Thales UK Ltd

Digital Trust

Digital Trust is a key enabler of digital transformation. Thales helps integrate Digital Trust into clients’ solutions with strong physical and digital identity sources, coupled with Data Centric Security (DCS) approaches and trust protocols, to enable more effective exploitation of value in customer data whilst mitigating safety and security constraints.

Features

• Trusted architecture and secure Cloud development
• Cyber Security Consultancy and assistance with research and development
• Security Incorporation at Design Stage (Secure by Design)
• Information Based Security Architectures (IBSA)
• Trust protocols and Trusted Endpoint services to support DCS
• Digital Identity Management for users, systems and services
• Secure accredited PKIaaS: design, build and transition, or fully managed
• Incorporates Physical Unclonable Functions (PUFs) and Supply Chain Security
• Distributed Ledgers and Supply Chain Security
• Trusted architecture and secure Cloud development

Benefits

• Enabler of digital transformation and secure trust through SbD
• Provides an integration route for other services and capabilities
• Sharing of information amongst trusted communities between trusted endpoints
• Access to Thales subject matter experts and product sets
• Applicable to IoT, Critical National Infrastructure, Defence, Finance, Transport, Government
• Enable existing product or service adaptation, to incorporate security
• Ensure appropriate cost effective security for the external threats
• Enable secure supply chains and trusted assemblies
• Rapid key management and reconfiguration that is policy driven.
• Adopt agile and innovative methods of exploiting value collected data

£650 a unit a day

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at fcmo@uk.thalesgroup.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

668990072475983

Contact

Phaedra Warnes
07974 011385
fcmo@uk.thalesgroup.com

Planning

• Planning service: Yes
• How the planning service works: Thales can support customers develop their own secure cloud platforms including hosting and software services. We can support the implementation of cloud platforms and software from a digital transformation, business process, solution design, hardware, software, security and service requirements perspective. This thereby ensures that customers meet their business, legal and security objectives. Thales can provide specific services in support of cloud or software design, these include:; • Implementation of Information Based Security Architectures (IBSA) to create trusted information-sharing communities; solutions can exist in the cloud or in hybrid configurations and are built on top of ID Warranting Services; • ID Warranting Services - the ability to give a component a unique, verifiable identity, that can then be used to ensure digital integrity of operation i.e. this is the device that is expected. Achieved through the use of Physically Unclonable Functions (PUF), Public Key Infrastructure (PKI), trust protocols and certificate management services.; • Trusted Architecture Development - design of secure systems using encryption (and secure key distribution SKD), trust protocols and other secure services.; • Secure Cloud Development Services - encryption capabilities such as cloud role based encryption, secure access to cloud through Remote Access Services (RAS) and connectivity (WAN/LAN).
• Planning service works with specific services: No

Training

• Training service provided: Yes
• How the training service works: Thales can support customers or SMEs in identifying human, technological, and business training requirements relating to cloud service or products. We can assist customers and SMEs in developing designs and deliver the programmes to meet and sustain your organisation’s specific needs for the future. We ensure that the entire learning process, from management structures, through employee competency to trainee motivation, drives your expansion and efficiency.; Thales can provide training for customers and SMEs in a number of different areas:; • Information Assurance - Thales can work with customers or SMEs to develop their in-house abilities to identify and manage security risks within their cloud systems through threat analysis, vulnerability assessments and architecture analysis.; • Security Implementation - Thales can help customers or SMEs implement a security strategy, technologies and approach into their cloud products and services.; • Security Technology - Thales can assist through training services in Thales’ security technology product sets (HSMs, Vormetric Cloud Encryption, PKI, Warranted Identity, etc.) that are appropriate to the cloud service under development.
• Training is tied to specific services: No

