Government Security Program (GSP): A global approach to product security
Updated: January 25, 2005
GSP Overview
The GSP is a crucial part of Microsoft efforts to address the unique software security requirements of governments around the world. The GSP provides national governments with information to help them evaluate the security of Microsoft products. In 2001, Microsoft launched the Shared Source Initiative, expanding its long-standing efforts to make Microsoft Windows source code more transparent to industry partners and customers. A year later, the company announced its Trustworthy Computing Initiative, placing security at the core of all Windows development efforts. The principles of these two critical directives are embodied in the GSP, a program built upon the cornerstones of transparency and partnership.
Access
Through the GSP, Microsoft offers participating governments zero-cost, online, smart-card access to source code for the most current versions, beta releases, and service packs of Windows 2000, Windows XP, Windows Server 2003, Windows CE, and Microsoft Office 2003. In addition, subject to such requirements as U.S. export approval, qualified GSP participants may obtain access to cryptographic code and development tools. The GSP also provides transparency through disclosure of Microsoft technical information. This engineering-level view of Windows architectural design offers greater insight into the platform's integrity.The view also enhances the government's ability to design and build more secure computing infrastructures.
Partnerships
The GSP fosters partnerships between governments and Microsoft based on collaboration, information exchange, and a mutual trust fortified through ongoing interaction. Representatives of participating government agencies are invited to visit Microsoft development facilities to review Windows and Office source-code development, testing, and deployment processes. In addition, these representatives have the opportunity to discuss existing and potential projects with Microsoft security experts and interact with Microsoft staff. For government participants, this experience can provide valuable insights into Microsoft product security. For Microsoft, the visit offers an invaluable opportunity to receive feedback from agency representatives. Visiting agencies are asked to outline specific projects and objectives before arrival, so that Microsoft can best develop a customized, rewarding itinerary. Moreover, the relationship of trust cultivated during the course of GSP participation serves as a solid foundation for future technical collaboration in designing, developing, and implementing a more secure government computing environment.
Benefits of GSP
Access to Microsoft source code through the GSP benefits governments and associated organizations by:
| • | Providing insight and deeper understanding of Windows and Office. |
| • | Fostering a partnership with Microsoft based on IT security issues. |
| • | Improving the feedback process that ultimately contributes to the development of better solutions and tools. |
| • | Providing information that can help government agencies design and build more secure computing infrastructures. |
Eligibility, Terms, and Restrictions
The GSP provides a mechanism for delivering source code for current versions, betas, and service packs of Windows 2000, Windows XP, Windows Server 2003, and Office 2003. It is important to note that:
| • | The program is available to more than 60 countries with intellectual property regimes that meet international standards. |
| • | Governments may read and reference the source code but may not modify it. |
| • | The term of the agreement is three years. |
| • | After the licensing agreement is signed by both parties, the participating government gains access to the code through the Code Center Premium SSL-secured Web site. |
| • | The Code Center Premium site offers search-and-view functionality to augment the efficiency and value of source access. |
| • | All source code updates are provided by Microsoft through the Code Center Premium site. |
Additional Information
For more information on the Government Security Program, e-mail the GSP team. For more information on other shared source licensing programs, visit the Shared Source Initiative Licensing Programs.
