Computer Network Defence Ltd

CND Penetration Testing

A Penetration test (Pen Test) finds and exploits vulnerabilities within your systems. CND provide a range of Pen Testing services including Web app, Mobile App and Infrastructure. In order to deliver CHECK, CBEST, CREST & TigerScheme Penetration testing, CND have a number of Trusted Partners that they work with.

Features

• Penetration Testing (Pen Testing).
• Web Application Testing.
• Infrastructure Testing.
• Mobile Application Testing.
• Using latest industry standard methodologies and tools.
• CHECK/ CREST/ TIGERSCHEME/ CBEST (delivered by trusted Partners).
• Security Cleared Pen testing.
• Finds and exploits vulnerabilities within your systems.
• Output: report on the findings and recommendations for remediation.

Benefits

• Identify vulnerabilities in your networks, applications, processes, and people.
• Professional service with certified and security cleared testers.
• Minimise financial, operational, and reputational damage.
• Additional support from CND consultants if required.
• Time and cost effective delivery.

£1,200.00 to £2,500.00 a unit a day

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at CND.GCloud@cndltd.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

187539521133012

Contact

Andy Cuff
01225 811806
CND.GCloud@cndltd.com

Planning

• Planning service: Yes
• How the planning service works: At CND we specialise in cyber security, we will work with the client to capture their requirements and ensure that the solution meets the necessary policies and industry best practice.
• Planning service works with specific services: No

Training

• Training service provided: Yes
• How the training service works: CND provide all manner of Cyber Security training, both directly and through trusted partners. The training offered includes online, instructor lead and on the job (skill transfer).
• Training is tied to specific services: No

Setup and migration

• Setup or migration service available: Yes
• How the setup or migration service works: Where possible the client's on premise solution will be migrated to a cloud offering which could form a number of guises depending on the client requirement.
• Setup or migration service is for specific cloud services: No

Quality assurance and performance testing

• Quality assurance and performance testing service: Yes
• How the quality assurance and performance testing works: CND are certified to ISO9001.

Security testing

• Security services: Yes
• Security services type:
  • Security strategy
  • Security risk management
  • Security design
  • Cyber security consultancy
  • Security testing
  • Security incident management
  • Security audit services
• Certified security testers: Yes
• Security testing certifications:
  • GBEST
  • CREST
  • Tigerscheme
  • Cyber Scheme

Ongoing support

• Ongoing support service: Yes
• Types of service supported:
  • Buyer hosting or software
  • Hosting or software provided by your organisation
  • Hosting or software provided by a third-party organisation
• How the support service works: For the CND Managed Security Service, CND provide a single tenant solution within AWS based in the UK.

Service scope

• Service constraints: By default, CND's support is provided during normal office hours, though this can be extended to 24/7 at an additional cost if required.

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Within 1 business day.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Support levels: CND provide telephone and email support, though we will adapt the support offered to meet the client needs. Each client will be assigned an Account Manager; the cost of this support is inclusive, however out of hours and bespoke support will be at an additional cost dependent upon the specific requirements.

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: AlientVault, Splunk, Cisco, QUALYS, KnowBe4, SpyCloud.

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Developed Vetting (DV)

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: United Registrars of Systems
• ISO/IEC 27001 accreditation date: 17/07/2024
• What the ISO/IEC 27001 doesn’t cover: Computer Network Defence's Provision of Cyber Security Consultancy Services as a Managed Security Service Provider (MSSP) in the UK and Isle of Man offices, Including; Managed Detection and Response, Cyber Assessments, Training, Vulnerability Assessments, and Penetration Testing. Additionally, Cyber Security Recruitment Services, including Agency Provision and Placement of Permanent and Contract Staff for Clients. SOA Version 0.1 dated 18/08/2023
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: Yes
• Any other security certifications: ISO9001

