LEONARDO UK LTD

Security Monitoring Assessment and Design

Security Monitoring is fundamentally a risk management activity. In order to deliver the intended benefits, the monitoring must be tailored to the solution, rather than applied generically. This service assesses the specific risks to a corporate or operational network and defines the monitoring solution required to manage associated risks appropriately.

Features

• Fully evidence-based analysis
• Sector agnostic methodology
• Tailored threat assessment against the organisation and network
• Assessment of risks based on attack paths and attack scenarios
• Assessment of where monitoring can manage identified risks
• Definition of associated accounting items and recordable events
• Lowers log volumes by focussing only on what is required
• Aligned to relevant guidance including NCSC Security Monitoring and GPG13
• Technology and software neutral

Benefits

• Lowers cost of security monitoring solution
• Security Monitoring is tailored to the corporate or operational network
• Allows genuine business benefit from security monitoring
• Provides assurance that risks are appropriately managed through monitoring
• Prevents security monitoring becoming a tick-box activity
• Prevents security monitoring becoming a tick-box activity
• Lower cost delivering monitoring due to reduced licensing, infrastructure requirements
• Faster identification of compromise when it occurs
• Informs the evolution of your policies as your business changes
• Improved risk management through application of effective security monitoring

£687 to £1,556 an instance a day

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at PA_CDP@des.grplnk.net. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

679815951290010

Contact

Liz Owens
07801 714087
PA_CDP@des.grplnk.net

Planning

• Planning service: Yes
• How the planning service works: This is provided as part of the following services: Security Strategy and Advice, Cloud Security Architecture, Cloud Security Assurance. Please see the service definition document for details.
• Planning service works with specific services: No

Training

• Training service provided: Yes
• How the training service works: This is provided by our Security Training Development and Delivery service. See the service definition document for more details
• Training is tied to specific services: No

Setup and migration

• Setup or migration service available: Yes
• How the setup or migration service works: Leonardo provides a number of services to help buyers migrate to the cloud or between cloud services.; ; Our migration service is applicable to all kinds of cloud hosting environments and we would be happy to discuss your particular requirements with you.
• Setup or migration service is for specific cloud services: No

Quality assurance and performance testing

• Quality assurance and performance testing service: Yes
• How the quality assurance and performance testing works: Leonardo provides a number of services to help Clients to quality assure and performance test their Cloud environments.; ; Our services in this area are applicable to all kinds of cloud hosting environments and we would be happy to discuss your particular requirements with you.

Security testing

• Security services: Yes
• Security services type:
  • Security strategy
  • Security risk management
  • Security design
  • Cyber security consultancy
  • Security testing
  • Security incident management
  • Security audit services
• Certified security testers: Yes
• Security testing certifications:
  • CHECK
  • CREST
  • Tigerscheme
  • Cyber Scheme

Ongoing support

• Ongoing support service: Yes
• Types of service supported:
  • Hosting or software provided by your organisation
  • Hosting or software provided by a third-party organisation
• How the support service works: Leonardo’s Cloud Support services include; ; ; Assured Cloud Delivery Service ; Delivery Assurance Service; Cloud Infrastructure Delivery Management

Service scope

• Service constraints: None

User support

• Email or online ticketing support: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Support levels: Our Consulting service is underpinned by our NCSC Security Consulting Service aligned structure. In this, delivery is supported by a Head Consultant and a Service Owner who are available to provide support to delivery of the service and to ensure any risks and issues that may arise are dealt with appropriately

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Developed Vetting (DV)

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: Lloyd's Register Quality Assurance Limited
• ISO/IEC 27001 accreditation date: 13/11/2023
• What the ISO/IEC 27001 doesn’t cover: N/A
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: Yes
• Any other security certifications:
  • NCSC certified consultancy
  • ISO44001
  • ISO9001

