This project, run by Serco PLC, developed a Security and Resilience architecture which was analysed to identify gaps in the strategy, systems and processes that can diminish its security and resilience capabilities. Frontis were responsible for the development of the MODAF-based framework, liaison with workstreams to produce an analysis of the as-is security and resilience capabilities as well as a generic Framework which can be reused for modelling the security and resilience of other subjects. Using a system of systems approach, the architecture covers the whole lifecycle and includes a risk management module which identifies the components which are at risk and the control systems which mitigate those risks.