Bytes Software Services

Delinea Secret Server

Delinea Secret Server Cloud is a Privilege Access Management (PAM) cloud solution hosted in MS Azure, a highly secure and available platform. Providing password management, with layered built-in security, easy access management for IT admins, robust segregation of role based duties, AES 256 bit encryption, reports to demonstrate compliance. bss13

Features

• Secure vaulting and password management for privileged accounts
• Proactive protection including automated password changing, heartbeat, and configurable policies
• Intelligent work flow including checkout, privileged access request, justification requirements
• Discovery finds service accounts across the entire network
• Custom script support to configure dependencies, hooks, and integrations
• DevOps work flow security via the Secret Server SDK
• Password rotation updates without breaking dependencies
• alerts scheduled or custom help proactively meet compliance obligations
• Granular policy control applies across all devices and teams
• Integrations with SIEM and vulnerability scanners provide visibility

Benefits

• Protect access to tighten your attack surface and build resilience
• Control PAM easily with a simplified interface and streamlined design
• Configure rapidly with wizard-driven setup and configuration
• Avoid significant financial penalties
• Deploy elastically within Thycotic’s enterprise-secure architecture

£905.58 a user a year

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@bytes.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

327494789617673

Contact

Chris Swani
+44 (0) 7951 326815
tenders@bytes.co.uk

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: Constraints are not typically reached however Secret Server Cloud comes with 4TB of storage, additional storage can be purchased and we will provide regular notifications on resource usage. Secret Server also comes with a limit of 10k secrets, reporting on Secret usage is available out of the box and additional secrets can be purchased as required.; Support is provide as per support policy and does not include Activities such as, but not limited to, assistance with setup and configuration or customization of Delinea products and integration; are also not covered under this agreement.
• System requirements:
  • Microsoft Server 2012 or newer
  • .NET Framework: 4.5.1, 4.5.2, or 4.6
  • RAM: 4GB or higher
  • Processor: 4 x Dual Core 2GHz or higher
  • Disk Space: 150MB

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: This is as per our support policy dependent on level of support and Priority level of the issue. Typically between 1hr and 24hrs. Please see https://delinea.com/support for more information.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: No
• Support levels: Delinea have support teams levels 1 to 4; Delinea Offer 3 levels of support standard working hours, premium 24x7 support, and premium plus 24x7 with improved response times and technical account manager. Please see support policy for more details.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Delinea offers a Support and documentation Portal with all documentation, Knowledge Base Articles, Forums and how to videos. We also offer with additional charge an extensive E-Learning library for clients' Administrators, E-Learning for end users. We also have professional services who can help with installations, configurations and provide in-person training if required.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Use inbuilt functionality to export data in XML or CSV format. Reports can also be saved in PDF formats. Clients would instigate Unlimited Admin Mode (4-Eyed approach) and export their data.
• End-of-contract process: Clients have 30 days to export their data, as per EULA, using in built features, after 30 days the instance and data will be deleted using MS Azure secure delete protocols.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Desktop is preferred and more feature rich.
• Service interface: Yes
• User support accessibility: WCAG 2.1 AA or EN 301 549
• Description of service interface: The Interface is a WEB Gui
• Accessibility standards: None or don’t know
• Description of accessibility: Web Giu via browser
• Accessibility testing: We have in house AT users that perform some limited testing.; We also use tools for AT testing:; ace Dev Tools are used for accessibility scanning and pipeline automation; For manual testing we use both nvda and jaws.
• API: Yes
• What users can and can't do using the API: All features can be accessed via API services, for more information please see https://docs.delinea.com/secrets/current/api-scripting
• API documentation: Yes
• API documentation formats:
  • HTML
  • PDF
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: Your logo can be uploaded, and colour scheme can be amended to match corporate colours. Views, dashboards and position of reports can be annonted as per client preference too.

Scaling

• Independence of resources: Azure resources are dynamically allocated up to the limit purchased. there a 4tb and 10k limit incorporated into the standard service. Extra space licence would need to be purchased in advanced and added to the service to go beyond the standard limits.

