QinetiQ Limited

(Purple Teaming) Coordinated Attack Simulation

The best time to test an organisation’s resilience is before it is attacked. QinetiQ’s Purple Team Coordinated Attack Simulation is designed to team up our Red Team specialists with your Blue Team defenders to identify tools, signatures and techniques used by threat actors before they become a problem.

Features

• Targeted threat actor emulation in a safe environment
• Wide range of use cases available for exercising
• Learn to defend against top Flight Red Teamers
• Access to experienced Red Teamers and play books
• Train the Blue Team to defend against persistant attackers
• Identify tools, signatures and techniques used by threat actors
• CHECK Team Leads/Team Members CREST/TIGER accredited
• Highly-experienced, SC and DV-cleared CHECK specialists
• Team in operation for over 25 years
• Full reports, delivered securely, detailing vulnerabilities prioritised critical to low

Benefits

• Exercises SOC capabilities in real time with attack methodologies
• Identifies how real-world attackers would compromise your organisation.
• Experts provide evidence-based identification of organisational, critical business risks.
• Quickly increases organisational resilience by benchmarking against best practice.
• Increases assurance through real, actionable intelligence against security posture.
• Potential to increase global resilience.
• Outstanding value for money from limited cyber security budgets.
• Satisfies mandated and compliance requirements.
• Optional supporting security services to assist clients where really needed.

£1,200 to £1,500 a unit a day

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at ost@qinetiq.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

430041730948625

Contact

QinetiQ Opportunity Support Team
07786174902
ost@qinetiq.com

Planning

• Planning service: No

Training

• Training service provided: No

Setup and migration

• Setup or migration service available: No

Quality assurance and performance testing

• Quality assurance and performance testing service: No

Security testing

• Security services: Yes
• Security services type:
  • Security strategy
  • Security risk management
  • Security design
  • Cyber security consultancy
  • Security testing
  • Security incident management
  • Security audit services
  • Other
• Other security services:
  • Cloud Cyber Security Exercising
  • Cloud Supply Chain Resilience
• Certified security testers: Yes
• Security testing certifications:
  • CHECK
  • CREST
  • Cyber Scheme
  • Other
• Other security testing certifications:
  • CHECK
  • CREST
  • Cyber Scheme

Ongoing support

• Ongoing support service: No

Service scope

• Service constraints: None.

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: The Helpdesk operates between 08:00 to 18:00, Monday to Friday excluding UK public holidays (reduced service between Christmas and New Year). During these hours, email queries will typically be responded to within 4 hours, but usually within one hour.; Support emails received outside these hours will be responded to when the Helpdesk is back online as above.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.1 AAA
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Support levels: Purple Teaming is sold as a consultancy service so experts provide bespoke advice and support to the client. QinetiQ employs a four tier priority system for incidents, problems, changes and service requests aligned with ITIL standards.

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Developed Vetting (DV)

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  QinetiQ is experienced in delivering measurable and meaningful environmental outcomes and will offer customers a detailed Social Value plan tailored for individual contracts. This will include specific, measurable commitments that will be implemented by the Project Manager, supported by our internal environmental subject matter experts. ; ; Commitments will be designed to deliver additional environmental benefits, and influence staff, customers, suppliers and communities. Contract-specific commitments agreed with the customer, will be proportionate to the scale of the contract, and could include: ; >All staff supporting G-Cloud14 projects will undertake sustainability training as part of on-boarding for the contract, this can include Carbon Awareness Training. ; >Creation and delivery of an annual bespoke sustainability workshop for G-Cloud14 customers and employees working on G-Cloud14 projects; this will be tailored to the customer’s key focus areas.; >Ongoing commitment to net zero and proactively looking for ways to deliver in a low carbon manner in line with the Science Based Targets Initiative. ; >All involved on G-Cloud14 projects will undertake a minimum of one annual volunteering day – we will signpost those working on G-Cloud14 projects to environmental not-for-profit organisations located in customer’s local area, focusing on environmental issues relevant to that location. Additionally, we will encourage them to offer their skills to assist environmentally focused not-for-profit organisations with things such as software development or website development which these organisations may otherwise struggle to access. ; >Offering slots on our sustainability lunch and learn programme to local charities and community organisations where they will be able to share key messages and invite QinetiQ staff to take part in volunteering days.; Contract specific commitments will be included as part of the project management plan and reported to the customer at agreed intervals.

