Wavenet

DUO MFA

Effective Multi-Factor Authentication (MFA) protects your applications by using a second source of validation, like a phone or token, to verify user identity before granting access. Duo is engineered to provide a simple, streamlined login experience for every user and application, it integrates easily with your existing technology.

Features

• Single Sign-On
• Adaptive Single Sign On
• Universal Directory
• Lifecycle Management (provisioning)
• Advanced Server Access
• Multi Factor Authentication
• Adaptive Multifactor Authentication
• CIAM (Customer Identity)
• Integration to Active Directory
• API Access Management

Benefits

• Securely store users and passwords
• Enforce password policies
• Seamless access from any device or location
• Reduced help desk cost and password resets
• Passwordless experience
• Reduce users and customers IT friction
• Automate joiner, mover, leaver process
• Increased security, including instant account deprovisioning
• Reduce audit time and risk
• No hardware, quick to deploy

£3 to £25 a licence a month

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at publicsector@wavenet.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

352090293643681

Contact

Joe Ewins
0333 234 0011
publicsector@wavenet.co.uk

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: Some main integration partners include:; AzureAD; On Premise LDAP; Slack; Box; Office 365; Salesforce
• Cloud deployment model: Public cloud
• Service constraints: Some performance and operational features may be limited by an endpoint device manufacturer or the end device operating system, or an application or website provider. Such issues would be beyond the control of the Cisco Duo service. A variety of Auth methods are available meaning customers should only be limited by the application providers available connection interfaces. See http://www.duo.com/docs for more information.; Details of any specific manufacturer service optional or performance constraints or limitations will be set out at:; https://www.cisco.com/c/en/us/about/legal/cloud-and-software/cloud-terms.html .
• System requirements: Appropriate Licensing and Access for integration

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: This would form part of a managed service SLA or ADHOC support event. Normal response times are 9-5 weekdays and 4 hours for standard support. Other service levels are available.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Monday to Friday 9am - 5pm exc. Bank Holidays, Extended hours support available at extra cost.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Requirements can vary per solution and we would encourage buyers to contact us for clarification.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: Optional Services can be purchased in order to provide assistance in the data extraction process.
• End-of-contract process: Duo is a subscription based software so customers will have the opportunity to renew their licence's before their contract comes to an end, If the customer chooses not to renew, the contract is ended.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: Yes
• Compatible operating systems:
  • Android
  • IOS
  • MacOS
  • Windows
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Duo web portal is primarily for administration and the mobile device app for authentication, however other services / functionality is dependant on the use case.
• Service interface: No
• User support accessibility: WCAG 2.1 AA or EN 301 549
• API: No
• Customisation available: Yes
• Description of customisation: Modular licensing allows for specific solution creation per customer.

Scaling

• Independence of resources: Identity is always on. Any fault in infrastructure is contained using a High Availability (HA) cloud scale architecture, and even in case of an entire datacenter going down, another in a different geography takes ownership of the affected accounts within an hour.

Analytics

• Service usage metrics: No

Resellers

• Supplier type: Reseller providing extra support
• Organisation whose services are being resold: Cisco

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Supplier-defined controls
• Penetration testing frequency: Never
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v3.0
  • Encryption of all physical media
• Data sanitisation process: No
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Optional Services can be purchased in order to provide assistance in the data extraction process.
• Data export formats:
  • CSV
  • Other
• Other data export formats: LDIF
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • LDIF
  • Microsoft EntraID

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Identity is Always On
• Approach to resilience: Any fault in infrastructure is contained using a High Availability (HA) cloud scale architecture, and even in case of an entire datacenter going down, another in a different geography takes ownership of the affected accounts within an hour.
• Outage reporting: Users will also receive email alerts informing them of the problem, estimated outage time and a further email once fully restored.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
  • Other
• Other user authentication: There a multiple authentication options including inbound SAML, oauth2.0, username and password and multi factor authentication.
• Access restrictions in management interfaces and support channels: Access to support channels is only granted to administrative users and security check is carried out when a user raises a support ticket. Management interfaces is also locked down to administrative users.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
  • Other
• Description of management access authentication: Users are defined as administrators within the service itself. Access is determined based on delegated administration rights.

