Lineal Software Solutions Ltd

KnowBe4 Security Awareness Training and Phishing Simulation

Lineal provide Phishing Campaign design and execution services for customers followed by management reporting and end user training to support real business change and develop improved awareness of modern cyber security risks. We also provide full support and are a Microsoft Gold and KnowBe4 partner providing licensing and support.

Features

• Simulated Phishing Campaign Design
• Simulated Phishing Campaign Delivery
• Targeted end user training and raising awareness
• Remote or Onsite Support
• End user and technical training for staff
• Management Reporting during and after the campaign

Benefits

• Improves Cyber Security Awareness Among Staff
• Reduces business risk and costs associated with poor security knowledge
• Reduces end user support requests
• Enhances security policies for end user computing
• Improves compliance through increased user awareness
• Baseline reporting delivers management insights to establish action plans

£2.00 a user a month

• Education pricing available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@lineal.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

499877616951498

Contact

Jevon Whitby
01271375999
sales@lineal.co.uk

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: Microsoft 365 or Google Workspace or Microsoft Exchange
• Cloud deployment model: Public cloud
• Service constraints: Not applicable.
• System requirements: Cloud-based or on-premise email mailboxes for users

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Email queries are responded to within 4 business hours. Online queries are typically responded to immediately and similarly for phone queries.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.1 AA or EN 301 549
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: PAYG Support - pay per time or incident - rates dependent on services and support required and are agreed in advance. Standard Support - a contracted support offering based on limited consumption of our support services to agreed maximums. Rates vary depending on services for which support is being provided. Premium Support - support offering with personalised support experience, technical account manager and agreed SLAs that may differ from Standard Support.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Lineal has extensive experience of helping organisations migrate to cloud services. We can lead and support your transition to a cloud-first method of working and support you as you gain ever greater value from the services available. Lineal can guide you to find the most cost effective and efficient way of migrating to your chosen cloud services and implement those to agreed plans, providing full support along the way.
• Service documentation: No
• End-of-contract data extraction: Reports and summaries may be saved for future use. Most data is configurational and won't need extracting as it's based on customer user data.
• End-of-contract process: The service will become unlicensed and the customer will need to relicense the solution in order to continue using it.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Browser and email based so the experience is basically the same.
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: Web-based administration features and control panel for managing the system.
• Accessibility standards: WCAG 2.1 AA or EN 301 549
• Accessibility testing: None published.
• API: No
• Customisation available: No

Scaling

• Independence of resources: KnowBe4 is a cloud-hosted, scalable platform which operates asynchronously to user interaction for all elements aside from the administrative interfaces.

Analytics

• Service usage metrics: Yes
• Metrics types: The whole platform is based around metrics and this is generally the purpose of licensing KnowBe4.
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: KnowBe4

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
• User control over data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v3.0
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Encryption of all physical media
  • Other
• Other data at rest protection approach: Further details can be found here: https://www.knowbe4.com/security
• Data sanitisation process: Yes
• Data sanitisation type: Deleted data can’t be directly accessed
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: It is possible to view reports and export as CSV but, as the bulk of the data is held outside of KnowBe4, there should not really be any need to export data outside of this aside from for possible analysis and further follow-up while the product is licensed. Further details can be found here: https://support.knowbe4.com/hc/en-us/articles/1500007788921-Data-Exports-Guide#:~:text=On%20the%20page%2C%20click%20the,to%20create%20your%20data%20export.
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Details on availability can be found here: https://support.knowbe4.com/hc/en-us/articles/360025164473-PhishER-Platform-Site-Maintenance
• Approach to resilience: Information about the platform's resilience can be found here: https://support.knowbe4.com/hc/en-us/articles/4406329507475-Security-Frequently-Asked-Questions-FAQs#:~:text=Data%20is%20held%20in%20an,to%20protect%20data%20at%20rest.
• Outage reporting: KnowBe4 platform status reporting can be found here: https://status.knowbe4.com/#:~:text=No%20incidents%20reported%20today.&text=Resolved%20%2D%20This%20incident%20has%20been%20resolved.

Identity and authentication

• User authentication needed: No
• Access restrictions in management interfaces and support channels: There is role-based access control. More details can be found here: https://support.knowbe4.com/hc/en-us/articles/115015389767-Security-Roles-Guide
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: Between 6 months and 12 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: Between 6 months and 12 months
• How long system logs are stored for: Between 6 months and 12 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: ANSI-ASQ National Accreditation Board (ANAB)
• ISO/IEC 27001 accreditation date: 11/06/2021
• What the ISO/IEC 27001 doesn’t cover: Assessment reports, certificates and further audit data is available directly from KnowBe4 here: https://www.knowbe4.com/security
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards:
  • ISO/IEC 27001
  • Other
• Other security governance standards: There are a large number with further details found here: https://www.knowbe4.com/security
• Information security policies and processes: Full details can be found here: https://www.knowbe4.com/security

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Lineal committed to ITIL-aligned Change and Configuration Management for effective management and control of its infrastructure.
• Vulnerability management type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Vulnerability management approach: More details can be found here: https://www.knowbe4.com/security
• Protective monitoring type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Protective monitoring approach: Independent third-party pen testers are continuously engaged using a bug bounty system to alert KnowBe4 to potential issues. More details can be found here: https://www.knowbe4.com/security
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: Users are able to report issues through their portal access to support, or to us following an ITIL-aligned process. Platform status issues are escalated quickly. More details can be found here: https://status.knowbe4.com

