Integrity360 Ltd

CyberArk Privilege Cloud

Satisfy fundamental privileged access security requirements by utilizing CyberArk’s expertise to manage the underlying infrastructure. With CyberArk Privilege Cloud, organisations can empower security and IT operations to focus on high-level tasks critical to the organisation’s security posture.


  • Privileged account secure storage
  • Rotation of privileged account credentials
  • Isolation of privileged sessions using jump servers
  • Recording of privileged sessions
  • Proxying of privileged sessions from desktops
  • Audit of all privileged account access
  • Multi-factor authentication
  • Role-based access to defined privileged credentials


  • Protection of privileged accounts from external threats or rogue insiders
  • Secure access to infrastructure using privileged accounts
  • Full audit trail and recording of all access
  • Accountability for all privileged account activity


£725 a user

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at Tell them what format you need. It will help if you say what assistive technology you use.


G-Cloud 13

Service ID

3 3 2 6 4 3 5 1 1 9 3 6 5 1 9


Integrity360 Ltd Paul Momirovski
Telephone: 003531293 4027

Service scope

Service constraints
Some devices may require the download/installation of plugins to enable privileged account management. Others may require connectors to be created from scratch by partners and/or CyberArk.
System requirements
  • Windows 2012/2016 Server
  • Quad core processer
  • Min 8GB RAM
  • Min 80GB available disk space
  • This is required for the cloud connector server

User support

Email or online ticketing support
Email or online ticketing
Support response times
1 hour.
User can manage status and priority of support tickets
Online ticketing support accessibility
WCAG 2.1 AA or EN 301 549
Phone support
Phone support availability
24 hours, 7 days a week
Web chat support
Onsite support
Yes, at extra cost
Support levels
24x7 Helpdesk support
Professional Services for deployment and post-installation modifications
Technical Account Management as an ongoing service
Free Customer Success assistance to guide the PAM Program
Support available to third parties

Onboarding and offboarding

Getting started
CyberArk provides detailed documentation on the CyberArk Docs site. CyberArk and it's partners can also provide Professional Services to new and existing customers for this purpose.
Service documentation
Documentation formats
  • HTML
  • PDF
  • Other
Other documentation formats
PowerPoint slide decks or Video
End-of-contract data extraction
Data is made available upon request.
End-of-contract process
After a specified period of time the tenant and the data is holds it deleted from the cloud service.

Using the service

Web browser interface
Using the web interface
Users can use the web interface to authenticate themselves and access a CyberArk PAS deployment, retrieve credentials, initiate privileged sessions, and view audit records and recordings.
Web interface accessibility standard
None or don’t know
How the web interface is accessible
Via any internet connected web browser.
Web interface accessibility testing
Not applicable.
What users can and can't do using the API
Users can add, retrieve, modify or remove privileged credentials from the service as well as recover access logs, recordings and other associated metadata.
API automation tools
  • Ansible
  • Chef
  • OpenStack
  • SaltStack
  • Terraform
  • Puppet
API documentation
API documentation formats
  • Open API (also known as Swagger)
  • PDF
  • Other
Command line interface


Scaling available
Scaling type
Independence of resources
Each customer is provisioned a single tenant separated by schema to ensure security and continuity of tenant. Tenants are hosted on an AWS cloud service which scales with demand. CyberArk makes use of 3 availability zones in AWS to ensure uptime. In addition, users can be segregated into sets based on their demands, each set is a discrete instance with associated resource.
Usage notifications
Usage reporting
  • Email
  • Other


Infrastructure or application metrics
Metrics types
Other metrics
Service status
Reporting types
Real-time dashboards


Supplier type
Reseller providing extra features and support
Organisation whose services are being resold

Staff security

Staff security clearance
Conforms to BS7858:2019
Government security clearance
Up to Developed Vetting (DV)

Asset protection

Knowledge of data storage and processing locations
Data storage and processing locations
  • European Economic Area (EEA)
  • Other locations
User control over data storage and processing locations
Datacentre security standards
Supplier-defined controls
Penetration testing frequency
At least every 6 months
Penetration testing approach
Protecting data at rest
Encryption of all physical media
Data sanitisation process
Data sanitisation type
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
Equipment disposal approach
Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Backup and recovery