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: Between 6 months and 12 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: Between 6 months and 12 months
• How long system logs are stored for: Between 6 months and 12 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: URS
• ISO/IEC 27001 accreditation date: June 2023
• What the ISO/IEC 27001 doesn’t cover: A10.1.2 (we do not create encryption keys)
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: Yes
• Any other security certifications: Crest certified (January 2024)

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Wavenet is an ISO27001 certified company and we adhear to the standard, we are audited on this standard annually, Wavenet is also a CE+ certified company

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Wavenet conform to ISO2000
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Wavenet conform to and follow the NIST standard and ISO27002
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: We have continual monitoring with EDR solution feeding into a SIEM that is monitored 24/7 that is monitored by SOC
• Incident management type: Supplier-defined controls
• Incident management approach: Wavenet is ISO27001 certified and we follow the playbook as part of our certification.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  At Wavenet we recognise that we are accountable to more than just our shareholders. As a large business with a significant workforce and offices nationwide, we are working hard to incorporate considerations around sustainability into every business process, reducing our impact on the world around us. ; ; We understand our responsibility to society and the environment. Achieving the Ecovadis Gold certification validates our comprehensive approach spanning environmental concerns, ethical business practices, human rights, and sustainable procurement. Our journey towards Ecovadis Platinum by 2024 underscores our ongoing commitment to progress.; ; Innovation at Wavenet is synonymous with sustainability. Our product portfolio prioritises eco-conscious solutions, empowering customers to embrace sustainable technologies. Whether it's our hardware-free hosted voice systems or energy-efficient cloud computing solutions, we facilitate choices that minimise environmental impact and enhance operational efficiency. Our stringent processes ensure sustainability throughout the product lifecycle, from ethical sourcing practices to responsible disposal of legacy equipment in compliance with UK regulations.; ; People and processes are pivotal in our sustainability mission. Through a formal Carbon Reduction Plan, we rigorously monitor and mitigate our environmental footprint, engaging our workforce in initiatives aimed at conserving natural resources. Despite pandemic-induced reductions in business travel, we remain committed to sustainable mobility solutions. Our transition to hybrid and electric vehicles, coupled with employee incentives like the electric car scheme and Cycle to Work program, reflects our dedication to greener commuting alternatives.; ; Crucially, sustainability isn't just a top-down directive; it's ingrained in our corporate culture. Our workforce actively participates in planning and executing sustainability initiatives, with dedicated champions driving eco-friendly practices both in our offices and beyond. From recycling initiatives to lifestyle changes promoting environmental consciousness, our employees play a pivotal role in fostering a sustainable future, both within Wavenet and in their communities.

  Covid-19 recovery

  In the wake of the UK's exit from lockdown restrictions, Wavenet initiated a more flexible approach to workplace dynamics. Departing from the conventional mandate of requiring colleagues to be physically present in the office five days a week, the company encouraged a shift towards a hybrid model. Initially, colleagues were urged to return to the office for two days weekly, a measure subsequently extended to three days. This adjustment has yielded numerous benefits, notably fostering enhanced collaboration and bolstering team cohesion.; ; Acknowledging the concerns of colleagues hesitant to resume office attendance, Wavenet proactively conducted welfare meetings with them. These discussions served to elucidate individual apprehensions and collaboratively devise strategies to facilitate a smooth transition back to the office environment.; ; The employment environment has changed as the company has adopted a more flexible working style, with employees spending less hours in the office each week. This adjustment has reduced office congestion, making it easier to follow health-related social distancing guidelines. With fewer people in the workspace at once, colleagues may keep safe distances, reducing the risks of close contact. While new recruits are contractually designated the office as their permanent place of work, they are expected, in practice, to be physically present for a maximum of three days per week.; ; In response to the challenges precipitated by the COVID-19 pandemic, Wavenet has expanded its benefits package. Notably, the introduction of an Employee Assistance Programme underscores the company's commitment to supporting the holistic well-being of its workforce. Furthermore, recognising the importance of nurturing emerging talent and contributing to community development, Wavenet has embarked on an initiative to onboard apprentices. This endeavour not only fuels the company's growth trajectory but also offers invaluable work experience and formal qualifications to aspiring individuals seeking entry into the job market.

