GBEST Threat Assessment (G-BEST)
SecAlliance has a proven record in providing the highest quality GBEST engagements over the past 6 years. We are accredited to provide the services as well as other CREST Intelligence Services. We have more CREST qualified Managers and Analysts than any other CTI provider globally.
Features
- GBEST Accredited by CREST and Cabinet Office
- More CREST CTIM Managers than other providers ensuring availability
- Security Cleared (SC/DV) Staff
- Leverages our UK Gov Threat Monitoring Work
- Support during you 'scoping' phase
- The most comprehensive threat analysis and reconnassance
- Highly detailed scenarios mapped to MITRE ATT&CK
- Access to additional Threat Intelligence post engagement
- Highly collaborative nature with external Red team Providers
Benefits
- Clear, concise and accurate reporting for all readers
- Provides comprehensive understanding of the Threat Landscape
- Informs Risk based decisions
- Make Threat Informed decisions
- Confidence from the most experience GBEST TI Provide
- Can easily integrate into continuous CTI services
- Results and scenarios can be delivered by CTI platform
- Provided by CREST CTIM, CRTIA and CPTIA analysts and managers
- Fully remediation advice for each finding
Pricing
£40,000 to £80,000 a unit
Service documents
Request an accessible format
Framework
G-Cloud 14
Service ID
4 9 2 2 2 9 8 7 6 4 8 1 4 6 3
Contact
SECURITY ALLIANCE LIMITED
Robert Dartnall
Telephone: 020 7148 7475
Email: info@secalliance.com
Planning
- Planning service
- Yes
- How the planning service works
-
Scoping for GBEST can be complex. We offer a free of charge support to the department to help them scope appropriately with the Cabinet Office and NCSC.
We will also support you with your internal resource planning and the overall project plan. We can also support in briefing your team on the end to end engagement to help you better plan and set expectations.
We will support the engagement of the procured red team from the beginning to ensure a successful integration of the two teams. - Planning service works with specific services
- No
Training
- Training service provided
- Yes
- How the training service works
- We can provide Training for Cyber Threat Intelligence and Intelligence Analysis
- Training is tied to specific services
- No
Setup and migration
- Setup or migration service available
- Yes
- How the setup or migration service works
- We will work with you to define the systems and functions in scope. We will also integrate any application intelligence service/product. We will also help you setup you white team if required
- Setup or migration service is for specific cloud services
- No
Quality assurance and performance testing
- Quality assurance and performance testing service
- No
Security testing
- Security services
- Yes
- Security services type
-
- Security strategy
- Security design
- Cyber security consultancy
- Security testing
- Certified security testers
- Yes
- Security testing certifications
-
- GBEST
- CREST
Ongoing support
- Ongoing support service
- Yes
- Types of service supported
- Hosting or software provided by a third-party organisation
- How the support service works
- We can continue to support you post engagement with briefings to additional parties. We can also integrate the results into our or other CTI platforms or portals. We will
Service scope
- Service constraints
- None
User support
- Email or online ticketing support
- Email or online ticketing
- Support response times
- We provide both Email a ticketing support
- User can manage status and priority of support tickets
- No
- Phone support
- Yes
- Phone support availability
- 9 to 5 (UK time), 7 days a week
- Web chat support
- No
- Support levels
- We provide support M-S 0800-1800 via platform ticket, phone and email. This is included in the cost. You are also provided an engagement manager and CTI manager
Resellers
- Supplier type
- Not a reseller
Staff security
- Staff security clearance
- Conforms to BS7858:2019
- Government security clearance
- Up to Developed Vetting (DV)
Standards and certifications
- ISO/IEC 27001 certification
- Yes
- Who accredited the ISO/IEC 27001
- British Assessment Bureau
- ISO/IEC 27001 accreditation date
- 05/06/2013
- What the ISO/IEC 27001 doesn’t cover
- All in scope
- ISO 28000:2007 certification
- No
- CSA STAR certification
- No
- PCI certification
- No
- Cyber essentials
- Yes
- Cyber essentials plus
- Yes
- Other security certifications
- No
Social Value
- Social Value
-
Social Value
Tackling economic inequalityTackling economic inequality
Our Threat Intelligence Services help our clients identify and manage cyber security risks, including in the supply chain.
Pricing
- Price
- £40,000 to £80,000 a unit
- Discount for educational organisations
- No