Commodity Usage Principles and Assurance (CUPA)

For many years the MOD has operated the ‘DIPCOG’ approach that approved information security products and services for both Defence and its suppliers.

CUPA is a new approach to assuring information commodity products and services. The proposed CUPA process identifies methods of assuring Off The Shelf (OTS) products and services meet the required MOD security standards.