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  Fighting climate change; Fighting climate change – effective stewardship of the Environment.; Leonardo has been pursuing a path of sustainability that integrates environmental issues into our business strategy. We closely monitor the energy consumption and carbon emissions footprint of our UK sites and incorporate innovative solutions to reduce our environmental impact continuously.; Leonardo also ranked as the Aerospace and Defence Industry leader in the Dow Jones Sustainability Indices for the third year running and achieved an A rating in the Carbon Disclosure Project 2021 Climate List. Leonardo's dedicated Sustainability Integrated Project Team published our first Carbon Reduction Plan in September 2021. The team has partnered with external scientific Consultants to ensure a forensic analysis of our carbon footprint and identify priority actions to support our decarbonisation strategy and a pathway to net zero.; In order to challenge ourselves, we have set the following targets:; • Reduce carbon emissions 40% by 2025 against a 2018 baseline; • Achieve Net Zero by 2030 for Scope 1 & 2 emissions, and by 2050 across our value chain; • Generate up to 25% of our total energy through localised energy generation; within 5 years.; Summary of recent current activity:; • All of the energy consumed by Leonardo in the UK is from certified renewable; sources. Leonardo has been purchasing 100% green energy since 2016; • Between 2018 and 2020, we achieved a 22% reduction in our Scope 1 & 2 emissions with an almost equal divisional split across our Helicopters and Electronics; / Cyber businesses.; • Both of our Helicopters and Electronics divisions hold ISO5001-2018; certification that requires a robust methodology in place. To further our commitment to reducing our environmental impact and providing greater transparency, Leonardo is aiming to achieve ISO14064-1 accreditation within 3 years for all UK operations.

  Covid-19 recovery

  Covid-19 recovery; COVID-19 Recovery – helping our workforce, local communities,; and businesses recover from the impact of the coronavirus; pandemic; ; Helping our workforce recover Leonardo is proud to have demonstrated operational and financial resilience throughout the coronavirus pandemic. Some of our engineering workforce were categorised as essential workers by the UK government and none of the broader workforce were placed on furlough, protecting the livelihoods of over 7,500 employees. We successfully adapted our approach to delivering our contracts and provided internal support to our workforce, also prioritising physical and mental wellbeing with expertise beyond our organisation.; We’ve long seen it as essential to move towards a model where our teams are empowered to decide where and how they work and our remote working experiences were fast tracked by the pandemic. In 2020 we launched ‘Custom Working’ as our new model of work. In parallel, Leonardo’s approach to delivering internal wellbeing initiatives were also enhanced to support this new model.; ; An improvement in our wellbeing support was the introduction of the Thrive: Mental Wellbeing App, to complement our holistic Employee Assistance Programme (EAP). The app offers 24/7 support, grounded in CBT (Cognitive Behavioural Therapy) techniques.; ; Helping local communities recover; Additionally, several of Leonardo’s ongoing business and social value activities have continued and adapted throughout the pandemic for the betterment of our communities. For example:; ; Leonardo employees across the UK also answered the national call in response to the Covid-19 emergency, to manufacture Personal Protective Equipment (PPE) required to help protect NHS staff and critical workers in the communities surrounding the company's UK sites. Leonardo employees turned their engineering skills to the production of protective face shields for key workers.; ; The Apprentice and Student Association based at the Yeovil site, also continued to fundraise for Mind in Somerset, a mental health charity.

  Tackling economic inequality

  Tackling economic inequality; Tackling economic inequality – new businesses, new jobs, new; skills, supply chain resilience; New businesses, new jobs, new skills; Leonardo employs over 7,500 people across UK regions in seven locations: Yeovil,; Edinburgh, Luton, Basildon, Southampton, Bristol, and Lincoln. 67% of our workforce hold highly skilled positions. We are one of the UK’s largest employers of engineering apprentices and graduates, investing around £3.5 million on employee training and development annually, and actively support STEM curricula. Alongside our own workforce, Leonardo is committed to the socioeconomic development of the UK through our smart, local supply chain partnerships, predominantly with SMEs (71% as of 2020).; Leonardo is committed to maintaining its skilled workforce and recognises the need to expand the UK’s pool of engineering resources and drive employee retention. We operate a nationwide education programme around company sites, aimed at encouraging young people to pursue STEM. In the post-Covid-19 environment, Leonardo offers greater flexibility and mobility for up to 75% of our workforce as part of its retention initiatives. Furthermore, to address any potential challenges to in-work progression for staff, we have renewed our; efforts to train and develop incumbent colleagues.; Amongst Leonardo's early career programmes, we continue to run an excellent apprentice scheme, which was rated "Outstanding" by Ofsted in 2019. We have a retention rate of 87% (after six years), and 45% of all apprentices are promoted within two years.; At any one time, Leonardo has over 500 people on a range of training schemes at our sites across the UK. Leonardo also runs an award-winning STEM Returners programme that supports highly skilled professionals to return to the industry after a career break. Leonardo understands the value that lies in an often-overlooked talent pool with a higher percentage of women and engineers from an ethnic minority background.

