap between security and usability to enabling data-driven decision-making while safeguarding critical information.
Acubed IT is currently working with an HMG SECRET Platform team to deliver Next-Generation National Security Applications, enabling secure interoperability across OFFICIAL and SECRET networks.
HMG's SECRET Hosting
HMG's SECRET Hosting is a Tier 2 Community Cloud designed specifically for the UK Government and its trusted partners, providing a highly secure and resilient infrastructure. Hosted across two data centres, HMG's SECRET Hosting leverages Broadcom V-Cloud Foundations technology to deliver a fully virtualised infrastructure and networking within an ‘air-gapped’ environment. With an in-house project delivery and engineering team, as well as dedicated service management and help desk functions, HMG's SECRET Hosting ensures seamless support and operational excellence. Security is reinforced through an in-house Tier 2 Security Operations Centre (SOC), offering continuous monitoring and protection:
A Flexible, Tier 2 (SECRET) Hosting Service
The CDHA and HMG's SECRET Hosting application will have the best of both worlds. Data will continue to be collected at OFFICIAL while enabling MOD and Rosa users to access the application from their network. This approach allows many departments to mitigate the risks associated with data collection at OFFICIAL while also leveraging the investment made in the Rosa ecosystem.
