LEONARDO UK LTD

Vulnerability Management Service

Vulnerability Management maintains an inventory of systems and applications, and keeps track of these elements and the vulnerabilities putting them at risk. This Service gives you control over a prioritised list of vulnerabilities, the best way to patch them, and draft reports itemising and verifying your reparative process.

Features

• External scanning
• Internal scanning
• Accurate and detailed vulnerability results
• Risk based approach toward vulnerability management
• Ability to track individual assets
• Ability to assign criticality
• Ability to assign owners

Benefits

• Improvement of resilience to cyber-threats
• Reduction of a large administrative overhead
• Freeing staff up for cyber security projects (for example)
• Making staff available for continuous improvement activity
• Prioritisation of where to focus your patching effort

£594 to £1,478 an instance a day

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at ukcyberservices@leonardo.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

280755625887246

Contact

Liz Owens
07801 714087
ukcyberservices@leonardo.com

Planning

• Planning service: Yes
• How the planning service works: Leonardo provides a number of services to help buyers implement cloud hosting services. Our planning services are applicable to all kinds of cloud hosting environments. • Organisation Design for the Cloud • Transition to the Cloud and SIAM • Cloud Service Sourcing and Implementation • Cloud Service Strategy and Intelligence • Cloud Service Architecture Assurance • Cloud Migration Planning and Delivery Management • Cloud Services Assurance • Requirements Management Services • Designing and Developing Cloud Architecture Service • Cloud Security Architecture
• Planning service works with specific services: No

Training

• Training service provided: Yes
• How the training service works: All Leonardo Cyber Security Services can be supported with customer training, personal and organisational development
• Training is tied to specific services: No

Setup and migration

• Setup or migration service available: Yes
• How the setup or migration service works: Leonardo provide the following services to help buyers migrate to the cloud or between cloud services; • Organisation Design for the Cloud • Transition to the Cloud and SIAM • Cloud Service Sourcing and Implementation • Cloud Service Strategy and Intelligence • Cloud Service Architecture Assurance • Cloud Migration Planning and Delivery
• Setup or migration service is for specific cloud services: No

Quality assurance and performance testing

• Quality assurance and performance testing service: Yes
• How the quality assurance and performance testing works: Leonardo provides a number of services to help buyers quality assure and performance test their Cloud environments. We would be happy to discuss individual requirements with in this area with Clients

Security testing

• Security services: Yes
• Security services type:
  • Security strategy
  • Security risk management
  • Security design
  • Cyber security consultancy
  • Security testing
  • Security incident management
  • Security audit services
• Certified security testers: Yes
• Security testing certifications:
  • CHECK
  • CREST
  • Tigerscheme
  • Cyber Scheme

Ongoing support

• Ongoing support service: Yes
• Types of service supported: Hosting or software provided by a third-party organisation
• How the support service works: Leonardo’s Cloud Support services include; • Assured Cloud Delivery Service • Delivery Assurance Service • Cloud Infrastructure Delivery Management

Service scope

• Service constraints: There are no constraints

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Standard email support in line with phone support: 9 to 5 (UK time), Monday to Friday. Extended support provision at weekends and 24/7 is accommodated for all SOC services, where required.; ; Leonardo typically uses Microsoft Outlook for email. Microsoft has designed Office365 with the requirements of EN 301 549, WCAG 2.0 AA and US Section 508 in mind. Further details can be found at https://www.microsoft.com/en-gb/accessibility/office
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.1 AA or EN 301 549
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: Web chat
• Web chat support availability: 24 hours, 7 days a week
• Web chat support accessibility standard: WCAG 2.1 AA or EN 301 549
• Web chat accessibility testing: Leonardo typically uses Microsoft Skype for Business 2016 for web chat. Microsoft has designed Office365 with the requirements of EN 301 549, WCAG 2.0 AA and US Section 508 in mind. Further details can be found at https://www.microsoft.com/en-gb/accessibility/office
• Support levels: Leonardo’s Cloud Support services include; • Assured Cloud Delivery Service • Delivery Assurance Service • Cloud Infrastructure Delivery Management

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Developed Vetting (DV)

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: Lloyd's Register Quality Assurance Limited
• ISO/IEC 27001 accreditation date: 31/03/2021
• What the ISO/IEC 27001 doesn’t cover: N/A
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: Yes
• Any other security certifications:
  • NCSC certified consultancy
  • ISO44001
  • ISO9001