  Tackling economic inequality

  QinetiQ will deliver measurable and impactful initiatives to create new businesses, new jobs and build new skills, and increase supply chain resilience and capacity. Tailored commitments will be agreed on an individual contract basis to meet the specific challenges around economic inequality in the customer’s industry and locality.; ; Commitments will be proportionate to the scale of the contract, and could include:; ; • Integration of G-Cloud14 opportunities into our early careers programme, wherever possible, involving graduates and apprentices within G-Cloud14 contracts to provide opportunities to develop skills delivering these services. ; • Delivering annual employability skills sessions for all apprentices and graduates in the Customer’s local area, or targeting a region with high levels of deprivation and relative proximity to a customer site. ; • Offering STEM outreach sessions delivered by our skilled and experienced team using their allocated volunteering days. Locations for delivery and subject theme areas can be agreed with the customer to ensure relevance to their industry and the skillsets they require. This activity helps to generate interest and develop skills to build a pipeline of future talent locally. ; • Flexible working arrangements remove barriers to employment experienced by many groups, including carers, we will offer remote working and a 9-day fortnight wherever possible. ; • Uphold our commitment to fair recruitment and employment conditions through all recruitment under the G-Cloud14 framework, this includes use of diverse recruitment agencies, partners and platforms to attract a wide range of candidates.; • Offering support such as assistance with JOSCAR registration, to the following types of organisation to facilitate their growth: Small to medium sized enterprises, Voluntary, Community and Social Enterprises, Mutuals, Entrepreneurs ; Commitments will be implemented and monitored by the Contract’s Manager with support from internal HR and Supply Chain experts. Progress will be measured and reported to Customers at agreed intervals.

  Equal opportunity

  All recruitment, management and training actions undertaken to support G-Cloud14 contracts will be performed in alignment with our organisational commitments to reduce the disability employment gap and tackle workforce inequality. This includes, but is not limited to: ; ; >Each person working on G-Cloud14 services will be paid a real living wage with annual pay reviews. Additionally, we implement the Living Wage Foundation concept of a Living Pension by offering a minimum salary threshold that ensures a real living wage, plus sufficient funds to put 7% into their pension fund without falling below the National Minimum Wage. This enables employees to choose to put this payment into their pension to take advantage of the maximum 10.5% matching contribution from QinetiQ.; >Each employee will receive a dedicated training budget of £500 annually to spend on training and development. ; >All employees have access to thousands of online training programmes through our internal platform, Success Factors, LinkedIn Learning and through partner organisations, e.g. Henley Business School.; >Mentorship opportunities from a senior role who is not linked to the employees’ team. ; >Flexible working options include hybrid working arrangements and 9-day working fortnights. This supports people to overcome barriers to work including caring responsibilities and mobility challenges. ; ; Additionally, tailored initiatives will be offered, for example:; >G-Cloud14 specific training placements can be created dependent on contract duration and suitability. ; >Delivering an annual Modern Slavery awareness day for G-Cloud14 customers and supply chain partners. This will be run by our Supply Chain Lead for Sustainable Procurement.; >Reasonable adjustments to physical working environments to support those with disabilities work on G-Cloud14 contracts.; ; Commitments will be implemented and monitored by the Contract’s Project Manager with support from internal Human Resources and Supply Chain experts. Progress will be measured and reported to Customers as part of an agreed reporting frequency.

  Wellbeing

  Physical and mental wellbeing is a key consideration in our workplace culture and this carries through to delivery of customer contracts. In addition to our strong corporate offerings to all employees, G-Cloud14 employees will receive tailored commitments that are designed on a per contract basis to meet the needs of the service and working environment. ; ; Contract-specific commitments will be agreed with the customer, will be proportionate to the scale of the contract, and could include: ; >Improving community integration through use of volunteering days to support not for profit organisations in communities local to customer sites. This could involve skills donation or project work that both benefits local communities, and the individual’s mental and physical health. ; >Uphold the mental health at work commitment through the delivery of all G-Cloud14 contracts. ; >Establishing a contract-specific Employee-led Wellbeing group to guide employees to organisation wide offerings, and to implement contract specific initiatives that meet the needs of the contract workforce.; >Bespoke G-Cloud14 guidance to support individuals and line managers which could involve specialist coaching or online training courses. ; >Ensuring access to Mental Health First Aiders; >Occupational health support for home working environments, when working onsite for a customer or on QinetiQ sites. ; >Access to our Employee Assistance Programmes which provides access to a GP services, independent counselling, financial advice and legal assistance to employees and their immediate families. This has 24/7 access via the web, phone, or face-to-face.; >Access to Yu Life App which supports wellbeing though physical activity challenges including meditation. Employees can earn reward points that can be exchanged for vouchers (e.g., from Amazon) or donated to charities (e.g., Earthly).; ; Commitments will be implemented and monitored by the Contract’s Project Manager with support from internal experts. Progress will be measured and reported to Customers at an agreed reporting frequency.

Pricing

• Price: £1,200 to £1,500 a unit a day
• Discount for educational organisations: No

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at ost@qinetiq.com. Tell them what format you need. It will help if you say what assistive technology you use.