Setup and migration

• Setup or migration service available: Yes
• How the setup or migration service works: Thales is able to help businesses assess their current services or applications and understand how they could be migrated to a secure cloud platform. Thales assists customers in understanding the nature of the transition required in migrating these services from locally hosted to cloud hosted, while considering the security implications of such a move.; Thales has extensive experience of the deployment of services, and have service architects that specialise in all the elements of service delivery, including the complete ITIL stack. This expertise can be applied to the implementation of customer services and delivered as part of a migration programme.; In addition to the migration to cloud platforms, Thales enable customers/SMEs to mature and improve their products. This is achieved through analysis of scaling, vulnerabilities, threat vectors, and security weaknesses using the Thales Cyber Consultancy services (GDPR, CVI, DCPP, TRAP and ITHC) offering potential product or service changes that improve their current security posture.; Thales can offer solutions at different security levels. Staff delivering the services outlined above are cleared to SC, DV, HO and / or NPPV3, and projects can be run out of Thales sites that are List X facilities where appropriate.
• Setup or migration service is for specific cloud services: No

Quality assurance and performance testing

• Quality assurance and performance testing service: Yes
• How the quality assurance and performance testing works: Thales’ internal quality assurance processes, which can be applied to external customer systems or solutions if appropriate. The Thales Quality Management System (QMS) can be applied to development and transition activities, allowing a controlled and clear approach to digital transition activities. This includes migration to cloud, cloud service development, commissioning and operation. Thales can manage customer projects, and incorporate the benefits of the Thales QMS where appropriate and cost effective.; In addition to standard quality management capabilities, Thales offers the ability to assess the performance of platforms in terms of information assurance, regulatory compliance (DCPP, GDPR, etc.) and security assessment, along with the management of acceptance against pre-defined requirement sets. In addition Thales has facilities that enable the instantiation of representative systems to assess key performance characteristics that affect the overall effectiveness of the service or product e.g. data flow, processing speed, data storage needs, resilience and more. This enables customers to de-risk their service or product offerings before incorporating them into a live environment.; In addition to the quality assurance and testing of new cloud services and cloud based products, Thales is able to assess quality in terms of security through health checks and cyber vulnerability investigations.

Security testing

• Security services: Yes
• Security services type:
  • Security strategy
  • Security risk management
  • Security design
  • Cyber security consultancy
  • Security incident management
  • Security audit services

Ongoing support

• Ongoing support service: No

Service scope

• Service constraints: None

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: E-mail and call support from our consultants is available during normal working hours. Consultants endeavour to respond as soon as they are able. If consultants are non-contactable, an out-of-office e-mail auto-response typically provides alternate means of contact for urgent support.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Support levels: Thales consultants are available via phone, e-mail or face-to-face meetings when required. Typically, the contract of work shall specify the required frequency of meetings, and further arrangements can be made as appropriate. Consultants work closely with our customers to ensure that customers have the support they require throughout the project; the basis of the support will depend on the specific needs of the project and customer.

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Developed Vetting (DV)

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: LRQA
• ISO/IEC 27001 accreditation date: 22 No
• What the ISO/IEC 27001 doesn’t cover: The Thales UK Secure Connectivity Services (SCS) Information Security Management System (ISMS) incorporates the people, processes and technologies supporting a portfolio of network services.; The services include the Thales SCS; PSN Connectivity for DNSP and PSNSP services, PSN Gateways services, Secure & PSN Remote Access Services, PSN IPED, Secure Connectivity Services, Cybels Authenticate, Cybels Vigilance, NOC Services and secure hosting. In accordance with SOA ver 7.
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: Yes
• Any other security certifications:
  • PSNSP certifications up to OFFICIAL SENSITIVE
  • Police Enhanced Regime
  • ISO20000 Accreditation

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Tackling economic inequality
  • Wellbeing