Backup and recovery
What’s backed up
Privileged accounts and associated audit logs, recordings, and metadata
Backup controls
Users can take point in time backups of policy and configuration as data exports. All other aspects of backup are controlled by the vendor.
Datacentre setup
Multiple datacentres with disaster recovery
Scheduling backups
Supplier controls the whole backup schedule
Backup recovery
  • Users can recover backups themselves, for example through a web interface
  • Users contact the support team

Data-in-transit protection

Data protection between buyer and supplier networks
  • Private network or public sector network
  • Other
Other protection between networks
CyberArk proprietary VPN between SaaS and customer's infrastructure. Integrity360 also provides encryption and secure transit services.
Data protection within supplier network
Other protection within supplier network
CyberArk uses advanced encryption algorithms to protect data at rest and DLP to restrict data access to intended audience.

Availability and resilience

Guaranteed availability
Approach to resilience
Deployed on an AWS platform and resides in three different Availability Zones (AZ), in case of outages in one of the AZ data-centers. Each AZ includes the application and all the supported entities that are required for the proper functionality of the solution, and monitoring.
Outage reporting
Public dashboard and Email Alert.

Identity and authentication

User authentication
  • 2-factor authentication
  • Identity federation with existing provider (for example Google apps)
  • Other
Other user authentication
CyberArk supports and recommends integration with an existing user directory, e.g. Active Directory, as well as the use of a multi-factor authentication solution that supports either the RADIUS or SAML protocol for access to the solution.
Access restrictions in management interfaces and support channels
Management interface is controlled by RBAC. Support access with CyberArk requires users to be registered and also take have completed training and passed the Defender exam.
Access restriction testing frequency
At least every 6 months
Management access authentication
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Other
Description of management access authentication
In the same way as user access is authenticated , users can access using the PVWA, the REST API and also via PSM or PSM/P and in addition users can use CyberArk in built authentication.
Devices users manage the service through
Directly from any device which may also be used for normal business (for example web browsing or viewing external email)

Audit information for users

Access to user activity audit information
Users have access to real-time audit information
How long user audit data is stored for
Access to supplier activity audit information
Users have access to real-time audit information
How long supplier audit data is stored for
How long system logs are stored for

Standards and certifications

ISO/IEC 27001 certification
Who accredited the ISO/IEC 27001
Standards Institute Israel
ISO/IEC 27001 accreditation date
What the ISO/IEC 27001 doesn’t cover
Not applicable - the certificate is applicable to Business processes: Research, development, sales and support of information security solutions and technologies.
ISO 28000:2007 certification
CSA STAR certification
CSA STAR accreditation date
CSA STAR certification level
Level 1: CSA STAR Self-Assessment
What the CSA STAR doesn’t cover
Not applicable - CyberArk’s products are listed as level 1 on the Cloud Security Alliance’s Security Trust Assurance and Risk (STAR) registry. This encompasses key principles of transparency, rigorous auditing, cloud security, and privacy best practices. This information can be found here:
PCI certification
Cyber essentials
Cyber essentials plus
Other security certifications
Any other security certifications
  • ISO 9001
  • NISA certified
  • VPAT 508
  • FIPS 140-2
  • NIST 800
  • SOC2 certified

Security governance

Named board-level person responsible for service security
Security governance certified
Security governance standards
ISO/IEC 27001
Information security policies and processes
ISO 27001

