FORDWAY SOLUTIONS LIMITED

CIS and Cyber Essentials Plus certification

Fordway's CIS and Cyber Essentials Plus certification service aligns your organisations security practices with the Centre for Internet Security framework and guarantees Cyber Essentials Plus certification will be achieved.

Features

• Guarantees Cyber Essentials Plus certification will be achieved
• Aligns organisation with CIS controls for effective IT security
• Ensures effective patch management, Monitoring and Alerting configured
• Management of high level security requirements utilising latest Microsoft products
• Covers entire IT estate, including cloud on-premise and legacy systems
• Include annual Cyber Essentials Plus certification
• Centre for Internet Security (CIS) controls applied
• Assists with GDPR complaince and halps attain ISO27001
• Provision of virtual Chief Information Security Officer (vCISO)
• Penetration testing can be included as part of the service

Benefits

• Comprehensive security and risk/threat management and remediation
• Provides three levels of consumption:
• Security Baseline - security/risk/threat/governance assessment and report
• Security Management - real-time/continuous monitoring/reporting monthly reporting
• Security Remediation - vCISO Incident Manager, communications, threat-removal and recovery
• Covering all IT assets and systems (Cloud/Hybrid/on-premise)
• Qualified UK based IT Security staff undertake engagements
• Detailed knowledge for AWS, GCP and on premise environments
• Detailed knowledge of Microsoft Azure, 365 and other security products
• Security expertise available just when needed

£5,000 to £25,000 a transaction

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@fordway.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

414885854906102

Contact

Richard Blanford
01483 528200
tenders@fordway.com

Planning

• Planning service: Yes
• How the planning service works: Fordway have standard engagement documentation and migration templates which will be utilised within their project planning.
• Planning service works with specific services: Yes
• Hosting or software services the planning service works with:
  • IaaS/PaaS
  • VDI/DaaS
  • Microsoft 365 Suite
  • Microsoft Azure
  • On premise and co-located services
  • Fordway Connectivity and Access Service
  • Amazon Web Services
  • Google Cloud Platform

Training

• Training service provided: Yes
• How the training service works: The training service is tailored to the buyer and dependent on the service provided
• Training is tied to specific services: Yes
• Services the training service works with:
  • IaaS/PaaS
  • VDI/DaaS
  • Fordway IT as a Service
  • Fordway Application and Service Availability Monitoring
  • Microsoft 365, Office 365, Dynamics 365
  • Microsoft Azure
  • Amazon Web Services
  • Fordway Security Management as a Service
  • Fordway Cloud Connectivity Service

Setup and migration

• Setup or migration service available: Yes
• How the setup or migration service works: Fordway have standard documents and templates to support customers on their security requirements in the cloud with independent advice and recommendations.
• Setup or migration service is for specific cloud services: Yes
• List of supported services:
  • IaaS/PaaS
  • VDI/DaaS
  • Microsoft 365, Office 365, Dynamics 365
  • Microsoft Azure
  • Amazon Web Services
  • On Premsie and co-located services
  • Fordway Cloud Connectivity and Access
  • Fordway Application and Service Availability Monitoring
  • Fordway PSN Gateway Service

Quality assurance and performance testing

• Quality assurance and performance testing service: Yes
• How the quality assurance and performance testing works: Fordway have standard quality assurance and performance testing documentation and templates which will be tailored in line with the service design.

Security testing

• Security services: Yes
• Security services type:
  • Security strategy
  • Security risk management
  • Security design
  • Cyber security consultancy
  • Security testing
  • Security incident management
  • Security audit services
  • Other
• Other security services:
  • Security Monitoring and Event Analysis (as a Service)
  • PSNA approved security hosting and design
  • List N (Nuclear) Certified organisation and facilities
  • Security incident remediation
  • Virtual CISO service
  • Continual Security Service Improvement
• Certified security testers: Yes
• Security testing certifications:
  • CHECK
  • CREST
  • Tigerscheme
  • Cyber Scheme

Ongoing support

• Ongoing support service: Yes
• Types of service supported:
  • Buyer hosting or software
  • Hosting or software provided by your organisation
  • Hosting or software provided by a third-party organisation
• How the support service works: Fordway offer a wide rage of hosting, software and support services which include:; IaaS, PaaS, DaaS,; Fordway Cloud Identity Management,; Fordway Architecture Management,; Fordway Service Integration and Management (SIAM),; Fordway Service Management,; Fordway Cloud Security Service,; Fordway Azure IaaS Operations and Management,; Fordway Azure SQL DB Management,; Fordway Azure Virtual Desktop Management,; Fordway Backup and Service Continuity,; Fordway Managed Print Service; Fordway MS365 Enterprise Desktop Management,; Fordway Patch Management as a Service

Service scope

• Service constraints: None

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Priority 1 incident 24 x 7, 15 minute response. ; Priority 2 incident 24 x 7, 1 hour response Priority 3 incident 12 x 5, 4 hour response.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Support levels: Fordway have a standard SLA for hosting and software services

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Security Clearance (SC)

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: ISOQAR
• ISO/IEC 27001 accreditation date: 14/03/2022 (recertification) original certification March 2008
• What the ISO/IEC 27001 doesn’t cover: ISO27001/27017/27018 Scope of certification available on request
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: Yes
• Any other security certifications:
  • List N (Nuclear Industry)
  • PSN Code of Connection and Compliance
  • PAS555
  • NHS IGSoC
  • ISO27017
  • ISO27018

Social Value

• Social Value:

  Social Value

  Tackling economic inequality

  Tackling economic inequality

  Fordway train our security staff through a variety of IT and infirmation security apprenticeship schemes offering opportunities to all

Pricing

• Price: £5,000 to £25,000 a transaction
• Discount for educational organisations: No

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@fordway.com. Tell them what format you need. It will help if you say what assistive technology you use.