Blue Lights Digital

Crypto Investigation PaaS & Investigation Services

BLD supply multiple cryptocurrency & blockchain investigation tools allowing users to instantly analyse cryptocurrency addresses, clusters, and wallets based on near-live time data from public blockchains. These blockchain tools can be paired with digital forensics and sensitive equities for a robust investigations outcome.

Features

• Analysis of multiple cryptocurrency blockchains available
• Huge database of known service clusters to assist target identification
• Multiple user training options, including certification courses
• Detailed exposure analysis for target clusters
• Versatile graph builder & visualisation options
• Watch-cluster function for ongoing target monitoring
• Multiple export formats
• Integration with multiple open- and closed-source datasets

Benefits

• Accurately assess target’s use and ownership of cryptocurrencies
• Identify where target has used ‘coinswap’ services
• Trace ownership of assets through mixing services
• Identify multiple off-chain lines of enquiry to identify unknown targets
• Create clear and intuitive charts from complex blockchain data
• Work faster and smarter to attribute crypto assets
• Save time with automated blockchain parsing
• Attribute cryptocurrency assets to services to develop off-chain Leo
• Identify parallel intelligence immediately from OSINT & other data sources
• Visualise the movement of cryptocurrency assets

£18,000 to £500,000 a licence a year

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at claire.stanley@bluelightsdigital.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

590831717962906

Contact

Claire Stanley
07847258384
claire.stanley@bluelightsdigital.com

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: C&G Crypto currency training
• Cloud deployment model:
  • Public cloud
  • Community cloud
  • Hybrid cloud
• Service constraints: Blockchain analysis and protected tactics are for warranted Law Enforcement use only. Terms and conditions of usage may apply from OEM toolset providers. These change frequently and may be subject to agreement within any new CCS Framework drawdown agreements.
• System requirements: Web access

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Mon-Fri 9x5
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Investigation and crypto investigation support
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: In person and online training provided along with support
• Service documentation: No
• End-of-contract data extraction: Standard data protection and retention rules apply. It is usual for data at rest to remain with customer end point devices or solutions.
• End-of-contract process: N/A

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: No
• User support accessibility: None or don’t know
• API: No
• Customisation available: No

Scaling

• Independence of resources: Scaleable service pre defined needs

Analytics

• Service usage metrics: No

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: Chainalysis, TRM Labs and Elliptic

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: Other locations
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest: Physical access control, complying with CSA CCM v3.0
• Data sanitisation process: No
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: N/A
• Data export formats:
  • CSV
  • ODF
• Data import formats:
  • CSV
  • ODF

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Designed for service by Chainalysis
• Approach to resilience: Run and operated by Chainalysis
• Outage reporting: Email

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Dedicated link (for example VPN)
  • Username or password
• Access restrictions in management interfaces and support channels: Available on request
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: British Assessment Bureau
• ISO/IEC 27001 accreditation date: 18 September 2015
• What the ISO/IEC 27001 doesn’t cover: Detailed technical specifications or solutions; Specific software or hardware configurations; Compliance with other standards not directly related to information security; Non-information security-related processes or procedures within BLD group or sub contracted tools providers
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: The ISMS Manager is jointly responsible with the Operations Director for all aspects of the implementation and management of these arrangements, unless noted otherwise.; Managers and supervisors are responsible for the implementation of these arrangements within the scope of their responsibilities and must ensure that all staff under their control understand and undertake their responsibilities accordingly.

Operational security

• Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Configuration and change management approach: Emergency Change ; A change which is urgent to avoid a damaging impact on service. Typically these are high urgency changes, for example where a service becomes unavailable or is degraded and changes to the system are required to maintain service. ; Retrospective Change ; In exceptional cases when an Emergency Change is extremely urgent and must be carried out before the Emergency Change Process can be followed, a Retrospective Change must be raised to document the change retrospectively. ; Normal Change ; The Normal Change process is invoked when a change is neither considered an emergency or a standard defined change.
• Vulnerability management type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Vulnerability management approach: Available on request
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Available on request
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: The purpose of the Incident Management process is to restore ‘normal’ service operation as quickly as possible in the event of an incident, minimising the adverse impact on business operations to maintain agreed levels of service. ‘Normal service operation’ is defined as an operational state where services and CIs are performing within their expected service and operational levels. ; ; This Incident Management process ensures that all incidents are logged, allocated to the right person to enable appropriate action to take place, whilst the incident is continually monitored, progress tracked and when resolved, ensures the incident is closed.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  The delivery of solutions and software from BLD can significantly contribute to fighting climate change through various means. Implementing BLD crypto asset Investigation can optimise law enforcement resources which can lead to reduced carbon emissions. Additionally, integrating smart technologies to replace the transportation of physical devices to and from crime scenes facilities reduces fuel consumption and greenhouse gas emissions. Furthermore, software solutions that facilitate remote work and virtual meetings can help reduce the need for unnecessary travel for data recovery, thus lowering carbon footprints.; ; The social value of these contributions can be measured by quantifying the reduction in carbon emissions resulting from the implementation of BLD crypto asset Investigation . This can involve calculating the energy savings achieved by optimising processes and systems, as well as estimating the reduction in vehicle and air miles travelled due to the adoption of crypto asset Investigation technologies.

