Dun & Bradstreet Ltd

D&B Shipping Insights for Supply Chain Mapping and Resilience

D&B Shipping Insights provides thousands of import export attributes and transactions, then surfaces the associated companies. A full suite of risk scores and ratings can be used across the wider supply chain to manage risk and find alternative suppliers. Connected data includes global ownership ESG, human rights and climate risks.

Features

• Global Shipping Data over 2.7k carriers and 310k shipper companies
• Including DUNS numbers to enrich data for relevant use cases
• Map supply chains and understand wider risks
• Standardised presentation of vessel movements regardless of countries
• Bi-directional awareness across historically invisible shipping lanes
• Batch access to over 50% of global shipping container traffic
• Including full business family trees, and ultimate beneficial ownership, (UBO)
• Identifying supply chain, environmental, governance and social risk
• Track and evaluate specific supply chain issues for select suppliers
• Identify delays in services or reputational incidents

Benefits

• Batch access to global shipping data for supply chain management
• Global coverage growing daily across the D&B universe
• Deep coverage at granular levels allows tracking and reporting
• Data on specific Harmonised Shipping codes
• Supports supply chain management and risk identification
• Accelerating your supplier and supply chain due diligence
• Global data to find alternative suppliers for supply chain resilience
• Identifying interconnected suppliers where previously unseen
• Compatible for risk management and supply chain use cases
• A project based approach including network identification, cleaning and enrichment

£12,154 a licence a year

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at PublicSector@dnb.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

278801432495685

Contact

Public Sector Team
0800 001234
PublicSector@dnb.com

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: There may be planned maintenance windows as required, however, these will be communicated to the customer.
• System requirements:
  • Access to the Internet for file transfers
  • Web Browser such as Chrome, Internet Explorer, Firefox

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: 24 business hours
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Web chat
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: None or don’t know
• How the web chat support is accessible: Web chat is available through the D&B website or through the product
• Web chat accessibility testing: D&B do not offer any additional support for assistive technology but offer chat and phone mediums
• Onsite support: Yes, at extra cost
• Support levels: D&B have three levels of support available from basic set up and training ranging to bespoke levels of support including technical and project management support and consultancy. A Statement of Works will be drafted with the client prior to a contracted piece of work.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Users have a range of training support available. Most products run a weekly live training webinar with a product expert in attendance, which is free to all subscribers. Additional bespoke webinars can be run for individual user groups if required. A Web based training environment is also available to all users which includes access to product videos and user guides. Our new generation of products also include extensive help sections which also include training videos within the product.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
  • Other
• Other documentation formats: Other formats available upon request
• End-of-contract data extraction: Data can be exported to excel or PDF prior to contract end date.
• End-of-contract process: There will be a loss of access to the application, at the end of the contract.

Using the service

• Web browser interface: No
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: This is a batch or API service to access the D&B data cloud, therefore, the interface will depend upon the service selected.
• Accessibility standards: None or don’t know
• Description of accessibility: This is a batch or API service to access the D&B data cloud, therefore, the interface will depend upon the service selected.
• Accessibility testing: None
• API: Yes
• What users can and can't do using the API: There is online documentation for the API, for batch this is not applicable.
• API documentation: Yes
• API documentation formats:
  • HTML
  • PDF
  • Other
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Additional data variables, can be selected as to customer requirements.

Scaling

• Independence of resources: Autoscaling on the application servers

Analytics

• Service usage metrics: Yes
• Metrics types: Metered product. Usage reported against the available meter (units or dollars)
• Reporting types: Real-time dashboards

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • Other locations
• User control over data storage and processing locations: No
• Datacentre security standards: Supplier-defined controls
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest: Other
• Other data at rest protection approach: NAS storage system is encrypted AES 256 and sit within the DNB network firewall - additionally PGP encryption can be enabled.
• Data sanitisation process: Yes
• Data sanitisation type: Explicit overwriting of storage before reallocation
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: This is not applicable as this service is to access the D&B data cloud for consumption of D&B data.
• Data export formats: Other
• Data import formats: Other

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • Other
• Other protection between networks: As well as a variety of SSH ciphers: aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,aes128-ctr,aes192-ctr,aes256-ctr
• Data protection within supplier network: Other
• Other protection within supplier network: NAS storage system is encrypted AES 256 and sit within the DNB network firewall. NAS storage system is encrypted AES 256 and sit within the DNB network firewall

Availability and resilience

• Guaranteed availability: System is available 99.9% 24*7 except for planned maintenance communicated to the customer. Any outages / downtime outside of this, is communicated immediately with customers and recovery plans will be implemented.
• Approach to resilience: Available on Request
• Outage reporting: 24*7 monitoring for services and application with service alerts and emails to on-call staff and customers.

Identity and authentication

• User authentication needed: Yes
• User authentication: Username or password
• Access restrictions in management interfaces and support channels: All access is role-based. Before a user can access management interfaces and support channels, the user must be approved and assigned to a group with the necessary privileges on a need-to-know, least-privilege basis. Access to any computing resource requires a valid username and complex password.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Username or password
  • Other
• Description of management access authentication: IP authentication; Two-factor authentication is required for VPN access.

