Certes IT Service Solutions Limited

Cyber Security as a Service

Certes Cyber Security as a Service provides access to a wide range of cyber security skills and capabilities for cloud transition, information security and other security projects. Cyber Security services include expertise across cyber security strategies, Secure by Design, risk management and comprehensive assessments to stress test security platforms.

Features

• Certes cyber security capabilities including cyber strategy, transformation and assessments.
• Cyber risk management and compliance, cyber training, education and awareness.
• Utilises methodologies: Agile, PRINCE2, waterfall, MOR, P3M3, MSP.
• Expertise in risk management, ethical hacking, incident reporting and analysis.
• Vetted resources in SC (Security Cleared), DV (Developed Vetting), NPPV
• Risk mitigation by implementing GDS, TCoP, Secure by Design principles.
• Scalable, Collaborative, and Blended Approach to Cyber Security.
• CESG Senior SIRA, Senior IA, Tigerscheme and ISO 27001.
• CS Services can easily adjust whether expanding or contracting.
• Rapid deployment of Cyber Security Team using DDaT/SFIA frameworks.

Benefits

• Elimination of overhead costs associated with hiring full-time Cyber team.
• Specialist resources to augment under-resourced digital transformation teams.
• Focus on core competencies, leaving cyber security tasks to experts.
• Security assurance guarantees robust cyber security posture, adapting to threats.
• Fostering a Secure by Design culture throughout the organisation.
• Rapid Response Teams, deployment and off-boarding within 5 days.
• Ability to scale Cyber Security resources according to project demands.
• Engaging stakeholders (all levels) from commencing any Cyber Security projects
• Align Cyber Security with business strategy and operational processes.

£350 to £1,400 a unit a day

• Education pricing available

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at simon.churan@certes.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

181383167893595

Contact

Simon Churan
01675468968
simon.churan@certes.co.uk

Planning

• Planning service: Yes
• How the planning service works: Our team will evaluate Client’s needs by carrying out a full operational analysis, including requirements capture and readiness assessment of operational and technical products, solutions and systems within the organisation to create a set of designs to meet cloud services. ; We engage with stakeholders to consider;; •Business functions that need to be supported; •If bespoke/customised software will be needed; •How devices can integrate with corporate data services; •Service and device security; •Corporate IT platforms and their associated architecture; •Development of a “To-Be” architecture (infrastructure and applications estates) and a migration/transition Road Map; •Additional software and integration services needed for deployment; •Device, service, support cost factors; These factors help define requirements while speeding adoption and deployments. Another critical consideration is device management. Solution providers looking to offer services that include management of mobile devices will want to verify which mobile device OS will work with particular business application solutions. That compatibility matrix will have to be weighed against the services available under a deployment platform. Deployment platforms may include capabilities such automated provisioning, security policy enforcement, VPN connectivity and other capabilities. That translates into a selection methodology that identifies business needs and matches the target environment via the tools available.
• Planning service works with specific services: No

Training

• Training service provided: Yes
• How the training service works: Our team will provide coverage of fundamental cloud computing and digital by default training in terms of technology and business considerations. Fundamental Cloud Computing Terminology and Concepts Basics of Virtualization Specific Characteristics that Define a Cloud Understanding Elasticity, Resiliency, On-Demand and Measured Usage Benefits, Challenges and Risks of Contemporary Cloud Computing Platforms and Cloud Services Cloud Resource Administrator and Cloud Service Owner Roles Cloud Service and Cloud Service Consumer Roles Software as a Service (SaaS), Platform as a Service (PaaS) and Infrastructure as a Service (IaaS) Cloud Delivery Models Combining Cloud Delivery Models Public Cloud, Private Cloud, Hybrid Cloud and Community Cloud Deployment Models Business Cost Metrics and Formulas for Comparing and Calculating Cloud and On-Premise Solution Costs Service Level Agreements (SLAs) for Cloud-based IT Resources Formulas for Calculating and Rating SLA Quality of Service Characteristics
• Training is tied to specific services: No

