BT PLC

Managed Firewall Security (physcial)

Physical firewalls providing managed firewall security, with cloud management software being provided.

Features

• Fully managed service
• 24x7x365 operation
• Next generation firewall
• URL filtering to block access to inappropriate internet sites
• Intrusion Protection/Intrusion Detection
• AntiVirus offering/ AV checking of web traffic and AntiBot
• Application Control, controlling employee access to online resources
• Identity Awareness
• A 3-tiered service model

Benefits

• Security expertise in management
• Faster deployment than physical devices
• Fully Managed Service
• 24 x 7 x 365 operations
• Threat protection
• Automated Firewall provision
• Real-time reporting

£1,154.00 to £13,935.00 a device a month

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at ccsframeworks@bt.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

533051500080968

Contact

Frameworks Team
0800 3288077
ccsframeworks@bt.com

Service scope

• Service constraints: BT owned firewall
• System requirements: BT owned firewall

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: The target is to respond to faults within 4 hours. This applies at weekends as well.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: No
• Support levels: A graded service model is offered with three tiers: Foundation, Foundation Plus and Premium. Foundation offers the most basic support, at least cost, stepping up to Premium support at the highest cost
• Support available to third parties: No

Onboarding and offboarding

• Getting started: This is a fully managed service, where BT onboard and offboard customers. Dependent on the service level chosen a Project Manager is provided to manage the delivery and commissioning of the service and to keep the customer informed of the delivery progress. The Project Manager will also act as the Single Point of Contact for the customer during the delivery phase.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Customers will need to contact BT for this information to be provided.
• End-of-contract process: Prior to the contract end date, the customer will be contacted by BT and a discussion will take place as to whether a contract extension is needed. If not, then licenses and the service will be ceased by BT.

Using the service

• Web browser interface: Yes
• Using the web interface: BT will provide secure access to BT's Web Portal to all pre-agreed and authorised Customer Contacts to enable change requests be made. Users can then raise a change request to their firewall policies via BT's web portal. BT will check each request for its complexity and assess whether the change can be completed via the Change Management process.
• Web interface accessibility standard: None or don’t know
• How the web interface is accessible: A link is provided to customers with a unique token ID relating to their devices.
• Web interface accessibility testing: The web interface has been delivered testing through BT's internal processes used by BT Security customers for a number of years.
• API: No
• Command line interface: No

Scaling

• Scaling available: No
• Independence of resources: The firewalls deployed are unique to each customer, so other customers firewalls won't affect each others capacity.
• Usage notifications: No

Analytics

• Infrastructure or application metrics: No

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: Palo Alto

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Supplier-defined controls
• Penetration testing frequency: Never
• Protecting data at rest: Encryption of all physical media
• Data sanitisation process: No
• Equipment disposal approach: In-house destruction process

Backup and recovery

• Backup and recovery: Yes
• What’s backed up: BT backs up the customer's firewall policy configuration
• Backup controls: BT performs this function as we provide a fully managed service for the customer.
• Datacentre setup: Multiple datacentres
• Scheduling backups: Supplier controls the whole backup schedule
• Backup recovery: Users contact the support team

Data-in-transit protection

• Data protection between buyer and supplier networks: IPsec or TLS VPN gateway
• Data protection within supplier network:
  • IPsec or TLS VPN gateway
  • Other
• Other protection within supplier network: Static routes to BT's IMPSS management platform are configured to use the default gateway of the management interface.

Availability and resilience

• Guaranteed availability: The service has 99.9% availability. There is a service credit applied if the service levels are not met. The service's Terms and Conditions provide full details of both of these service elements.
• Approach to resilience: Due to the nature of the public cloud, true High-Availability (HA) pair resilience for firewalls isn't possible. However Azure and AWS ensure a 99.9% availability for a single instance Virtual Machine (VM).
• Outage reporting: The service is monitored by a Security Operations Centre (SOC) 24 x 7 x 365 and reported internally. The customer is kept informed of the status of the outage and resolution.