  Fighting climate change

  Thales UK has a clear focus on fighting climate change. Thales has set itself a target of becoming a Carbon Net Zero company by 2030, powered by cleaner energy used more efficiently at our sites and for our business, with renewable energy supplies. ; ; There are several strategies that Thales and our Cyber offerings implement to fight climate change, including:; ; 1) Sustainable future. Thales has put fighting climate change at the centre of its strategy, highlighted by the fact that tackling climate change is one of the 4 Thales strategic pillars. Thales Cyber security and consultancy offerings have enabled companies to develop secure and sustainable products, prevent product recalls, learn digital lessons and reduce rework that go towards meeting their strategic sustainability objectives and tackle climate change.; ; 2) Travel reduction. Thales has introduced a Smart Working model to reduce the travelling required by the workforce. One pillar of this is arranging virtual meetings with Customers, Stakeholders and interested parties. Thales has also deployed numerous tools to enable Thales UK to effectively operate via remote / smart working. It is expected that meetings under G-Cloud could implement this methodology to offer the same benefits to the customer. Our Cyber Security Consultants, including those specialising in Cyber Security Management have championed this approach for several years, reducing the need for Thales and customers to travel to physical meetings.; ; 3) Carbon reduction. Thales strives to implement carbon reduction, through a series of targets to reduce carbon emissions annually. Smart working, championed by our Cyber Security Consultants and offerings has been a key enabler of this strategy. Additionally, services enabling secure collaboration mean that businesses do not need to procure additional new hardware, thereby having a positive environmental impact.

  Tackling economic inequality

  For the theme of “Tackling Economic Inequality” Thales’s methodology centres on a number of Sub themes these included: Levelling up, Increasing productivity and Education & Training.; Levelling up - Geographical Challenges; ; Thales is committed to the UK prosperity as a whole and drives economic activity in all parts of the country. In 2020, Thales supported over 25,400 jobs in the economy, driving growth in all four nations of the UK.; ; Thales works with local government and institutions to provide opportunities for local people and to support redevelopment of deprived parts of the UK. A recent example includes:; Investing in Wales - In partnership with Blaenau Gwent Council, the Welsh Assembly and the University of South Wales, Thales established a £20m National Digital Exploitation Centre in EbbwVale. It’s generating new jobs in high-demand and high-skill areas for a region that has suffered from economic inequality. ; ; Education and Training: Thales is committed to the professional development of the contract workforce and provides access to learning opportunities to ensure employees have knowledge and skills to keep up with the pace of technological change. ; ; Thales has an established early careers programme that attracts both apprentices and graduates (A&G) from a diverse background. In 2023 we hired 154 A&G colleagues, with a 2025 objective of at least 10% of all new hires to be graduates/apprentices. Where appropriate due to Security Aspects, Thales will enable A&Gs to work alongside projects teams to learn ‘on the job’ and gain valuable insights beyond academic lessons. ; ; School STEM Workshops. Careers Fairs & Volunteering: Thales has an established partnership with the Smallpeice Trust to deliver STEM and careers workshops to members of underrepresented groups in schools/colleges serving disadvantaged communities. ; ; All employees benefit from 24 hours yearly allowance for volunteering.

  Wellbeing

  Thales considers the health and wellbeing of our people to be fundamental to our success as a business. We have a well-established health and wellbeing (H&W) support provision, which has enabled us to rapidly provide critical support to our employees where/when it is needed most. ; In 2017, Thales signed the Time to Change pledge, publically stating our commitment to changing the way we think and talk about mental health in the workplace. We have trained 200+ of our people in Mental Health First Aid, a network of supporters who can recognise the early signs of mental ill health, listen whilst assessing for crisis, and provide information. ; Help @ Hand; Thales provides every employee & their families access to an Employee Assistance Programme - A 24/7 helpline for in the moment emotional and practical support, or signposting onward resources, such as healthcare or local assistance. ; In 2021 Thales developed a ways of working model to support and equip teams, individuals & people managers with resources and frameworks to promote our hybrid ways of working following the pandemic, the framework will promote a culture of wellbeing and psychological safety for teams to work effectively within the new working culture.; Sustained & continued support; Thales also has a dedicated Employee Relations team to provide specific and tailored interventions. Thales will work alongside Occupational Health, H&W providers and rehab services to establish adjustments and tailored programmes to enable employees to return to work in the manner that is safest for them.; Thales will track and monitor working patterns to ensure that all hours worked are booked in the ERP Systems to actively monitor loading on individuals so that individuals maintain a healthy work/life balance. Any significant deviations from the norm will be raised in sprint planning reviews to inform resource balancing actions.

Pricing

• Price: £650 a unit a day
• Discount for educational organisations: No

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at fcmo@uk.thalesgroup.com. Tell them what format you need. It will help if you say what assistive technology you use.