Setup and migration

• Setup or migration service available: Yes
• How the setup or migration service works: We will assist the Client in the development of a business case for migrating to the Cloud or between Cloud services. We will assist with identifying the required resources and the scoping of the project, especially where projects will transfer from being on-site to off-site hosted Cloud scenarios. We will assist with application architecture landscape redesign and how applications interact with one another and are delivered to end users. We will discover application dependencies, provide contingencies for unplanned outages and avoid limited functionality to systems while dependencies are addressed. IT service management, service desk alignment, and a general review of ITSM and SIAM processes (also in line with GDS and TCoP guidance) ensure that while more elements of the environment are outsourced, policies and processes align to the requirements of the organization. Security and networking policies will be addressed to ensure that the required level of security is adequately met.
• Setup or migration service is for specific cloud services: No

Quality assurance and performance testing

• Quality assurance and performance testing service: Yes
• How the quality assurance and performance testing works: Our team of QA and Performance testing specialists create processes and methods to ensure that the software will perform well under all conditions and scenarios. We can coach end users and clients to implement testing strategies or carry out the testing ourselves. We cover all aspects of the testing scope ensuring products are ready for production and improve end user experience. We carry out capacity testing to establish how many users the application can handle. Soak testing to determine stability and performance of the software. Load testing in order to see and measure the outcome. Component testing to identify performance problems with specific components. Stress testing to push the application and make it perform under the worst conditions, helping developers determine which components are more prone to fail first. Smoke testing is conducted to show that the application performs as expected under normal conditions. All processes check for stability, scalability, performance and throughput. We provide Test Managers, Functional & Non-Functional testing, Automated Testing, Performance & Load Testing, Usability & Accessibility Testing, Test Strategy, Test Management, UAT, Security Testing, Mobile Testing, Automate Testing, Automation Strategy, Framework design, build and Test Script Development & Execution

Security testing

• Security services: Yes
• Security services type:
  • Security strategy
  • Security risk management
  • Security design
  • Cyber security consultancy
  • Security testing
  • Security incident management
  • Security audit services
• Certified security testers: Yes
• Security testing certifications:
  • GBEST
  • CHECK
  • CREST
  • Tigerscheme
  • Cyber Scheme

Ongoing support

• Ongoing support service: No

Service scope

• Service constraints: N/A

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Within 1 hour
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.1 AAA
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: Web chat
• Web chat support availability: 24 hours, 7 days a week
• Web chat support accessibility standard: WCAG 2.1 AAA
• Web chat accessibility testing: Our web chat testing has ensured that people with disabilities can navigate with applications and services. Our assistive technology accessibility testing ensures there is access for all users, including auditory, physical, visual, neurological and cognitive disabilities. Performed accessibility testing using SortSite and cross browser testing with the use of BrowserStack to confirm device compatibility and mobile optimisation to ensure WCAG standards were met as part of the UK Government accessibility regulations.
• Support levels: We provide telephone, web and on-site support through our team of technical experts including technical account managers and cloud support engineers. Our Technical experts are available on-site, supported by engineers by telephone or web connectivity. Typically all support is provided as part of the cost of the Cloud service, rather than additional charges being levied.

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Developed Vetting (DV)

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  Our Carbon Reduction Plan has been completed in accordance with PPN 06/21 and associated guidance to fight climate change. In line with the UK Government commitment to achieving “Net Zero by 2050”, leading to PPN 06/21 we demonstrate compliance through our strategy to reduce our carbon footprint through our Environmental policy, environmental management measures and our Carbon Reduction Plan which includes:; *Confirming our commitment to achieving Net Zero by 2050 for our UK operations.; *Details of our carbon footprint/current emissions for the sources included in Scope 1 and 2 of the GHG Protocol and a defined subset of Scope 3 emissions.; *Providing emissions reporting of the CO2e (Carbon Dioxide Equivalent) for the greenhouse gases covered by the Kyoto Protocol (predominantly carbon dioxide, methane and nitrous oxide).; *Setting out the environmental management and carbon reduction measures we have adopted Carbon Reduction Commitments/Actions.; Our monthly carbon calculation has enabled us to identify the largest sources of GHG emissions, and to focus those which have most impact. We have been able to identify quick and easy wins to influence staff, suppliers, customers and communities to support environmental protection, through our business reducing its office accommodation by 50%, and therefore the amount of Scope 1 and Scope 2 electricity and gas consumption by 50% for the year 2021-22. We have also introduced initiatives to reduce commuting to our offices or carrying our business travel to customer sites, which has reduced our petrol consumption by one third for the year 2021. We achieved this through the introduction of increased use of public transport, no longer purchase non-electric company vehicles and operating remote/home working for employees, and encourage a greater use and adoption of on-line video conferencing with our clients, in place of face-to-face meetings; reducing the consumption of petrol and public transport.

