SOMERFORD ASSOCIATES LIMITED

mnemonic Endpoint Detection and Response (EDR)

Argus MDR provides 24x7 managed protection against cyberattacks and security threats. With complete enterprise coverage, including cloud, data centre, network and endpoint, our expert team of security analysts, incident responders and threat researchers will act as an extension of your security team to help you defend against today’s complex cyberattacks.

Features

• 24x7 security monitoring
• Event analysis
• Incident alerting
• Stream analysis
• Global Threat Intelligence
• Flexible, Customizable and Scalable service
• Advanced threat detection and hunting
• Incident Response
• Real Time Reporting
• Customisable Dashboard

Benefits

• Dedicated Technical Account Manager
• Regular service meetings for incident review, service improvement and recommendations
• Actionable response recommendations
• Access to over 20+ years of security competency and consultancy
• Quickly React to Incidents anytime
• Gain Insight into your attack landscape and security posture
• Customise the service to best suit your teams needs

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@somerfordassociates.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

596830129347992

Contact

Penny Harrison
07897075103
info@somerfordassociates.com

About your service

• Service categories:

  Systems Infrastructure Software

  Security

  • Cloud native application protection platform
  • Endpoint security
  • Security analytics
  • Governance, risk and compliance

  Identity and access management

  • Access
  • Privilege

  Network security

  • Trusted network access and protection

  Data security

  • Information protection
  • Digital trust
• Multi cloud support: Yes

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: We can integrate with most major EDR security systems/technologies. We strive to be vendor agnostic.
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Community cloud
  • Hybrid cloud
• Service constraints: Constraints will be defined by the scope of technologies we are covering for any given customer - for example, EDR coverage requires endpoint detection for us to facilitate. Maintenance is done on our service but without customer disruption.
• System requirements: Infrastructure that produces logs/security alerts

User support

• Email or online ticketing support: Yes
• Support response times: Support response is 24x7 , mean time to respond is 30 minutes
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: Yes
• Web chat support availability: 24 hours, 7 days a week
• Web chat support accessibility standard: None or don’t know
• How the web chat support is accessible: Web chat is accessible to the Mnemonic platform over the internet
• Web chat accessibility testing: N/A
• Onsite support: Yes, at extra cost
• Support levels: All customers receive the same support level. At the start of each project, the customer is assigned a Technical Account Manager (TAM) from mnemonic whose responsibility is to coordinate and attend regular service meetings. The TAM serves as a trusted adviser to the customer to make recommendations on how to improve the service and security in general. This is all included in the service cost.
• Support available to third parties: Yes
• AI chatbot: No

Onboarding and offboarding

• Getting started: Argus MDR Service is implemented using mnemonic’s project management framework. Our framework is based on core principles from PMI and Prince2, and has been customised over the years based on our experience in successfully implementing our services. The framework ensures that our implementation projects meet the agreed expectations, are of a high quality and are delivered on time.; ; The service implementation project encompasses technical components, such as physical installation and device configuration, along with information gathering activities focused on customer business operations, service deliverables and escalation procedures. The implementation service is a mandatory component of the Argus MDR Service initialisation. The implementation project has various components that may be delivered on-site, while other deliverables can be performed remotely.; ; An example of project tasks and deliverables includes: ; ; - Arrange start up meeting for the service with relevant Customer personnel and mnemonic personnel, as an introduction to the service  - Service design: high and low-level designs ; - Planning technical and procedural integration of service, including establish customer- and solution-specific management routines and documentation for the operations centre ; - Classification and documentation of assets and services ; - Establish secure communication lines between the mnemonic and the customer
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: At the end of every contract the customer is assigned a dedicated project team in order to ensure the smooth handover and decommissioning of the service. This project will include the decommissioning of devices, support in ensuring their return and handover of any requested data or logs. Mnemonic is able to assist in the handover to a new provider where reasonable.
• End-of-contract process: Mnemonic would run an offboarding project which includes data handover, decommissioning instructions and a handover meeting. Additional activities will be evaluated and may be priced depending on time and material.
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: Onboarding and offboarding documentation is maintained through dedicated procedures, tickets, and supporting documents. These processes are externally audited as part of ISO and SOC2® reports, ensuring correct implementation and traceability. ; ; Documentation supporting the onboarding process includes checklists, escalation matrix templates and access request procedures. All requirements and configurations are documented and signed off prior to operational handover. Customers are introduced to these materials during onboarding workshops and joint planning sessions, and documentation is accessible as part of the MDR onboarding project. ; ; For onboarding log sources, written guides are provided for technical steps and reference to official documentation when available. Additional documentation, such as the incident response onboarding checklist and escalation matrix templates, is shared as part of the onboarding process.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: No major differences in functionality.
• Service interface: No
• User support accessibility: None or don’t know
• API: Yes
• What users can and can't do using the API: Full documentation can be found here: https://docs.mnemonic.no/display/public/API/mnemonic+API+documentation
• API documentation: Yes
• API documentation formats:
  • Open API (also known as Swagger)
  • HTML
  • PDF
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: The following can be customised: ; ; - Scope of technologies covered ; - Incident response playbooks ; - Duration of service coverage ; - Extra service features ; - Dashboards ; - Custom detection logic