  Tackling economic inequality

  Wavenet's commitment to economic equality and social responsibility was solidified in 2023 when we became a Living Wage Employer, guaranteeing all employees a wage that aligns with the actual cost of living in the UK. This dedication was reaffirmed in May 2024 when the company implemented a 10% increase in line with rising living costs.; ; The Living Wage Foundation's meticulous methodology is the bedrock of our fair wage practices. Each year, they rigorously compute the cost of a standard shopping basket, encompassing essentials like groceries, energy bills, childcare, and transportation. This thorough analysis enables them to determine the actual cost of living, guiding Living Wage Employers like Wavenet in setting appropriate pay rates for our employees.; ; As advocates for the Living Wage movement, Wavenet and the Living Wage Foundation empower individuals and families to break free from poverty cycles and flourish with dignity. This partnership not only champions fair compensation but also encourages other businesses to adopt equitable wage practices, fostering community upliftment.; ; Recognising the importance of nurturing talent, Wavenet has welcomed apprentices into its ranks, providing opportunities for young individuals struggling to find their career paths. Emphasising workplace diversity, the company acknowledges the role of varied perspectives in driving growth and prosperity. With core values centred on innovation, change embracement, diversity appreciation, and social and environmental responsibility, Wavenet collaborates with clients across sectors, both large and small, to innovate products and enhancements that spur growth opportunities.; ; By prioritising fair compensation, talent development, and diversity, Wavenet not only upholds its values but also enhances employee motivation, productivity, and societal equity. This holistic approach underscores the company's commitment to fostering a fair and thriving workplace environment while actively contributing to broader social and economic betterment.

  Equal opportunity

  Wavenet proudly upholds the principles of equal opportunity employment, actively encouraging individuals from diverse backgrounds to apply for positions within the company. Embracing inclusivity, we provide support to colleagues with disabilities and long-term health issues, fostering an environment where every individual feels valued and empowered to contribute their unique perspectives and talents.; ; Internal progression is a cornerstone of our organisational culture, as evidenced by our practice of advertising vacant roles internally and providing comprehensive support for colleagues' career development endeavours. We prioritise the advancement of our workforce by funding qualifications and offering tailored training programs aimed at enhancing skills and competencies.; ; As champions for equitable compensation, Wavenet pays all employees the real living wage, above the government-mandated minimum wage, to help them afford rising costs. Our true living wage employer certification shows our commitment to economic fairness and employee well-being.; ; With a workforce exceeding 950 individuals, Wavenet is obligated to report and publish our annual gender pay gap, a responsibility we take seriously. Over the past year, concerted efforts have resulted in a marginal reduction of the gender pay gap, reflecting our ongoing commitment to fostering gender equality within the workplace.; ; Prior to commencing employment, Wavenet diligently verifies that all prospective staff are legally entitled to work in the United Kingdom, adhering to regulatory requirements and ethical standards. Our policies and procedures are meticulously crafted to ensure a non-discriminatory and respectful working environment, where every employee feels valued and safe to voice concerns without fear of reprisal.; ; Embedded within our organizational ethos is a steadfast commitment to ethical conduct and integrity, as outlined in the The Wavenet Code of Conduct. This commitment extends to interactions with employees, partners, and customers alike, reinforcing our dedication to upholding the highest standards of professionalism and ethical behaviour in all facets of our operations.

  Wellbeing

  At Wavenet, the wellbeing of our colleagues is at the heart of everything we do. We're committed to providing a supportive environment where every team member can thrive both personally and professionally. Our comprehensive range of employee benefits and schemes reflects this dedication to nurturing a holistic sense of wellbeing.; ; One of the cornerstones of our approach is ensuring access to top-tier healthcare through our private medical care program. This ensures that our employees and their families have access to prompt medical attention whenever needed. Additionally, our life assurance coverage offers peace of mind, providing financial security to our team members and their loved ones.; ; We understand the importance of work-life balance, which is why we offer a holiday buying scheme. This empowers our employees to tailor their time off to suit their individual needs, enabling them to recharge and return to work refreshed. Our cycle to work scheme not only promotes physical activity but also supports eco-friendly commuting options, contributing to personal and environmental wellbeing simultaneously.; ; In alignment with our commitment to sustainability, we've implemented an electric car scheme to incentivise the adoption of greener transportation alternatives, reducing emissions and supporting environmentally conscious choices.; ; Mental health support is paramount, which is why we've established an employee assistance programme. This confidential counselling service provides resources to navigate personal and professional challenges, ensuring that our team members feel supported and valued.; ; Furthermore, we've trained Mental Health First Responders in each office. These individuals are equipped to offer immediate support and guidance to colleagues in times of need, ensuring that mental health remains a priority throughout our organisation.; ; We also provide fresh fruit in each office, promoting wellbeing through healthy eating habits. Additionally, we welcome dogs into the office every Friday, recognising the positive impact they have on morale and stress relief.

Pricing

• Price: £3 to £25 a licence a month
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at publicsector@wavenet.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.