  Covid-19 recovery

  We operate a programme to support people in our local community who became unemployed as a result of Covid19, providing advice on job hunting and helping people find work within our own business, and with our customers; including employing three people locally to our Birmingham offices.; Two of our staff volunteered during the Covid-19 Pandemic, to work as ancillary nurses at local NHS hospitals, to assist clinicians with the huge workload of providing the care at the peak of the pandemic, easing the burden on doctors/nursing staff; reducing the demand on health and care services.; We provide workplace conditions that support the COVID-19 recovery effort including effective social distancing and remote working capability. We provide a welfare and wellbeing programme for all staff, including those working remotely for long periods, owing to the Covid-19 pandemic.

  Equal opportunity

  We are a Disability Confident, Living Wage Certified employer, and signatory to the Race at Work Charter.; Our teams (70% female, zero gender pay gap) reflect the diversity of our population and the people who use our services. To ensure an inclusive approach to skills opportunities we actively monitor inclusivity indicators among job applicants and existing employees; making skills opportunities available to all irrespective of Gender/Identity (LGBTQQIAAP), Martial/Civil Partnership Status, Age, Ethnicity, Disability and Health Conditions, Religion/Belief, Current Working Pattern/Flexible Working Needs, Caring Responsibilities.; Time-bound improvement plans tackle specific areas, introducing measures such as:; • Skill-based recruitment/promotion; • Assessment tasks and questions to avoid unconscious bias; • Diverse recruitment/promotion panels (avoids unconscious bias); • Jobs at all levels allow flexible working from day one; • Including representatives with protected characteristics, in recruitment/promotion shortlists/panels Equal-pay audits; All roles advertised on job boards dedicated to Diversity and Equality Target Groups. We sponsor Working Parties and Charity Organisations representing disadvantaged or underrepresented groups. Working with third sector organisations and employment initiatives at the heart of local communities, reaching the long-term unemployed including those from protected groups.; We take action to tackle the gender gap and create a more diverse and inclusive workplace for all, including those with disabilities and/or needing assisted digital support, by;; ; • Including multiple women in shortlists for recruitment and promotions; • Structured interviews; avoiding unfair bias; • Publishing salary ranges (research shows women are less likely to negotiate their pay); • Transparency in promotion, pay, reward processes; • Shared Parental Leave; • Recruit returners; • Mentoring, confidential helpline; • Internal targets to achieve diversity and inclusion goals; • Diversity training; • Providing assistive technology such as screen readers, in-person accessibility needs; • Offering flexible working arrangements; achieves more diverse, inclusive workplace.

  Wellbeing

  We provide our staff with our We Care Wellbeing Support Programme to support the health and wellbeing, including physical and mental health, in our workforce, which we believe Influences our staff, our suppliers, and our customers and our communities through the delivery of the contract to collaborate and work towards common social value goals. We demonstrate collaboration with users and communities in the codesign and delivery of the contract to support strong integrated communities through delivering to our workforce and local community;; • Mental health Wellbeing; • Healthy living; • Financial and legal wellbeing; • 24/7 GP consultation; • Smoking cessation; • Mental health support, especially during Covid-19 remote working and recovery; • Burnout prevention; • Life events counselling; • Get fit programme; • Diet support/Healthy diet at work; • Financial guidance; • Legal guidance

Pricing

• Price: £350 to £1,400 a unit a day
• Discount for educational organisations: Yes

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at simon.churan@certes.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.