Cirro

Cloud SecOps

Cirro offers Managed SecOps and SoC services that deliver deeper insight into your hybrid and public cloud infrastructure and hosted applications.

These capabilities enable us to respond to security events faster, protect your business and its assets, reduce risks, and improve business agility through the use of integrated tooling.

Features

• Proactive and continuously adaptive risk assessments
• Implementation and management of security controls
• Integrated security across infrastructure and applications that scale
• Continuous monitoring, including the use of AI and automation, IDS/IPS
• Covers AWS, Azure, GCP, Contact Centre, Hosting, SaaS, O365
• Our team comprises the best SecOps experts in the UK
• Microsoft, Cisco, VMware and AWS security accredited architects and engineers
• Security Information and Event Management (SIEM) Integration
• AI and Automation, Vulnerability management, Remediation management,
• UK based industry leading Security Operations Centre (SOC)

Benefits

• Improve SecOps performance, without compromising security or stifling change agility
• Continuous protection and Threat prevention
• Incorporate all major vendors including AWS and Azure
• Decreased costs of breaches and operations, Compliance
• Deep cost and performance analysis to identify right services.
• Greater communication and collaboration, Improved business reputation
• ITIL Aligned - integrates with existing IT Service Management
• Real Time Dashboards and Reports
• Access to specialised cloud security expertise
• 24x7 Security monitoring, intrusion detection & prevention

£1,250 to £7,500 a licence a month

• Education pricing available

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at michaelo@cirro-solutions.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

233793866199290

Contact

Michael Owen
020 3418 0412
michaelo@cirro-solutions.co.uk

Planning

• Planning service: Yes
• How the planning service works: Our consultants have a wealth of experience planing and implementing SecOps and SOC services. We work with our clients establishing and rolling out agreed processes and security tools with continuous sharing of information, we are able to systematically improve SecOps performance, without compromising security or stifling change agility. Client's experience: Professional security expertise, Quick and effective responses, Continuous protection, Threat prevention, Decreased costs of breaches and operations, Compliance, Greater communication and collaboration, Improved business reputation
• Planning service works with specific services: No

Training

• Training service provided: Yes
• How the training service works: Extensive training is provided to customers to understand how SecOps integrates into the broader service management regime. We also cover incident response and mitigation planning.
• Training is tied to specific services: No

Setup and migration

• Setup or migration service available: Yes
• How the setup or migration service works: Our consultants have a wealth of experience planing and implementing SecOps and SOC services. We work with our clients establishing and rolling out agreed processes and security tools with continuous sharing of information, we are able to systematically improve SecOps performance, without compromising security or stifling change agility. Client's experience: Professional security expertise, Quick and effective responses, Continuous protection, Threat prevention, Decreased costs of breaches and operations, Compliance, Greater communication and collaboration, Improved business reputation
• Setup or migration service is for specific cloud services: No

Quality assurance and performance testing

• Quality assurance and performance testing service: Yes
• How the quality assurance and performance testing works: Nnovate delivers complete managed security solutions that immediately improve cloud network security.; ; These include-; ; 1) Proactive and continuously adaptive risk assessments; 2) Implementation and management of security controls; 3) Integrated security across infrastructure and applications; 4) Continuous monitoring, including the use of AI and automation

Security testing

• Security services: Yes
• Security services type:
  • Security strategy
  • Security risk management
  • Security design
  • Cyber security consultancy
  • Security testing
  • Security incident management
  • Security audit services
  • Other
• Other security services:
  • Penetration testing
  • Port scanning
  • User security testing
  • Simulated phishing attacks
• Certified security testers: Yes
• Security testing certifications:
  • CHECK
  • CREST

Ongoing support

• Ongoing support service: Yes
• Types of service supported:
  • Buyer hosting or software
  • Hosting or software provided by your organisation
  • Hosting or software provided by a third-party organisation
• How the support service works: Innovate offers Managed SecOps services that deliver deeper insight into your hybrid and public cloud infrastructure and hosted applications.; ; These capabilities enable us to respond to security events faster, protect your business and its assets, reduce risks, and improve business agility through the use of integrated tooling.; State-of-the-Art Infrastructure & Accreditation; We operate from a state-of-the-art, UK-based Infrastructure Operations Centre. Our team comprises some of the best SecOps experts in the UK, qualified security delivery managers, architects, and engineers, trusted by the government and the private sector. 24/7/365 support, monitoring, and incident response.; ; Cloud and Security Accreditations; Our Microsoft, Cisco, VMware and AWS security accredited architects and engineers have direct experience with the following technologies: Leading industry SIEM platforms, Azure, AWS, Palo Alto, Checkpoint, Cisco Security Technologies, Microsoft 365.; ; Hybrid & Public Cloud Support; We support hybrid and public cloud environments, including Security Information and Event Management (SIEM) Integration, including use of AI and Automation, Vulnerability management, Remediation management, Hybrid and Virtual SOC Services, Compliance, and Risk Management.