Identity and authentication

• User authentication:
  • 2-factor authentication
  • Username or password
• Access restrictions in management interfaces and support channels: All management access is authenticated through the BT Security IMPSS solution
• Access restriction testing frequency: At least every 6 months
• Management access authentication: 2-factor authentication
• Devices users manage the service through: Directly from any device which may also be used for normal business (for example web browsing or viewing external email)

Audit information for users

• Access to user activity audit information: No audit information available
• Access to supplier activity audit information: No audit information available
• How long system logs are stored for: Between 6 months and 12 months

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: BT's Security Policies and processes are modelled against ISO27001

Operational security

• Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Configuration and change management approach: Configuration and change management are built into the product process and service designs. These are also audited.
• Vulnerability management type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Vulnerability management approach: Vulnerability management is part of the service and is described in the Service Description. It is also built into the product process and service designs. These are also audited.
• Protective monitoring type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Protective monitoring approach: The service is monitored by a Security Operations Centre, 24 x 7 x 365, and reported internally
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: There is a 7-stage incident management process operated by BT's Security Operation Centre and reported internally. The service is monitored 24 x 7 x 365

Secure development

• Approach to secure software development best practice: Supplier-defined process

Separation between users

• Virtualisation technology used to keep applications and users sharing the same infrastructure apart: No

Energy efficiency

• Energy-efficient datacentres: Yes
• Description of energy efficient datacentres: N/A

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  BT Group has been a leader on climate action for over 30 years. We have been tracking our carbon reductions since 1992 and become one of the first companies in the world to set a science-based target in 2008. Our networks and buildings are all powered by renewable electricity, and we are aiming to transition majority of our fleet to electric or zero-emission vehicles by 2030 (now over 2,400 in total). To date, our electric fleet has travelled more than 7.9 million miles, saving over 2,200 tonnes of CO2e, which helps us transition to a net zero economy much faster. We are investing in full fibre broadband and 5G networks that will pave the way for lower-carbon ways of life and work. We believe to reach Net Zero renewable energy, low-emission vehicles and technology hardware are important, which the Crown Commercial Services also believe. Due to our solutions for Carbon reduction aligning, BT can consider setting a workshop with CCS to share ideas and objectives on how to achieve net zero. We have pledged to become a net zero business by the end of March 2031, and we are targeting net zero for our supply chain and customer emissions by the end of March 2041.We have also set a target to help customers avoid 60 million tonnes of CO2e by the end of March 2030. We aim to contribute to a circular economy by reducing waste and enhancing opportunities to repair, refurbish and recycle. This year, our customers returned more than 1.8 million home hubs and set-top boxes to us and through our refurbishment operation, we reused 83% and recycled the rest. We also collected over 190,000 mobile devices through trade-in schemes, all of which were reused (97%) or recycled.

  Covid-19 recovery

  At BT we understand the important of showing support to others, especially those who are in vulnerable situations. To show our support, BT has launched the award-winning Care Companions initiative during Covid – matching BT volunteers with residents in care homes, providing a befriending service with weekly calls brightening someone’s day. From those humble beginnings there are now around 400 BT volunteers from 29 contact centres across the UK making weekly calls to around 15,000 care home residents. As well as befriending residents, tackling loneliness and isolation, BT volunteers have also continued to support the care homes with fundraising and gardening. We also work closely with Home-Start. A local community network of trained volunteers and expert support, helping families with young children through challenging times. Our partnership helps people improve their digital skills, whilst opening fantastic fundraising and volunteering opportunities for our colleagues. Our partnership aims to support Home-Start families with: · Digital Confidence · Data Connectivity · Access to devices Staff will use their volunteering hours to help support families with digital support. We will be teaching families basic digital skills such as using a laptop, tablet, or mobile phones. Also, we would use these hours to help families apply for schools, colleges, and jobs to put them in a position for a better future. We also offer flexible working. Since Covid people have been through demanding situations, and now going through cost-of-living issues. Giving our employees the chance to work from home twice a week, allows them to save on expenditures traveling from and to the office including spending while within the office. We also understand how covid affected many people through losing loved ones. We hope flexibility allows employees to be more around their loved ones and support each other after going through such tough times.