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: No audit information available
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: United Registrar of Systems
• ISO/IEC 27001 accreditation date: 03/07/2017
• What the ISO/IEC 27001 doesn’t cover: All 114 controls are included, none are omitted
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: Yes
• Any other security certifications:
  • D&B Business Information Solutions is accredited to IS027001 security standards
  • D&B Business Information Solutions accredited to IS09001 quality standards
  • D&B UK is authorised and regulated by Financial Conduct Authority
  • Dun & Bradstreet Ltd is accredited to Cyber Essentials Standards
  • Dun & Bradstreet Ltd is an approved JOSCAR supplier
  • Dun & Bradstreet Ltd is an approved HELLIOS supplier

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: D&B has published and maintains policies addressing information security and privacy requirements, a Code of Conduct, along with standards and procedures documentation as well, e.g., access provisioning. The Internal Audit group is responsible for evaluating compliance against policy. Internal Audit reports audit findings to the Board and tracks findings to completion. Dun & Bradstreet Ltd is certified to the ISO-27001 framework.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Change tickets are opened in the automated change management system. The ticket describes the reason for the change; who requested the change and at what capacity; description of the requirements, risks and impacts; implementation, test, and back-out plans; scheduling information including analysis of potential conflict with other proposed changes. The ticket is reviewed by a Change Advisory Board at a regularly scheduled meeting. The CAB comprises technical and management representatives of each line of service management, reviews and approved or disapproves all change tickets. After the change is executed it is reviewed for post-change impact and metrics analysis.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Servers are scanned weekly for vulnerabilities. Per Policy, vulnerabilities and patches are deployed based upon the criticality of the vulnerability in-scope.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: A SIEM is in place to provide secure collection of server OS security event logs; network device logs; Internet proxy; host/network IDS/IPS; email gateway, etc. The SIEM analyses and correlates information from the various input sources and provides near-real-time analysis and alerting. D&B also maintains a Security Operations Center (SOC), whose staff responds to alerts originating from the SIEM. Incident response documentation is in place.
• Incident management type: Supplier-defined controls
• Incident management approach: Events are evaluated for scope, impact, initial damage assessment and response level by the CSIRT team, Team members are engaged according to the scope and severity and brought into the Incident Management Team's ECC Call. The team is composed of ancillary groups and SMEs. A response plan is created containment strategy, eradication strategy, evidence retention and investigation steps. Execution is governed by the incident coordinator. Regular reports are created and provided to the CSIRT Team; timing intervals for issuing reports depend on the criticality of the event. The CSIRT team documents lessons learned. Post-incident activity is then undertaken.

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  own business practices and to providing our employees with opportunities to make a positive impact on the environment. As we build upon the foundation established in 2022, we are proud to reaffirm our environmental protection commitment and continue to promote sustainability across all of our operations. Specifically, our Environmental Policy Statement commits us to the following:; • Engage with vendors and suppliers that use progressive and environmentally friendly products, materials, and technology to advance sustainability across our organization. We continue to advance sustainability through migration of our data centres to hybrid cloud environments.; • Adopt internal policies and practices that enhance our energy efficiency management and resource conservation efforts.; • Create healthy work environments that embrace published sustainability guidelines and promote recycling and responsible consumption.; • Foster a global workforce aligned with our corporate sustainability efforts and engaged in environmental projects and issues in their local areas.; • Explore opportunities to save energy, water, and resources, generate less waste, and consume fewer natural resources.; • Set goals and monitor progress of our sustainability efforts through the collection of key data and establishment of corporate objectives

  Covid-19 recovery

  Over the past two centuries, Dun & Bradstreet has helped clients survive financial downturns, recessions, the Great Depression, wars, pandemics and numerous global changes. We have helped our clients weather these storms through the power of better decisioning based on data and analytics.; ; During the Covid-19 pandemic, D&B took several actions to help customers manage risk and enable growth:; ; • COVID-19 Impact Index for customer portfolio, pipeline, or supply chain to provide a robust, dynamic, and integrated view of the key factors impacting a customer’s business;; • ‘Health Scans’ on customer portfolio, pipeline, or supply chain to determine areas of risk and opportunity, which were provided free of charge;; • COVID-19 Commerce Disruption Tracker to share ongoing insights on businesses able to operate, sales, and employment at a global, country, and state/county level; and; • Continued economic insights to support planning.

  Tackling economic inequality

  For nearly two centuries, Dun & Bradstreet has provided businesses with the information they need to grow their operations through data-driven decision-making. In providing information that enables companies to describe the past, thrive in the present, and anticipate the future, and in turn impact the people and organisations they serve, we recognise a responsibility to both lead in good governance and use our data for good. In today’s rapidly changing landscape, our solutions help organizations meet the growing regulatory, ethical and social demands that come with being a responsible business.

  Equal opportunity

  At Dun & Bradstreet, we are committed to creating the best possible workplace and hiring process. We make employment decisions based on merit and do not discriminate based on race, colour, national origin, religion, creed, gender, sexual orientation, gender identity or expression, civil union or marital status, age, citizenship status, disability status, pregnancy, genetic information, protected military or veteran status, ancestry, medical condition (including cancer or genetic characteristics) or any other characteristic protected by law and as set out in our Equal Employment Opportunity Policy, and any other applicable local policies.; ; In 2023 and for the seventh consecutive year, Dun & Bradstreet earned a score of 100 on the Human Rights Campaign Foundation’s Corporate Equality Index, receiving the Equality 100 Award (formerly known as “Best Place to Work for LGBTQ+ Equality”).

  Wellbeing

  The health and well-being of our employees is of utmost importance to Dun & Bradstreet, and we are constantly striving to provide the best possible working environment. This includes comprehensive medical coverage, dental and vision insurance, and proactive and preventative health programs. Health and safety requirements differ across the organization as we follow the local regulations of the countries in which we operate. The work is governed by local health and safety policies as well as our companywide Speak Up and Non-Retaliation Policy, which ensures employees can report any dissatisfaction anonymously or confidentially.

Pricing

• Price: £12,154 a licence a year
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at PublicSector@dnb.com. Tell them what format you need. It will help if you say what assistive technology you use.