  Equal opportunity

  Equal opportunity; Equal opportunity – reducing disability employment gap,; Tackling workforce inequality, including modern slavery; ; Leonardo is proud to be an exemplary fair and inclusive employer, embracing diversity, supporting its local economies, being a customer of choice for its supply-chain ecosystems and a valued supplier to our customers. We promote an active Inclusion and Diversity; (I&D) Strategy to foster a welcoming work environment where everyone feels they can be themselves.; We have set ambitious targets as part of our I&D programme. This includes achieving a 70:30 gender balance by 2025, closing the Gender and Ethnicity Pay Gap and attaining the Disability Confident Award, having already attained the Committed Award in 2021 ahead of schedule.; To reduce the disability employment gap, Leonardo has ring-fenced a number of Apprentice roles for candidates with a disability or neurodiverse condition as part of our 2022 intake.; Leonardo has identified external partners to help showcase these opportunities to these candidates who will then be supported with tailored development upon joining the organisation.; ; To establish a voice amongst underrepresented employees and tackle workforce inequality we have created Network Groups for the following groups: people with disabilities and neurodiverse conditions, people with caring responsibilities, gender balance and our LBGTQ+ community. Each Network Group is engaged in promoting awareness of how best to support other colleagues and recommending initiatives for a more inclusive workplace.; Leonardo also conducts quarterly GLINT employee surveys to derive data with the objective of reducing attrition and anticipating staff needs. We have now also strengthened our communications surrounding the results and the implementation challenges as requested by employees. Leonardo is also a signatory to the Armed Forces Covenant and in 2018, was awarded the MoD’s Employer Recognition Scheme Gold Award for employing veterans.

  Wellbeing

  Wellbeing; Wellbeing – improving health and wellbeing, improving; community integration; ; At Leonardo, we believe that our employees work best when they can achieve a work-life balance. That is why we are committed to designing policies and developing a working environment that promotes the benefits and wellbeing of all our employees. All employees can access an Employee Assistance Programme (EAP), Learning and Development material via Coursera, and parental or dependent leave. In response to the COVID-19 pandemic, we also have introduced Custom Working for up to 75% of our office-based; staff. Employees are regularly encouraged to engage in physical activity and team bonding for better mental health through UK wide initiatives such as the ‘Race to Space’ event. This initiative challenged our employees to clock up a join total of 46,000km, which is the approximate distance from Earth to the Galileo satellite constellation and back by any physical means. Sending the message to our people of the importance of health and wellbeing. Beyond our own workforce, at Leonardo we recognise our responsibility to enrich local communities socially and economically in equal measure. Our efforts are also published on our external website to inform suppliers, customers, and communities of our commitment to social value. Our catalogue of academic programmes offers students an opportunity to deepen their understanding of STEM throughout their school and post-16 careers. Our company-wide STEM Ambassadors support efforts in Leonardo's local communities in partnership with existing initiatives and organisations. In Yeovil, Leonardo UK in partnership with the Royal Aeronautical Society hosted Cool Aeronautics for over 400 primary school students: they worked with Leonardo UK colleagues directly on Engineering projects. Leonardo graduate trainees also volunteer at the chosen charities; in 2019, they offered more than 450 hours to the two charities, including building a ’sensory garden’ at a preschool.

Pricing

• Price: £687 to £1,556 an instance a day
• Discount for educational organisations: No

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at PA_CDP@des.grplnk.net. Tell them what format you need. It will help if you say what assistive technology you use.