Scaling

• Independence of resources: We perform extensive capacity planning and constant monitoring of resources according to demand. We have the ability to quickly scale up if needed.

Analytics

• Service usage metrics: Yes
• Metrics types: Service metrics include, but are not limited to: Alert volume, data ingest volume, alert source type, response time, alert severity, case status and more.
• Reporting types:
  • Real-time dashboards
  • Regular reports
• Resource tagging: Yes
• FOCUS resource tagging: Yes

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: Mnemonic

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: European Economic Area (EEA)
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: In-house
• Protecting data at rest: Physical access control, complying with SSAE-18 / ISAE 3402
• Data sanitisation process: Yes
• Equipment disposal approach: A third-party destruction service
• Data sanitisation type: Physical Destruction / Hardware containing data is completely destroyed

Data importing and exporting

• Data export approach: At the end of every contract the customer is assigned a dedicated project team in order to ensure the smooth handover and decommissioning of the service. This project will include the decommissioning of devices, support in ensuring their return and handover of any requested data or logs. Mnemonic is able to assist in the handover to a new provider where reasonable.
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Other
• Other protection within supplier network: SSH; We have our own data center infrastructure

Availability and resilience

• Guaranteed availability: The Service Provider delivers a high-quality service that is built upon high availability capabilities. This includes high availability of the Argus Customer Portal and high availability for communications between the Service Provider’s central service components and the End Customer.; ; The Service is guaranteed to be available with a 99.9% availability rate. The availability rate is measured over the period of one calendar month and excludes scheduled maintenance windows. An availability breach occurs if the Service is available for less than 99.9% in a given month.; ; In such cases, the End Customer will be entitled to Service Credits in accordance with the following table:; ; 100% - 99.9% availability - Service Credit - 0; 99,9% - 99 % availability - Service Credit - 3; 99 % - 98,5 % availability - Service Credit - 6; 98.5 % - 98 % availability - Service Credit - 15; ; Service Credits are awarded in the event that the Service Provider breaches specific service levels within the agreement. The value of a Service Credit is 1/30th of the monthly cost for the SLA that was in breach and is automatically redeemed on the next service invoice.
• Approach to resilience: Available upon request
• Outage reporting: Outages are reported through the customer portal which is also available through APIs and email alerts