Service scope

• Service constraints: This would be outline in a SoW

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Usually within 2 hours
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: Web chat
• Web chat support availability: 24 hours, 7 days a week
• Web chat support accessibility standard: WCAG 2.1 AAA
• Web chat accessibility testing: Part of the solution we offer is to deliver a full solution for assistive technologies. We will typically use tools like WAVE, BrowserStack or Site Improve.
• Support levels: As standard, we provide commercial and account management. During the development phase of the project, we provide a lead engineer who coordinates the project internally, acting as the main technical liaison and is ultimately technically responsible for the delivery and ongoing support.; ; Depending on the SoW, the project scope, the complexity and the ongoing support requirements, a Support Agreement can be offered, on software and API work, this is typically a standard UK working hours agreement, however, this can extended if needed.; ; Additionally, we can also provide pro-active monitoring and altering tools or solutions to ensure continual service validation, monitoring for uptime, data throughput, trends, forecasting, usage or networking.

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: Innovate UK Ltd

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Security Clearance (SC)

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: IQS
• ISO/IEC 27001 accreditation date: 16/07/2023
• What the ISO/IEC 27001 doesn’t cover: Elements that sit outside of the application and company operation, such as 3rd party services, integrations and coding
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: Yes
• Any other security certifications:
  • ISO 9001 - Quality
  • ISO 22301 - Business Continuity

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  Commitment to Reduce Carbon Footprint and Climate-Related Initiatives In alignment with our commitment to reducing our ecological impact, we are dedicated to collaborating with our customers and suppliers to contribute to environmentally sustainable initiatives that improve ecosystems and reduce ecological impact. Our primary objective is to minimise the environmental impact of our operations. Focus on Environmental Impact Reduction Our main focus is to engage in discussions with our customers to explore collaborative approaches for reducing the environmental impact, particularly by minimising non-essential travel, to reduce energy usage and wastage of time and materials, all of which have an impact on operational consumption. As we transition back to regular operations, we are focused on reducing our physical impact, including initiatives such as flexible working, minimising printing, and enhancing recycling efforts. We are committed to optimising our physical office requirements to ensure efficient resource utilisation. Future-Focused Solutions and Efficiency We are dedicated to designing future-oriented solutions that embed efficiency into our design and delivery processes. Leveraging the momentum generated by the pandemic, we aim to build on successful new working methods. At Cirro, we are continually looking to identify potential improvements in the way we work to improve our operational efficiencies which directly impact energy usage, travel or ecological impact. By championing these initiatives, we are steadfast in our commitment to not only reduce our own ecological impact but also to actively engage with our stakeholders to foster environmental sustainability and support initiatives that have a positive impact on our world.

  Equal opportunity

  Delivering Social Value Theme 4 and PPN 06/20 Model Award Criteria In the following section, we elaborate on our approach to fulfilling Social Value Theme 4 and the relevant PPN 06/20 Model Award Criteria Our strategy, aligned with WSP’s 2022-24 Inclusion & Diversity Strategy, encompasses the following initiatives: Skill Development for Underrepresented Groups We are committed to supporting the development of new skills that lead to recognised qualifications for underrepresented groups. Addressing Inequality in Employment, Skills, and Pay We will demonstrate a clear commitment to identifying and addressing inequality in employment, skills, and pay within the contract workforce. This includes implementing time-bound action plans to monitor the inclusion and progression of full-time equivalent (FTE) employees from underrepresented groups. Supporting In-Work Progression Our approach includes support for in-work progression, aiming to assist individuals from disadvantaged or minority groups in transitioning into higher-paid roles by developing new skills relevant to the contract. Real-World Equal Opportunity When recruiting, Cirro has a policy to ensure that all names, ages, race or gender details are removed from CVs, so we focus on interviewing and employing the most suitable person for the role.

  Wellbeing

  Wellbeing Initiatives In our commitment to prioritising the well-being of our teams, we are dedicated to supporting the health and well-being of our employees, contractors, suppliers and customers. Flexible Working Support We offer flexible working conditions to our staff. They have a clearly defined job description, they know what needs to be done and they have the flexibility they need to be able to do that whilst balancing home life, physical and mental health. Internal Support Cirro’s works typically in virtual teams, it’s important that we have ‘virtual’ tea breaks and have regular discussions. Cirro also keeps an eye on the level of output expectations and workloads of employees to ensure the right resourcing levels and workloads. During periods of high-intensity working, such as working on tenders, delivering projects or whatever it might be, Cirro ensure employees take time out once this is more practically possible to ensure employees can refresh and relax.

Pricing

• Price: £1,250 to £7,500 a licence a month
• Discount for educational organisations: Yes

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at michaelo@cirro-solutions.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.