Social Value

• Fighting climate change:

  Fighting climate change

  Fighting climate change – effective stewardship of the; Environment.; Leonardo has been pursuing a path of sustainability that integrates environmental issues; into our business strategy. We closely monitor the energy consumption and carbon; emissions footprint of our UK sites and incorporate innovative solutions to reduce our; environmental impact continuously.; ; Leonardo also ranked as the Aerospace and Defence Industry leader in the Dow Jones Sustainability Indices for the third year running and achieved an A rating in the Carbon Disclosure Project 2021 Climate List. Leonardo's dedicated Sustainability Integrated Project Team published our first Carbon Reduction Plan in September 2021. The team has partnered with external scientific; Consultants to ensure a forensic analysis of our carbon footprint and; identify priority actions to support our decarbonisation strategy and a pathway to net zero.; In order to challenge ourselves, we have set the; following targets:; • Reduce carbon emissions 40% by 2025 against a 2018 baseline; • Achieve Net Zero by 2030 for Scope 1 & 2 emissions, and by 2050 across our value; chain; • Generate up to 25% of our total energy through localised energy generation; within 5 years.; ; Summary of recent current activity:; • All of the energy consumed by Leonardo in the UK is from certified renewable; sources. Leonardo has been purchasing 100% green energy since 2016; • Between 2018 and 2020, we achieved a 22% reduction in our Scope 1 & 2; emissions with an almost equal divisional split across our Helicopters and Electronics; / Cyber businesses.; ; • Both of our Helicopters and Electronics divisions hold ISO5001-2018; certification that requires a robust methodology in place. ; ; To further our commitment to reducing our environmental impact and providing greater transparency, Leonardo is aiming to achieve ISO14064-1 accreditation within 3 years for all UK operations.
• Covid-19 recovery:

  Covid-19 recovery

  COVID-19 Recovery – helping our workforce, local communities,; and businesses recover from the impact of the coronavirus; pandemic ; ; Helping our workforce recover; Leonardo is proud to have demonstrated operational and financial resilience throughout; the coronavirus pandemic. Some of our engineering workforce were categorised as; essential workers by the UK government and none of the broader workforce were placed; on furlough, protecting the livelihoods of over 7,500 employees. We successfully adapted; our approach to delivering our contracts and provided internal support to our workforce, also; prioritising physical and mental wellbeing with expertise beyond our organisation.; We’ve long seen it as essential to move towards a model where our teams are empowered; to decide where and how they work and our remote working experiences were fast tracked; by the pandemic. In 2020 we launched ‘Custom Working’ as our new model of work. In; parallel, Leonardo’s approach to delivering internal wellbeing initiatives were also enhanced; to support this new model.; ; An improvement in our wellbeing support was the introduction of the Thrive: Mental; Wellbeing App, to complement our holistic Employee Assistance Programme (EAP). The; app offers 24/7 support, grounded in CBT (Cognitive Behavioural Therapy) techniques. ; ; Helping local communities recover; Additionally, several of Leonardo’s ongoing business and social value activities have; continued and adapted throughout the pandemic for the betterment of our communities. For; example:; ; Leonardo employees across the UK also answered the national call in response to; the Covid-19 emergency, to manufacture Personal Protective Equipment (PPE); required to help protect NHS staff and critical workers in the communities; surrounding the company's UK sites. Leonardo employees turned their engineering skills to the production of protective face shields for key workers. ; ; The Apprentice and Student Association based at the Yeovil site, also continued to; fundraise for Mind in Somerset, a mental health charity.
• Tackling economic inequality:

  Tackling economic inequality

  Tackling economic inequality – new businesses, new jobs, new; skills, supply chain resilience ; New businesses, new jobs, new skills; Leonardo employs over 7,500 people across UK regions in seven locations: Yeovil,; Edinburgh, Luton, Basildon, Southampton, Bristol, and Lincoln. 67% of our workforce hold; highly skilled positions. We are one of the UK’s largest employers of engineering; apprentices and graduates, investing around £3.5 million on employee training and; development annually, and actively support STEM curricula. Alongside our own workforce,; Leonardo is committed to the socioeconomic development of the UK through our smart, local; supply chain partnerships, predominantly with SMEs (71% as of 2020).; Leonardo is committed to maintaining its skilled workforce and recognises the need to; expand the UK’s pool of engineering resources and drive employee retention. We operate a; nationwide education programme around company sites, aimed at encouraging young; people to pursue STEM. In the post-Covid-19 environment, Leonardo offers greater flexibility; and mobility for up to 75% of our workforce as part of its retention initiatives. Furthermore,; to address any potential challenges to in-work progression for staff, we have renewed our; efforts to train and develop incumbent colleagues.; Amongst Leonardo's early career programmes, we continue to run an excellent apprentice; scheme, which was rated "Outstanding" by Ofsted in 2019. We have a retention rate of; 87% (after six years), and 45% of all apprentices are promoted within two years. ; At any one time, Leonardo has over 500 people on a range of training schemes at our sites; across the UK. Leonardo also runs an award-winning STEM Returners programme that supports highly; skilled professionals to return to the industry after a career break. Leonardo understands the; value that lies in an often-overlooked talent pool with a higher percentage of women and; engineers from an ethnic minority background.
• Equal opportunity:

  Equal opportunity

  Equal opportunity – reducing disability employment gap,; Tackling workforce inequality, including modern slavery ; ; Leonardo is proud to be an exemplary fair and inclusive employer, embracing diversity,; supporting its local economies, being a customer of choice for its supply-chain ecosystems; and a valued supplier to our customers. We promote an active Inclusion and Diversity; (I&D) Strategy to foster a welcoming work environment where everyone feels they can be; themselves.; We have set ambitious targets as part of our I&D programme. This includes achieving a; 70:30 gender balance by 2025, closing the Gender and Ethnicity Pay Gap and attaining; the Disability Confident Award, having already attained the Committed Award in 2021; ahead of schedule.; To reduce the disability employment gap, Leonardo has ring-fenced a number of Apprentice; roles for candidates with a disability or neurodiverse condition as part of our 2022 intake.; Leonardo has identified external partners to help showcase these opportunities to these; candidates who will then be supported with tailored development upon joining the; organisation.; ; To establish a voice amongst underrepresented employees and tackle workforce inequality; we have created Network Groups for the following groups: people with disabilities and; neurodiverse conditions, people with caring responsibilities, gender balance and our; LBGTQ+ community. Each Network Group is engaged in promoting awareness of how best; to support other colleagues and recommending initiatives for a more inclusive workplace. ; Leonardo also conducts quarterly GLINT employee surveys to derive data with the objective of reducing attrition and anticipating staff needs. We have now also strengthened our communications surrounding the results and the implementation challenges as requested by employees. Leonardo is also a signatory to the Armed Forces Covenant and in 2018, was awarded the MoD’s Employer Recognition Scheme Gold Award for employing veterans.
• Wellbeing:

  Wellbeing

  Wellbeing – improving health and wellbeing, improving; community integration ; ; At Leonardo, we believe that our employees work best when they can achieve a work-life; balance. That is why we are committed to designing policies and developing a working; environment that promotes the benefits and wellbeing of all our employees. All employees; can access an Employee Assistance Programme (EAP), Learning and Development; material via Coursera, and parental or dependent leave. In response to the COVID-19; pandemic, we also have introduced Custom Working for up to 75% of our office-based; staff. Employees are regularly encouraged to engage in physical activity and team bonding for better mental health through UK wide initiatives such as the ‘Race to Space’ event. This; initiative challenged our employees to clock up a join total of 46,000km, which is the; approximate distance from Earth to the Galileo satellite constellation and back by any; physical means. Sending the message to our people of the importance of health and wellbeing. Beyond our own workforce, at Leonardo we recognise our responsibility to enrich local communities socially and economically in equal measure. Our efforts are also published on our external website to inform suppliers, customers, and communities of our commitment to social value. Our catalogue of academic programmes offers students an opportunity to deepen their understanding of STEM throughout their school and post-16 careers. Our company-wide STEM Ambassadors support efforts in Leonardo's local communities in partnership with existing initiatives and organisations. In Yeovil, Leonardo UK in partnership with the Royal Aeronautical Society hosted Cool Aeronautics for over 400 primary school students: they worked with Leonardo UK colleagues directly on Engineering projects. Leonardo graduate trainees also volunteer at the chosen charities; in 2019, they offered more than 450 hours to the two charities, including building a ’sensory garden’ at a preschool.

Pricing

• Price: £594 to £1,478 an instance a day
• Discount for educational organisations: No

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at ukcyberservices@leonardo.com. Tell them what format you need. It will help if you say what assistive technology you use.