Analytics

• Service usage metrics: Yes
• Metrics types: Inbuilt report and PBA
• Reporting types:
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

• Supplier type: Reseller (no extras)
• Organisation whose services are being resold: Delinea

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a Tigerscheme qualified provider or a CREST-approved service provider
• Protecting data at rest: Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: Yes
• Data sanitisation type: Deleted data can’t be directly accessed
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: Use inbuilt functionality to export data in XML or CSV format. Clients would instigate Unlimited Admin Mode (4-Eyed approach) and export their data.
• Data export formats:
  • CSV
  • Other
• Other data export formats: XML
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • XML
  • XLS

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: 99.9% uptime availability as per EULA; Availability means that your data is accessible through Secret Server Cloud to authorized personnel when needed. Secret Server Cloud leverages the Azure platform for its High Availability: All services for Secret Server Cloud within Azure are auto-scaling so that during heavy usage, computing resources are automatically increased to ensure uninterrupted service even during the most heavily used times. Customer databases are continuously backed up with a differential backup every hour and a transaction log every 5 minutes. All data on the Azure platform is geo-redundant in the event of an outage or interruption to facilitate immediate disaster failover and recovery. In addition, Secret Server Cloud is protected by a Web Application Firewall (WAF) as an extra layer of protection against malicious scripts and potential Distributed Denial of Service (DDoS) attacks. Secret Server Cloud also takes advantage of Azure’s built in redundancy which generates three copies of each customer’s database that are maintained across fault tolerant nodes to ensure continuous availability
• Approach to resilience: Secret Server Cloud leverages Azure capabilities with high availability, 3 replicas and georedundant backups.; Availability means that your data is accessible through Secret Server Cloud to authorized personnel when needed. Secret Server Cloud leverages the Azure platform for its High Availability: All services for Secret Server Cloud within Azure are auto-scaling so that during heavy usage, computing resources are automatically increased to ensure uninterrupted service even during the most heavily used times. Customer databases are continuously backed up with a differential backup every hour and a transaction log every 5 minutes. All data on the Azure platform is geo-redundant in the event of an outage or interruption to facilitate immediate disaster failover and recovery. In addition, Secret Server Cloud is protected by a Web Application Firewall (WAF) as an extra layer of protection against malicious scripts and potential Distributed Denial of Service (DDoS) attacks. Secret Server Cloud also takes advantage of Azure’s built in redundancy which generates three copies of each customer’s database that are maintained across fault tolerant nodes to ensure continuous availability
• Outage reporting: Yes Alert to clients along with public dashboard status.thycotic.com

Identity and authentication

• User authentication needed: Yes
• User authentication: 2-factor authentication
• Access restrictions in management interfaces and support channels: Secret Server permissions can be configured to prevent administrators access to privileged account information.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • 2-factor authentication
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: Coalfire
• ISO/IEC 27001 accreditation date: 10/06/2021
• What the ISO/IEC 27001 doesn’t cover: The only 2 control objectives that are not in scope:; 11.1.4 Protecting against external and environmental threats. We leverage Azure and AWS physical datacentres, and they manage the physical and environmental controls for these facilities.; 11.1.6 Delivery and loading areas. We do not manage delivery and loading areas of the facilities.
• ISO 28000:2007 certification: No
• CSA STAR certification: Yes
• CSA STAR accreditation date: 25/03/2022
• CSA STAR certification level: Level 1: CSA STAR Self-Assessment
• What the CSA STAR doesn’t cover: Not in scope: Level 2 certification
• PCI certification: No
• Cyber essentials: No
• Cyber essentials plus: No
• Other security certifications: Yes
• Any other security certifications:
  • ISO27001
  • SOC2
  • FIPS 140-2
  • NIST
  • FedRAMP
  • GDPR

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards:
  • CSA CCM version 3.0
  • ISO/IEC 27001
• Information security policies and processes: Delinea is ISO27001 and SOC2 certified. Our software is Common Criteria certified, FIPS 140-2 and NIST-compliant and FedRAMP authorised. Delinea is also GDPR-compliant, comply with EU/US Privacy Shield and CSA STAR certified. Please see our trust centre for more information https://delinea.com/trust-center

