Cloud Security Assessment
Examination of cloud-based platforms, covering Internet-facing network and application services and/or supporting infrastructure. Supports migration to and integration with cloud environments by identifying security vulnerabilities and providing resolutions, allowing the customer (or Cloud Service Provider) to eliminate or mitigate the risk, thus greatly reducing the likelihood of a successful attack.
Features
- Security assurance for cloud-based platforms and environments
- Management summary with business implications
- Summary of risks identified, ordered from high to low severity
- Technical details of each issue found
- Recommendations for closing holes found
- Background information/evidence to support results
- Includes retesting of critical or high risk vulnerabilities identified
- Post-delivery support and guidance included
- Security cleared personnel (e.g. BPSS, SC, NPPV Level 3) available
Benefits
- Identifies security vulnerabilities and configuration weaknesses
- Demonstrates information security best practice
- Supports accreditation (e.g. RMADS) activities
- Aligns to an Information Security Management System (ISMS)
- Improves protection of business information and data assets
Pricing
£950 to £1,100 a unit a day
Service documents
Request an accessible format
Framework
G-Cloud 14
Service ID
6 1 8 3 4 6 5 0 6 4 8 5 3 0 6
Contact
NTA Monitor Ltd.
Gavin Simms
Telephone: 01634 721855
Email: gavin.simms@intertek.com
Planning
- Planning service
- No
Training
- Training service provided
- No
Setup and migration
- Setup or migration service available
- Yes
- How the setup or migration service works
- This service allows organisations who are using cloud hosted software, infrastructure or platforms, to gain independent analysis and information security assurance regarding the governance and controls that are in place to protect these services and systems. Such assurance is vital for cloud based services which possess specific security considerations due to their on-demand, remotely accessible and multi-tenanted attributes.
- Setup or migration service is for specific cloud services
- No
Quality assurance and performance testing
- Quality assurance and performance testing service
- No
Security testing
- Security services
- Yes
- Security services type
- Security testing
- Certified security testers
- Yes
- Security testing certifications
-
- CHECK
- CREST
Ongoing support
- Ongoing support service
- No
Service scope
- Service constraints
- N/A
User support
- Email or online ticketing support
- Email or online ticketing
- Support response times
-
Email support is offered Monday to Thursday 9 am to 5.30 pm and Friday 9 am to 5 pm. Response times are within 24 hours, but typically same day.
There is no service available at weekends. - User can manage status and priority of support tickets
- No
- Phone support
- Yes
- Phone support availability
- 9 to 5 (UK time), Monday to Friday
- Web chat support
- No
- Support levels
-
Support Levels:
• Email (FOC)
• Phone (FOC)
• Onsite (chargeable at day rate)
• A technical consultant would be allocated to handle any support issue
Resellers
- Supplier type
- Not a reseller
Staff security
- Staff security clearance
- Conforms to BS7858:2019
- Government security clearance
- Up to Security Clearance (SC)
Standards and certifications
- ISO/IEC 27001 certification
- No
- ISO 28000:2007 certification
- No
- CSA STAR certification
- No
- PCI certification
- No
- Cyber essentials
- Yes
- Cyber essentials plus
- Yes
- Other security certifications
- Yes
- Any other security certifications
-
- CHECK Green Light status
- CREST member status
- CE+ Certification Body
Social Value
- Social Value
-
Social Value
Equal opportunityEqual opportunity
The Company is committed to providing equal opportunities in employment and to avoiding unlawful discrimination in employment or to customers.
Pricing
- Price
- £950 to £1,100 a unit a day
- Discount for educational organisations
- No