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  At Lineal, we are committed to the fight against climate change through innovative and responsible actions. Our 14 solar panels produce a robust 4KW of clean energy, reflecting our dedication to renewable resources. Embracing the digital transformation, we’ve reduced our on-premises servers, opting for Microsoft Azure’s cloud services which align with our carbon-neutral goals. Our environmental stewardship extends to waste management, with new recycling provisions significantly reducing packaging waste. We’re also empowering our team with over 90% enjoying flexible remote work options, drastically cutting down on commuting and vehicle emissions. In our facilities, we’ve implemented smart heating controls to optimise energy use, and all traditional lighting has been upgraded to energy-efficient LEDs. Our commitment to sustainability is further demonstrated by our investment in company vehicles including EV schemes for staff, reducing the need for personal car usage and associated emissions. In a unique twist, we’ve turned food waste into a resource, repurposing it as nourishment for our office plants. And we’re not stopping there – we've recently championed the responsible reduction of water usage and are considering the installation of ‘Save Water’ posters in key locations to promote water conservation efforts. Each step we take is a stride towards a greener planet, showcasing Lineal’s proactive approach to environmental responsibility.

  Tackling economic inequality

  Lineal is dedicated to addressing economic inequality with a multifaceted approach that empowers individuals and strengthens our communities. Our initiatives are designed to create opportunities, foster inclusive growth, and support sustainable development. Creating Opportunities: We’re investing in programs that provide employment, training and re-training, and return-to-work opportunities, especially for those affected by economic downturns. This includes supporting new businesses and job creation in combination with other local services such as Job Centre Plus and return to work schemes. Education and Skills Development: Recognising the power of education, Lineal supports initiatives that offer quality education and skills training, helping to bridge the gap between different economic groups. Our Degree Apprenticeships are highly sought after opportunities for individuals looking to build a career in tech. Asset Building: Lineal encourages asset building for working families, providing them with the support to secure their financial future. Inclusive Supply Chains: We’re committed to increasing supply chain resilience and capacity, ensuring that local small and medium-sized enterprises (SMEs) and voluntary, community, and social enterprises (VCSEs) are integral parts of our network. Community Engagement: Lineal engages with local communities to understand and address the unique challenges they face due to economic disparities. We sponsor a number of community activities. Sustainable Practices: We promote workplace conditions that support economic recovery efforts, including remote working and sustainable travel solutions. Through these actions, Lineal not only contributes to the economic well-being of individuals but also fosters a more resilient and equitable society.

  Equal opportunity

  Lineal’s Equal Opportunity Initiatives: Leveling the Playing Field At Lineal, we are a Disability Confident Employer and we believe in creating an environment where every individual has the chance to succeed, regardless of their background. Our commitment to equal opportunity is unwavering, and we’ve implemented several initiatives to ensure fairness and inclusivity across our operations. Inclusive Hiring Practices: We’ve broadened our recruitment channels to attract diverse talent and adopted positive action to encourage applications from under-represented groups. We are an Armed Forces Covenant Employer Scheme signatory. Workplace Policies: Our comprehensive equality, diversity, and inclusion policies set clear expectations for behavior and outline procedures for addressing any issues, fostering a respectful and supportive workplace. Training and Development: We provide ongoing training for all staff to understand and embrace our policies, ensuring that the principles of equal opportunity are embedded in our culture. Supporting neurodiversity is a particular strength for us. Leadership and Culture: We’re cultivating a leadership team that champions diversity and models inclusive behavior, creating a culture where everyone feels valued and empowered. Community Engagement: Lineal actively engages with local communities to identify and address barriers to equality, working collaboratively to find effective solutions. We regularly contribute to Employment Skills efforts and supporting individuals with their return to work, access to work, and career guidance. Our Work Experience programme is highly regarded and oversubscribed. Supporting Diverse Businesses: We prioritise partnerships with diverse suppliers and support small and medium-sized enterprises, contributing to a more equitable business ecosystem. Monitoring and Evaluation: We regularly assess the impact of our initiatives, using data to inform our strategies and ensure we’re making real progress towards equal opportunity. Through these efforts, Lineal is not just complying with equal opportunity standards but is actively working to create a world where everyone has the opportunity to thrive.

  Wellbeing

  At Lineal, we prioritise the wellbeing of our employees as a cornerstone of our success. Our comprehensive wellbeing initiatives are designed to support our team’s physical, mental, and emotional health. Healthy Eating: We provide healthy snacks like fruits, nuts, and yogurts in the staff room, encouraging nutritious choices during work hours. Mandatory Breaks: To combat work fatigue, we’ve made lunch breaks mandatory, ensuring that everyone has time to recharge during the day. Wellbeing Support: Our company offers wellbeing services to address any work-related, personal, or health concerns promptly. Financial Wellbeing: We provide resources and training to help employees manage their finances effectively, contributing to their overall sense of security. Mental Health Resources: Recognising the importance of mental health, we offer access to counselling services and stress management programs. Social Connectivity: Through team-building activities and social events, we foster a sense of community and belonging among our staff. Work-Life Balance: We support a healthy work-life balance with flexible working arrangements and encourage taking time off to rest and rejuvenate. Personal Development: Employees have opportunities for personal growth through training programs and professional development courses. Physical Activity: We promote physical health by organising walking meetings and providing gym memberships and fitness classes for staff. Environmental Comfort: Our office spaces are designed to minimise distractions and create a productive environment with good lighting, personal background music, comfortable heating and inspiring decor. Safety Training: We ensure a culture of safety by providing comprehensive training and resources for personal and workplace safety. Through these initiatives and others, Lineal is dedicated to creating a workplace that not only drives performance but also ensures the holistic wellbeing of every team member.

Pricing

• Price: £2.00 a user a month
• Discount for educational organisations: Yes
• Free trial available: No

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@lineal.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.