  Covid-19 recovery

  The delivery of solutions and software as a systems integrator plays a crucial role in supporting post-Covid-19 recovery efforts, particularly in addressing the multifaceted challenges individuals encounter upon returning to work. This includes skills attrition and experience leaving public service for new roles in the third sector. Beyond health concerns, there is also a pressing need to mitigate the negative outcomes exacerbated by the pandemic, such as increased vulnerability to fraud. During the lockdown periods, many individuals were targeted by fraudulent schemes exploiting the uncertainties and disruptions caused by the pandemic. These were often manifested through breaches of privacy and then obfuscation of activities within social media and corporations and their technology providers. ; ; The social value of BLD crypto asset Investigation can be measured by assessing the effectiveness of fraud detection and prevention measures implemented through BLD crypto asset Investigation that reaches beyond the local community and social media networks. This involves quantifying the reduction in fraudulent activities targeting individuals returning to work, as well as evaluating the efficiency of response mechanisms in addressing reported cases. Additionally, feedback from affected individuals and stakeholders can provide insights into the perceived impact of these initiatives on restoring trust and confidence in economic activities post-pandemic.

  Tackling economic inequality

  The delivery of crypto asset Investigation from BLD can contribute to tackling economic inequality by enhancing access to essential services and opportunities for marginalised communities. For example, implementing digital platforms for government services can streamline processes and reduce barriers to access for individuals with limited mobility or internet connectivity. If these online services are corrupted or attacked, then harm is often amplified on the most vulnerable in the community. Additionally, providing training and support for digital literacy can empower underserved populations to participate more fully in the digital economy. BLD provide access through level 4 Apprenticeships in Digital Forensics Examiners that include skills and competences in BLD crypto asset Investigation systems. An example of the fusion between these two services is the Proceeds Of Crime Act that has recovered significant value back to government through professionalised crypto asset Investigation. ; ; The social value of these contributions can be measured by assessing the extent to which they contribute to reducing disparities in the use of government services development of new roles of employment in the Crypto marketplace, educational opportunities for new workforce entrants, and economic recoveries among different police forces.

  Equal opportunity

  The delivery of crypto asset Investigation services from BLD can promote equal opportunity by removing barriers to access and participation for individuals from diverse backgrounds. For example, implementing inclusive design principles in crypto asset Investigation development can ensure that digital products and services are accessible to people with disabilities. Additionally, providing training and support for digital skills development can empower individuals from underserved communities to pursue career opportunities in technology fields. BLD provide access through a level 4 Forensic Examiner and Level 4 Fraud Investigator apprenticeship that includes skills and competences that are automated within workflow within the BLD crypto asset Investigation SaaS portfolio. ; ; The social value of these contributions can be measured by assessing the degree to which they promote inclusion and diversity within the workforce and society at large. This can involve tracking metrics such as the representation of marginalised groups in technology-related fields, the level of accessibility and usability of digital products and services, and the impact on social attitudes and perceptions toward diversity and inclusion.

  Wellbeing

  Implementing the automation of crypto asset Investigation , prioritises professional reach back and lawfulness along with work-life balance and flexibility. This supports emotional wellbeing by reduces stress and burnout associated with overwork and excessive job demands. BLD crypto asset Investigation allows for workflow design from the users work operations to explore heavy obfuscation in complex financial markets These services are highly technical. The tools and services provided through BLD saves significant time and effort. The wellbeing of officers and the wellbeing of the public is enhanced by crypto recovery improves relations with the community that fraud is being tackled. ; ; The social value of these contributions can be measured by assessing their impact on key indicators of individual wellbeing, such as physical health, mental health, work-life balance, trust from the community in financial markets and the recovery of defrauded assets along with overall satisfaction with life. Crypto asset Investigation & tracking can take a considerable amount of time and is major disruption to organised crime and cyber hacking ransom proceeds exfiltration.

Pricing

• Price: £18,000 to £500,000 a licence a year
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at claire.stanley@bluelightsdigital.com. Tell them what format you need. It will help if you say what assistive technology you use.