I could tell ya, but I'll have to kill you! Sorry, no seriously security was taken extremely seriously. Except those idiots who loose laptops, which I'm a bit perplexed by as we had clear direction that all mobile devices had to have some sort of encryption product installed. Our site used Flagstone which was a hardware encryption product which rendered the hard drive data useless if password was entered incorrectly more than three times.
As for networks, well, all MoD networks are seperated depending on classification, but generally the 'less secure' were all hooked to the Internet centrally by an Internet Gateway Service run by various agencies. If it was internet connected in anyway, it had to go through this service, no ifs, no buts.
Part of the reason for me leaving is I had no freedom to do what I wanted to do. We couldn't just add a 'server' for a particular task without months of waiting and costing and then just being told 'No!' by EDS. Stuff that! ;-)
It wasn't a 'flash' demo, but an actual live demo running from Capta's website which was essentially just a Sharepoint Server connected to a demo SIMS database. I find the Capita website slow anyway, but generally the guts of what we needed seem to run ok. I'm still investigating.
Yeah, I laughed when they mentioned July.
Pete