TT Mobile end-to-end Security
An advanced mobile threat defense solution for all, providing persistent, on-device protection to corporate-owned and BYOD devices. Leveraging advanced machine learning, detects threats across the kill chain: device, network, phishing, and app attacks. Built on the z9 machine learning platform. Competitive pricing for public sector
Features
- Secure mobile endpoints
- Access Mission critical systems safely
- Access sensitive data securely
- Device, Network, Apps & Phishing threat detection
- Proactive visibility into risks and vulnerabilities
- On-device remediation and UEM driven compliance actions
- Deep forensics for Threat Hunting & Incident Response
- Zero Touch Deployment
Benefits
- Threat Intelligence and complete protection
- Peace of mind when accessing data
- Detects both known and unknown threats
- Protecting the device against all primary attack vectors,
- Built on the z9 machine learning platform
- The unmatched forensics provided to prevent a compromise
- Integrations into enterprise SIEM, IAM, UEM, and XDR platforms
- Address local data laws and compliance needs by deploying Hybrid
- Complete Mobile Coverage, No matter the mobile device
- The global leader in mobile security
Pricing
£48 a user a year
- Education pricing available
- Free trial available
Service documents
Request an accessible format
Framework
G-Cloud 14
Service ID
5 0 7 6 1 5 0 5 6 3 5 1 7 9 1
Contact
Twin Technology
Larry Rach
Telephone: 01923 228820
Email: sales@twintechnology.co.uk
Service scope
- Software add-on or extension
- No
- Cloud deployment model
-
- Public cloud
- Private cloud
- Hybrid cloud
- Service constraints
- None
- System requirements
- Mobile device software - iOS, Googl......
User support
- Email or online ticketing support
- Yes, at extra cost
- Support response times
- 8am - 6pm
- User can manage status and priority of support tickets
- Yes
- Online ticketing support accessibility
- WCAG 2.1 AA or EN 301 549
- Phone support
- Yes
- Phone support availability
- 9 to 5 (UK time), Monday to Friday
- Web chat support
- Web chat
- Web chat support availability
- 9 to 5 (UK time), Monday to Friday
- Web chat support accessibility standard
- WCAG 2.1 AA or EN 301 549
- Web chat accessibility testing
- We provide this service via Microsoft TEAMs.
- Onsite support
- Yes, at extra cost
- Support levels
-
We provide 3 levels of support, Gold, Silver and Bronze. The costs of these vary from the amount of support time purchased by each customer.
We provide a technical account manager for each service ticket raised. - Support available to third parties
- Yes
Onboarding and offboarding
- Getting started
- Simple, clear instructions on the website to follow, or we can send an email set of instructions
- Service documentation
- Yes
- Documentation formats
- HTML
- End-of-contract data extraction
- The contract ends when the document expires or they do not renew a new document instance.
- End-of-contract process
- We will delete all documents once the term has expired. This is usually within 30 days of the expiry date and is done without a cost incurred.
Using the service
- Web browser interface
- Yes
- Supported browsers
-
- Internet Explorer 11
- Microsoft Edge
- Firefox
- Chrome
- Safari
- Opera
- Application to install
- No
- Designed for use on mobile devices
- Yes
- Differences between the mobile and desktop service
- None
- Service interface
- No
- User support accessibility
- WCAG 2.1 AA or EN 301 549
- API
- No
- Customisation available
- No
Scaling
- Independence of resources
- The service uses Elastic load balancing, to ensure application traffic can be catered for.
Analytics
- Service usage metrics
- No
Resellers
- Supplier type
- Not a reseller
Staff security
- Staff security clearance
- Staff screening not performed
- Government security clearance
- Up to Baseline Personnel Security Standard (BPSS)
Asset protection
- Knowledge of data storage and processing locations
- Yes
- Data storage and processing locations
-
- United Kingdom
- European Economic Area (EEA)
- User control over data storage and processing locations
- No
- Datacentre security standards
- Supplier-defined controls
- Penetration testing frequency
- At least once a year
- Penetration testing approach
- Another external penetration testing organisation
- Protecting data at rest
- Encryption of all physical media
- Data sanitisation process
- Yes
- Data sanitisation type
- Deleted data can’t be directly accessed
- Equipment disposal approach
- A third-party destruction service
Data importing and exporting
- Data export approach
- Downloadable to any device, once permission is granted.