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  The environment and climate change is a core value within CND, some of the initiatives are as follows: ; Company cars are electric, and all staff are offered salary sacrifice to purchase electric vehicles. We are currently researching the capability to extend this salary sacrifice to include a cycle to work scheme. The EV charge point located behind our offices in Corsham has been upgraded and is available to all employees who book in and obtain a parking permit for Digital Mansion.; We have moved to hybrid and flexible working to reduce carbon fuel usage on the commutes and distributed locations to smaller offices to enable staff to work in an office closer to home. ; Company electricity is from renewable energy via Npower and Manx Utilities Authority. ; We have provided free consultancy to BioMass anaerobic digesters which convert waste into energy. CND Offices actively recycle equipment and domestic waste in accordance with available local council authority's services and all cleaning materials used are eco products.; We have dramatically reduced all forms of travel and invested in high quality video conferencing facilities. We have a company policy to ensure staff adhere to measures which fight climate change.; CND has committed to achieve Net Zero on carbon emissions in line with the Government’s target of 2050, as reflected in our Carbon Reduction Plan (CRP). A copy of the CRP is publicly available on our website.

  Covid-19 recovery

  When the Covid-19 pandemic started, CND quickly established remote working practises which were cyber secure, and these were shared with other organisations over social media and various webinars. ; During the pandemic, our recruitment agency offered our services for free to help find unemployed people new roles and for businesses to find staff. ; Over time we have developed various policies for our staff to ensure a safe working environment and we continue to hold several mental health initiatives so that individuals do not feel isolated, including an extra day's leave to promote wellbeing and tri weekly all hands meetings with video capability to encourage and monitor interaction. ; We support all our staff with hybrid and flexible working practices, allowing them to work from home and vary their hours if needed. This is particularly required if they do not feel well enough to come into the office and further serves to reduce the spread of infection. ; We regularly carry out staff training and review policies and processes to ensure resilience in preparation for a future pandemic, should the occasion arise.

  Equal opportunity

  CND employ a number of people who may identify as having a disability and we embrace and celebrate the diversity which they bring. As a result of the pandemic, mental health is also championed within the organisation along with other minority groups. ; The nature of the cyber industry does not exclude physical disabilities from meaningful employment within CND and as a company we employ individuals that identify as being neurodivergent. These individuals excel because of their ability to analyse and see patterns in behaviours which is essential to the arena of cyber security.; Training is tailored and provided to all staff regardless of any disabilities. To ensure there is no prejudice in the recruitment process, initial CV sifting is via email, all CVs are then manually reviewed and are not subjected to automated profiling. Screening calls are undertaken by phone and face to face interviews can be held virtually if necessary.; All subcontractors are vetted to ensure that there is no possibility of modern slavery, and all CND staff are paid above the minimum living wage. CND provide free consultancy to a human trafficking charity. Moreover, CND actively recruits from the military and the spouses of serving military personnel, both of whom find employment discrimination. A copy of our Modern Slavery Policy is publicly available on our website.

  Wellbeing

  CND recognises that the support of health and wellbeing is essential in any modern business. CND hold regular team building exercises to promote this, such as employee lunches coupled with ‘pub’ quizzes which includes all employees and remote workers. ; Employees are granted an additional day’s leave for their birthday as well as a wellbeing day to encourage self-care. Many of our events are shared on social media to encourage other businesses to follow suit. ; CND are on the steering committee of Swindon and Wiltshire Cyber Cluster which helps other businesses develop skills assist with the development of their businesses including sharing ideas around wellbeing.; Line Managers hold one to one sessions with their staff, encouraging open dialogue and providing a forum to air concerns which promotes honest conversations. Staff are able to bring suggestions to their line managers about where CND could focus support and share ideas internally and externally. ; CND are members of local Commerce Teams and Forums advocating for change within the community.

Pricing

• Price: £1,200.00 to £2,500.00 a unit a day
• Discount for educational organisations: No

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at CND.GCloud@cndltd.com. Tell them what format you need. It will help if you say what assistive technology you use.