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Dedicated link (for example VPN)
  • Username or password
• Access restrictions in management interfaces and support channels: Privileged access on a company level (e.g. domain admin) can only be given to authorized personnel. This is enforced by requirement of role and department, training in the system (e.g. from Microsoft if for Active Directory), and one-on-one briefing with manager to verify integrity, veracity, and trust. Management interfaces are only accessible through an internal secure network which is not connected to the internet.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: You control when users can access audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: You control when users can access audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards:
  • ISO/IEC 27001
  • Other
• Other security governance standards: ISO9001 Quality mgt ISO14001 Environmental , SOC2 Type2,
• Information security policies and processes: Mnemonic’s Chief Information Security Officer (CISO) is responsible for information security in mnemonic, including promoting security throughout the organization. In mnemonic we have integrated our security and quality management system.; ; The ISMS (Information Security Management System) is governed by our CISO and the ISMS-forum. The ISMS-forum consists of 10 people with relevant roles and responsibilities in mnemonic to govern all core business processes. To ensure efficiency of the ISMS, we have implemented an information risk framework that clearly identifies consequence, likelihood, roles, responsibilities, remediation and risk acceptance criteria.; ; The framework relates to all information processed and has been revised to ensure appropriate evaluation of privacy risk aligned with our DPIA process. To ensure that every employee understands their responsibilities to follow the requirements set in the ISMS we have implemented several policies.; ; Some examples of policies implemented:; • Information security; • Privacy; • Secure development (Including Privacy by Design/Default); • Change management; • Disaster recovery and Incident handling; • Acceptable use; ; To ensure that every employee understands their responsibilities to follow the requirements set in the ISMS we have implemented several policies.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Change management is carried out in co-operation with the customer. All change management is logged and recorded via the Argus platform. Security is at the core of the offering so all changes are assessed based on the impact it has on the security of the service.; ; In general, the Services have no hard limit on the number of changes within a given period. However, should the Service Provider find the number of changes to be unreasonably high, the Service Provider, together with the Customer, will investigate the cause(s) and request the Customer to take corrective action.
• Vulnerability management type: Undisclosed
• Vulnerability management approach: Mnemonic’s entire infrastructure, both for service delivery and users, is monitored 24x7 by our Argus Managed Defence service – meaning all internal security incidents are escalated directly to our SOC and assessed by security analysts 24x7.; ; mnemonic subject all networks to continuous authenticated vulnerability monitoring. If severe vulnerabilities are discovered, mnemonic will initiate specified scans to identify if the vulnerabilities occur in our systems.; ; The results from these internal and external scanning activities are reported in Argus and monitored by our internal infrastructure team.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: We have established a strict regime for control, protection and monitoring of our systems against malicious content. This is part of our core services and we are a customer of ourselves, including our 24/7 Security Monitoring and our Incident Response services.; ; We proactively use threat hunting to identify potential incidents in both mnemonic's, and our customers, environments. If an incident is identified we have a 24/7 incident response team who can respond immediately.
• Incident management type: Supplier-defined controls
• Incident management approach: The incident management process is described in our Quality Management system based on the ISO 27001 framework. Detection and reporting is based on the same service we provide to our customers, including playbooks and report templates for common events and incidents.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 1%
• Between £250,000 and £500,000: 1%
• Between £500,001 and £1,000,000: 1%
• Between £1,000,001 and £2,500,000: 1%
• Between £2,500,001 and £5,000,000: 1%
• Over £5,000,001: 1%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: SGS
• ISO 9001 accreditation date: Tuesday 15 March 2022
• What the ISO 9001 doesn’t cover: As our staff are a fully remote workforce the company physical office location is not covered. Clause 7.1.5 (calibration) is not in the scope. ISO 9001 does not cover financial processes.
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: F416f438-c625-443c-8b8d-a1b8f3b804e3
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 8d0e7cb8-30a3-4374-b713-d15f8d7f0c7d
• Other security certifications: Yes
• Any other security certifications: IASME Cyber Assurance Level 1 Certificate

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Activities that demonstrate a collaborative way to work with a diverse range of businesses as part of the supply chain
    • Plans for positive actions with community groups.

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort
    • Offering a range of quality opportunities with routes of progression if appropriate, e.g. T Level industry placements, students supported into higher level apprenticeships.
    • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

    • Other measures to offer development opportunities for the target cohort(s) in the contract workforce
    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort
    • Creation of outreach activities to create a pipeline of employees for the future contract delivery
    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@somerfordassociates.com. Tell them what format you need. It will help if you say what assistive technology you use.