- Data export formats
- Other
- Other data export formats
-
- JPEG
- PNG
- Data import formats
- Other
Data-in-transit protection
- Data protection between buyer and supplier networks
- Legacy SSL and TLS (under version 1.2)
- Data protection within supplier network
- Legacy SSL and TLS (under version 1.2)
Availability and resilience
- Guaranteed availability
- 99.9%
- Approach to resilience
- AWS Cloud data centre
- Outage reporting
- Email alerts and notification on website
Identity and authentication
- User authentication needed
- Yes
- User authentication
- Username or password
- Access restrictions in management interfaces and support channels
- If the client requires access Two Factor Authentication can be provided.
- Access restriction testing frequency
- At least every 6 months
- Management access authentication
-
- 2-factor authentication
- Identity federation with existing provider (for example Google Apps)
- Username or password
Audit information for users
- Access to user activity audit information
- Users have access to real-time audit information
- How long user audit data is stored for
- At least 12 months
- Access to supplier activity audit information
- Users contact the support team to get audit information
- How long supplier audit data is stored for
- At least 12 months
- How long system logs are stored for
- At least 12 months
Standards and certifications
- ISO/IEC 27001 certification
- No
- ISO 28000:2007 certification
- No
- CSA STAR certification
- No
- PCI certification
- Yes
- Who accredited the PCI DSS certification
- Barclaycard
- PCI DSS accreditation date
- 28/04/2019
- What the PCI DSS doesn’t cover
- American Express transactions Diner card transactions
- Cyber essentials
- Yes
- Cyber essentials plus
- No
- Other security certifications
- No
Security governance
- Named board-level person responsible for service security
- No
- Security governance certified
- Yes
- Security governance standards
- Other
- Other security governance standards
- We are working towards ISO27001 standards
- Information security policies and processes
- We operate the service in line with four key policy documents: Information Governance policy: overarching corporate controls including risk management, training and people controls, change control and incident response. Information Management policy: information lifecycle from creation to destruction including naming, storage, subject access, archiving, retention and destruction. Information Security policy: the securing of data, hardcopy and electronic, at rest and in transit including cryptography, access controls, virus and malware protection, passwords and penetration testing regimes.
Operational security
- Configuration and change management standard
- Supplier-defined controls
- Configuration and change management approach
- All components are recorded on a asset register and asset tagged where necessary. Should changes be needed a formal request is submitted to the change management board and risks would be assessed against the current safeguards in place against that component. Based on this assessment that change management board would recommend the correct and safest course of action.
- Vulnerability management type
- Supplier-defined controls
- Vulnerability management approach
- Potential threats are identified through risk assessments. Our response to identified threats is measured on severity and impact. This also defines the level to which the issue is escalated.
- Protective monitoring type
- Supplier-defined controls
- Protective monitoring approach
- We run anti-virus software on all servers and also gain reporting within our network on intrusion and unauthorised access attempts.
- Incident management type
- Supplier-defined controls
- Incident management approach
- We run anti-virus software on all servers and also gain reporting within our network on intrusion and unauthorised access attempts.
Secure development
- Approach to secure software development best practice
- Conforms to a recognised standard, but self-assessed
Public sector networks
- Connection to public sector networks
- No
Social Value
- Social Value
-
Social Value
- Fighting climate change
- Equal opportunity
- Wellbeing
Fighting climate change
Twin Technology is dedicated to the continuous improvement, understanding and taking appropriate responsibility for any adverse environmental, social, and economic impacts of its consultative work. In doing so, Twin Technology considers impacts on a life-cycle basis and prioritises actions according to: alignment with the companies values, magnitude of impact, and compliance with any applicable regulations.
Twin Technology has also commited to reducing our carbon footprint by investing in electric vehicles.Equal opportunity
Twin Technology has an equal opportunity policy already in place, It is our policy in recognition of all relevant legislation to ensure that there will be no discrimination on the grounds of colour, race, nationality, religion, gender, marital status, domestic circumstance, disability, sexual orientation, age, or any legal affiliation(s). This is a positive policy and it is the requirement of all staff, employed or contracted, to actively follow these requirements.Wellbeing
Twin Technology's acknowledges the importance of wellbeing and this is incorporated within it health and safety policy.
Twin Technology Ltd recognises that it has responsibilities for the health and safety of our workforce whilst at work and others who could be affected by our work activities. We will assess the hazards and risks faced by our workforce in the course of their work and take action to control those risks to an acceptable, tolerable level.
Our Managers and Supervisors are made aware of their responsibilities and required to take all reasonable precautions to ensure the safety, health and welfare of our workforce and anyone else likely to be affected by the operation of our business.
Pricing
- Price
- £48 a user a year
- Discount for educational organisations
- Yes
- Free trial available
- Yes
- Description of free trial
- We do offer a free trial for the service in some circumstances. It would be on a 30 day trial at most and generally will include almost all functions of the full purchased product/service.