  Tackling economic inequality

  At BT we are aware, in the UK there are skill shortages for many people who face multiple barriers into employment for several reasons out of their control. This is why we have supported more than 51,000 people with employability guidance and work life digital skills since 2014. Our aim is to boost social mobility and economic productivity by helping young people succeed in an increasingly digital world of work. We are committed to being responsible, sustainable, and inclusive. It is fundamental to our purpose that we ‘connect for good’. BT is one of the largest employers of apprentices in the UK. In 2022, we ranked third place in the top 100 Apprenticeship employers in the UK and recruited more than 2,600 apprentices and graduates over the past four years. An addition to this, we hired 400 apprentices and graduates in 2023 in different cities across the UK such as London, Birmingham, Manchester, and Bristol and more. As well as employment schemes, BT have delivered over 185 workshops reaching over 4900 pupils aged between 11 and 19. Our employees share their work skills and experiences with this next generation of employees and drive aspirations to work in engineering, innovation, and technology industries. Our 5-hour workshops: • Give young people the opportunity to explore their individuality, skills and interests through group activities and challenges, supporting their careers education at school. • Align with the Gatsby Benchmarks to support schools to deliver great careers education across the UK and Northern Ireland and work towards their quality education standards e.g. OFSTED Inspections • Feature STEM (science, technology, engineering, maths) activities that link curriculum-based learning to the skills employers are looking for in areas such as Software Design and Engineering, Fibre Network Build and Cybersecurity Planning and Solutions.

  Equal opportunity

  Everyone, regardless of background, experience, or their place in society, should be afforded opportunities to help them learn and grow. This is the foundation upon which a modern, progressive, and inclusive society functions. In achieving this, we all benefit. We benefit from talent, no matter from where it comes; being able to grow, mature and prosper. This is BT’s philosophy. We have set out some 2030 ambitions relating to gender, ethnicity, and disability. By 2030, our workforce will be; • 50% Gender (we want 50% of BT Group colleagues (excl. Openreach) to be women) • 25% Ethnicity (we want 25% of BT Group colleagues (UK workforce, excl. Openreach) to be Black, Asian or from an ethnic minority background) • 17% Disability (we want 17% of BT Group colleagues (UK workforce ex Openreach) • We have partnerships with different agencies which we work with to support equal opportunity. Such is Purple Goat, which is one of the UK’s only communications agencies run by disabled people. We partnered with them to deliver a series of videos highlighting the experiences of colleagues with a range of disabilities – including diabetes, autism, and visual and hearing impairments. We have also built relationships with Code First Girls, Women Returners, Black Girls Tech Summit, and Girls Talk London. These initiatives help delegates develop their skills and network with peers, creating more opportunities for women to move into technology careers. And as lead sponsor of the Avado FastFutures programme, we are helping upskill over 7,000 18–24-year-old learners from ethnically diverse backgrounds. We want to help them develop digital and data skills to unlock opportunities and launch their careers.

  Wellbeing

  At BT, we always put wellbeing and safety first. For us, there are no shortcuts in keeping everyone safe. We work on creating fulfilled, safe, happy, and healthy employees in a culture where everyone can thrive. BT’s supporting wellbeing in the workplace includes: SilverCloud, which provides programmes designed to help improve and maintain wellbeing by addressing core underlying issues that can have a negative impact on how employees live their lives. We will ensure that all our staff within the contract are aware of this support option if needed. These include modules on stress, money worries, perinatal wellbeing, anxiety and more. Users would usually be recommended to complete one module of their choice within a week period. We will measure the mental health in respect of the contract using a ‘YourSay’ survey, published annually, of: · No. of individuals are aware of the support services. · No. of individuals have participated in mental health awareness events. · No. of managers who completed the mandatory training. · Additionally, managers that qualified mental health first aiders. BT also provide their Employee Assistance Programmes (EAP). EAP's provide a range of services, notably employee counselling, but also legal advice, practical financial information, and advice on dealing with debts. BT's EAP includes a comprehensive range of personal and group services to help our people deal with worrying or tricky situations. It is entirely free of charge for users. The EAP is delivered by Optum - our Occupational Health & Wellbeing Centre of Expertise makes sure the services are delivered to the highest standards to meet our people's needs. You can contact the EAP, in confidence, 24 hours a day, 7 days a week, 365 days a year so that help is available whenever it is needed. Assistance can be provided face-to-face basis or via telephone.

Pricing

• Price: £1,154.00 to £13,935.00 a device a month
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at ccsframeworks@bt.com. Tell them what format you need. It will help if you say what assistive technology you use.