Operational security

Configuration and change management standard
Supplier-defined controls
Configuration and change management approach
Supplier-defined controls.
Vulnerability management type
Supplier-defined controls
Vulnerability management approach
As opposed to other cloud service providers who only provide a service but use 3rd-party technologies, CyberArk developed all the technologies it uses from scratch and only uses standard servers and routers (no 3rd-party technologies). This allows much more flexibility and rapid reaction to new threats and attack vectors as we do not have to wait for updates and patches – we do them ourselves immediately. In order to fight todays sophisticated and constantly changing attack patterns we have CyberArk’s 24x7 SOC - manned with security experts that can handle any attack in real time.
Protective monitoring type
Supplier-defined controls
Protective monitoring approach
Available on request.
Incident management type
Supplier-defined controls
Incident management approach
We have defined process of incident response and an incident response team whose responsibilities include: Analysis of the security issue risk (based on Severity Matrix and CVSS), remediation and recommendation. SLA of handling the issue according to the risk level. In case the decision is to fix, the fix is like any standard feature\bug development, including validation (QA) and automation. Security bulletin - in case a security issue found risky, and requires patch, we have a mechanism of publishing "security bulleting" to our customers. This bulletin contains explanation of the issue, and mitigation steps (including patch if needed).

Secure development

Approach to secure software development best practice
Conforms to a recognised standard, but self-assessed

Separation between users

Virtualisation technology used to keep applications and users sharing the same infrastructure apart

Energy efficiency

Energy-efficient datacentres
Description of energy efficient datacentres
CyberArk SaaS solutions are hosted on AWS. AWS is continuously working to increase the efficiency of our facilities, and our scale allows us to achieve higher resource utilization and efficiency than typical on-premises data centers. When possible, we incorporate direct evaporative technology for cooling our data centers, reducing energy and water consumption. During cooler months, outside air is directly supplied to the data center without using any water. During the hottest months of the year, outside air is cooled through an evaporative process using water before being pushed into the server rooms, and we have optimized our cooling systems to minimize water usage. AWS has also demonstrated our commitment to water stewardship by using reclaimed or recycled water instead of potable water in multiple regions, and we are working with local utilities to expand the use of reclaimed water.

Social Value

Fighting climate change

Fighting climate change

We recognize the importance of reducing our impact on the environment and maximizing sustainable business practices. As an enterprise software company, our environmental footprint is smaller than organizations of comparable size in other industries. Most of our IT infrastructure runs in a public cloud environment, which reduces our total environmental impact dramatically. As we think about our data center planning, one of the considerations that we take into account is the environmental footprint and our overall computing capacity, which includes moving 85% of our applications to SaaS. In early 2021, we expanded our local efforts and created a global environmental team to implement a more comprehensive environmental employee-led stewardship program, an important part of our ESG Program. The Nominating and Corporate Governance Committee has oversight over our Environmental Stewardship as part of the ESG Program.
Covid-19 recovery

Covid-19 recovery

The COVID-19 pandemic increased our focus on the health, safety and wellness of our employees. At the outset of the COVID-19 pandemic, we shifted our operations to enable employees to work from home and have since implemented permanent flexible work arrangements for our employees. In addition, we increased our level of communication with employees, including implementing regular executive roundtable discussions, ask-management sessions and an employee intranet portal focused on wellness, along with a source of comprehensive information for employees on a wide range of important topics.
Tackling economic inequality

Tackling economic inequality

Equal opportunity

Equal opportunity

Diversity, Equity and Inclusion are critical to the successful execution of our strategy to bring different perspectives to
the table, strengthen decision-making processes, drive innovation and create a strong community that helps ensure
our employees are given fair and equal opportunities. Given its importance to our overall strategy execution, our Diversity, Equity and Inclusion (DEI) Program is overseen by the Compensation Committee and the Board. Our CHRO provides the Compensation Committee with regular updates on gender pay and diversity awareness programs. Globally, our diversity initiatives are focused on gender representation and on the regional level, we are implementing programs geared toward supporting underrepresented groups in each of our geographies.


Our people are our most valuable assets. We are committed to attracting top talent, as well as retaining and developing our employees. Our Chief Human Resources Officer (CHRO), who reports directly to our Chief Executive Officer (CEO), oversees our broad and comprehensive initiatives to promote a strong, diverse and inclusive culture, which we believe contributes to our business success. Empowering our people to be the “best version of you” rests upon a holistic foundational strategy that includes employee engagement, learning and development opportunities, workplace flexibility and great benefits.


£725 a user
Discount for educational organisations
Free trial available

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at Tell them what format you need. It will help if you say what assistive technology you use.