E2E SECURITY CONSULTING LTD
NCSC GovAssure Support Services
GovAssure provides a standardised approach for assessing cyber security across government. It enables Government departments to apply the NCSC Cyber Assessment Framework (CAF) to evaluate the security of critical systems. This service supports organisations completing GovAssure self-assessments across relevant stages and provides independent validation of assessment outcomes where required.
Features
- Supports GovAssure self-assessment stages aligned to government strategy
- Provides independent GovAssure assessment in line with government requirements
- Cyber security consultancy aligned to NCSC guidance and best practice
- Delivery overseen by senior consultants with government assurance experience
- CAF assessments performed by qualified and experienced consultants
- Proven experience supporting Critical National Infrastructure environments
- WebCAF access for submitting assessment evidence and details
- WebCAF access for reviewing assessment evidence and findings
- Assess contributing outcomes and supporting indicators of good practice
Benefits
- Provide assurance against UK Government GovAssure requirements
- Deliver services aligned to NCSC guidance and best practice
- Consultants operate in line with recognised professional ethics
- Align GovAssure findings and recommendations to current NCSC guidance
- Apply CNI experience to ensure relevant, practical recommendations
- Develop targeted improvement plans informing future security investment
- Apply structured consultancy lifecycle from initiation to closure
- Support resolution of assessment challenges at IGP level
- Deliver lessons-learned workshops to share best-practice knowledge
Pricing
Service documents
Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format,
email the supplier at dave.mccaw@e2esc.co.uk.
Tell them what format you need. It will help if you say what assistive technology you use.
Framework
G-Cloud 15
Service ID
2 9 4 8 6 6 6 3 6 4 0 1 4 3 2
Contact
E2E SECURITY CONSULTING LTD
dave mccaw
Telephone: 07502142901
Email: dave.mccaw@e2esc.co.uk
About your service
- Service categories
-
Cloud Support Services
Security Services
- Security risk management
- Security design
- Security audit services
Service scope
- Service constraints
- No constraints
User support
- Email or online ticketing support
- Yes
- Support response times
- All support requests are acknowledged and responded to within four business hours of receipt
- User can manage status and priority of support tickets
- No
- Phone support
- Yes
- Phone support availability
- 9 to 5 (UK time), Monday to Friday
- Web chat support
- No
- Support levels
- All support is available via email or telephone. Requests are categorised as general queries or support tickets (P1–P4) in line with our terms and prioritised accordingly. Support is included in the standard subscription at no additional cost. Enterprise customers are assigned a dedicated technical Customer Success Manager.
Resellers
- Supplier type
- Not a reseller
Staff security
- Staff security clearance
- Conforms to BS7858:2019
- Government security clearance
- Developed Vetting (DV)
Pricing
- Discount for educational organisations
- No
Architecture roles
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Security architect | £850.00 | |
| Lead security architect | £950.00 | |
| Principal security architect | £1,200.00 |
Chief digital and data roles
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Chief information security officer | £1,500.00 |
Cyber security roles
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Lead cyber security audit and assurance | £850.00 | |
| Principal cyber security audit and assurance | £1,100.00 |
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Associate cyber security governance and risk manager | £850.00 | |
| Lead cyber security governance and risk manager | £1,100.00 | |
| Principal cyber security governance and risk manager | £1,200.00 |
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Associate cyber security secure systems architecture and design | £500.00 | |
| Lead cyber security secure systems architecture and design | £850.00 | |
| Principal cyber security secure systems architecture and design | £1,200.00 |
Product and delivery roles
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Associate delivery manager | £500.00 | |
| Delivery manager | £650.00 | |
| Senior delivery manager | £750.00 | |
| Head of (Agile) delivery management | £1,200.00 |
Non-mandatory Standards and certifications
- ISO/IEC 27001 certification
- No
- ISO 28000:2022 certification
- No
- ISO 9001 certification
- No
- Quality management systems (QMS)
- No
- CSA STAR certification
- No
- PCI certification
- No
- Cyber essentials
- No
- Cyber Essentials Alternative
- In relation to the services you do not have a current and valid Cyber Essentials certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials certificate by one of the government approved accreditation bodies within 12 months of the date of award.
- Cyber essentials plus
- No
- Cyber Essentials Alternative
- In relation to the services you do not have a current and valid Cyber Essentials Plus certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials Plus certificate by one of the government approved accreditation bodies within 12 months of the date of award.
- Other security certifications
- No
Social value
- Section B - Commitment for Future: Delivery
-
-
Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.
Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority
- New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
- Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
- Plans to engage the contract workforce in deciding the most important workplace issues to address
- Ensuring new workers are informed of their right to join a trade union
- Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
- Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
- Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
- Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
- Activities to cascade good practice on fair working conditions throughout the supply chain
- Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave
- Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
- Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
- Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
- Plans for an appropriate income replacement policy for staff who are required to spend time away from work to care for a sick dependent or close relative
- Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
- Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
- Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas
- Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
- Volunteering opportunities for staff
- Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
- Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
- Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling
- How these flow down the supply chain and are monitored Illustrative examples include reporting, site visits, audits, etc.
- How to ensure business decisions re: price/cost, short lead times, payment timescales do not create modern slavery risks in the supply chain
- How the supplier will work with NGOs, trade unions or other businesses to address modern slavery risk
- Means of influencing staff, suppliers, customers, communities and/or any other appropriate stakeholders with respect to modern slavery risks relating to the contract
-
Service documents
Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format,
email the supplier at dave.mccaw@e2esc.co.uk.
Tell them what format you need. It will help if you say what assistive technology you use.