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: We follow an AGILE/SCRUM approach to development methodology with some small variations where needed. We use Visual Studio for development, Microsoft VSO (Git) for Source Code Control, and YouTrack for user story/Scrum management.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Vulnerability scans occur before every major application release and as needed as part of our SSDLC. We also monitor and protect against the most critical web application security risks, such as SQL injection, cross site scripting, OWASP Top 10 and Automated Top 20 threats. Our threat data is continuously updated to protect against the latest attacks.; We are subscribed to threat newsletters and vulnerability lists for Microsoft, Amazon AWS, SANS, and US-CERT. When these feeds are updated we review them and take necessary action if there are any findings. We also subscribe to direct vulnerability feeds for software vendors
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: We perform regular vulnerability and penetration testing, monitor threat data and updates. When a security report is filed, either from a customer or discovered internally, the same process occurs. First, each individual reported item is validated and, if valid, it is given a CVSS score. If the vulnerability is of a certain rating, it is addressed immediately. The assessment then must be evaluated by a team lead. If any reported are valid, the response to that item includes when the issue will be addressed and any temporary security measures that can be taken.
• Incident management type: Supplier-defined controls
• Incident management approach: We have incident management plan which is based on ISO27001 and NIST and is SOC2 Audited.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: No

Social Value

• Fighting climate change:

  Fighting climate change

  Delinea complies with all environmental laws, and have a code of ethics which all employees and partners must abide by. We have recycling capabilities and initiatives to reduce unnecessary travel and impact to the environment as well as a charitable giving and matching scheme. As an organisation we allow much of our team to work from home, even more so in the current situation, thereby lowering the environmental impact of travel. Addition we have a travel provider that includes carbon offsetting for travel booked. Many of our servers hosted in the cloud, thereby leveraging larger organisations environmental initiatives e.g. AWS and MS Azure see https://www.microsoft.com/en-us/sustainability and https://www.microsoft.com/en-us/corporate-responsibility/sustainability?activetab=pivot_1:primaryr3 and https://sustainability.aboutamazon.com/ and https://www.salesforce.com/company/sustainability/. We utilise We work in the UK and International counties https://www.wework.com/en-GB who have a strong ethos of global community and echo friendly environments, please see https://www.wework.com/en-GB/mission. For our offices in the USA see https://api-jb
• Covid-19 recovery:

  Covid-19 recovery

  We have taken a number of actions in response to the covid pandemic. We initiated a work from home policy even before the government restrictions were introduced. We have a documented Pandemic policy, which is reviewed and updated at least annually or as needed. Most of our staff are still Woking from home, with the office open with social distancing and hygiene cleaning basis when required. We have covid testing and sanitising stations within the office. We perform regular deep cleaning. In 2020 we ran a customer campaign that made a $25 donation to Coronavirus Relief Fund for every customer review. The Coronavirus Relief Fund is part of Global Giving, a non-profit based in DC, but doing work globally to help with COVID-19 relief efforts.
• Tackling economic inequality:

  Tackling economic inequality

  Delinea have a code of ethics and employment policies that include equality, regular employee reviews and industry audits to ensure we are in line with industry standard. At Delinea; employee diversity is a valuable asset, and every employee is treated with dignity and respect. As explained in the Employee Guide, employees and applicants for employment will be judged on the basis; of their performance and qualifications, without regard to race, creed, gender, religion, national origin, age, disability, political affiliation, matriculation, personal appearance, veteran status, sexual orientation; or any other legally protected characteristic.
• Equal opportunity:

  Equal opportunity

  Delinea have a code of ethics and employment policies that include equality, regular employee reviews and industry audits to ensure we are in line with industry standard. At Delinea; employee diversity is a valuable asset, and every employee is treated with dignity and respect. As explained in the Employee Guide, employees and applicants for employment will be judged on the basis; of their performance and qualifications, without regard to race, creed, gender, religion, national origin, age, disability, political affiliation, matriculation, personal appearance, veteran status, sexual orientation; or any other legally protected characteristic.
• Wellbeing:

  Wellbeing

  At Delinea we value employee wellbeing. We have a chat channel to foster communications and fun. We have bi-annual wellbeing weeks with events and talks scheduled for all employees. We also had some our managers creating a monthly podcast The Mental Manager Podcast for 2020-2021.

Pricing

• Price: £905.58 a user a year
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@bytes.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.