INTEGRITY360 LIMITED

Delinea - Privilege Manager (Zero Trust & PEDM)

Privilege Manager is the most comprehensive endpoint privilege elevation and application control solution, capable of supporting enterprises and fast-growing organizations at cloud scale. Removing excess privileges from endpoints prevents malware attacks, policy-based application control keeps people productive, and actionable reporting demonstrates progress and compliance to executives and auditors.

Features

Implement and enforce least privilege
Create flexible granular application control policies & deployment configurations
Application Discovery for Administrative or Root Privileges
Automated Local Account Password Rotation
Centralized Application & Execution Event Logging
Child Process Control
End-user Justification/Admin Approval Workflow, Block, Elevation, Justification, Monitoring Policies
Windows & Mac Account Discovery on Workstations
End Point Monitoring, Application Quarantine, Sandboxing, & Isolation
Local Admin Rights Removal, Local Account/Group management & Activity Auditing

Benefits

Improve Security, Protect privileged access to tighten your attack surface
Unburden IT Teams, Control PAM easily with a simplified interface
Meet Compliance Mandates, Avoid breaches & significant financial penalties
Scale your PAM, Deploy elastically within Delinea’s enterprise-secure architecture
Lower IT support costs
Deploy in Cloud at speed & scale with faster ROI
Easy to Use - simplified interface, OOB templates & reports

£29.02 a licence

Free trial available

Service documents

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at bidreviewboard@integrity360.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

Contact

INTEGRITY360 LIMITED Paul Momirovski
Telephone: +44 20 3397 3414
Email: bidreviewboard@integrity360.com

Service scope

Software add-on or extension: Yes, but can also be used as a standalone service
What software services is the service an extension to: Delinea Platform.
Cloud deployment model: Public cloud

Private cloud

Hybrid cloud
Service constraints: No
System requirements: Windows Server 2012 R2 or newer

Directory services agent: Windows 2016 or Windows10 with 50Mb RAM/Disk

Inbound port 5593

Mac: macOS 10.15

Windows desktops: Windows 10 or newer

Windows Server 2012 R2 or newer

Unix/Linux: CentOS 7+, RHEL 7+, Oracle Linux 7+, Ubuntu 18.04+

User support

Email or online ticketing support: Email or online ticketing
Support response times: This is as per Delinea's support policy dependent on level of support and Priority level of the issue. Typically between 1hr and 24hrs. Please see https://delinea.com/support for more information.
User can manage status and priority of support tickets: Yes
Online ticketing support accessibility: None or don’t know
Phone support: Yes
Phone support availability: 24 hours, 7 days a week
Web chat support: No
Onsite support: Yes, at extra cost
Support levels: Delinea have award-winning support team to help you resolve any issues and get the most out of your products. Delinea offers 3 support packages:
• Standard - with working hours support
• Premium - 24x7 support
• Premium Plus - 24x7 with faster response times and a technical account manager.
Please see support policy for more details https://delinea.com/support.
Delinea have support teams level 1 to 4 and categorise issues between severity levels 1-5.
Support available to third parties: Yes

Onboarding and offboarding

Getting started: Delinea offers a Support and documentation Portal with all documentation, Knowledge Base Articles, Forums and how to videos. Delinea also offer with additional charge an extensive E-Learning library for clients' Administrators, E-Learning for end users. Delinea also have professional services who can help with installations, configurations and provide in-person training if required.
Service documentation: Yes
Documentation formats: HTML

PDF

Other
Other documentation formats: Delinea have a web documentation portal,

https://docs.delinea.com/online-help/library/start.htm where users can save/print
End-of-contract data extraction: Use inbuilt functionality to export data in CSV, XML & Zip format. Reports can also be saved in CSV & PDF formats.
End-of-contract process: Clients have 30 days to export their data, as per MSLA (EULA), using in built features, after 30 days the instance and data will be scheduled to be deleted using MS Azure secure delete protocols. See https://delinea.com/msla

Using the service

Web browser interface: Yes
Supported browsers: Microsoft Edge

Firefox

Chrome
Application to install: Yes
Compatible operating systems: MacOS

Windows
Designed for use on mobile devices: Yes
Differences between the mobile and desktop service: Web UI is preferred and more feature rich.
Service interface: Yes
User support accessibility: WCAG 2.1 AA or EN 301 549
Description of service interface: The Interface is a WEB Gui
Accessibility standards: WCAG 2.1 AA or EN 301 549
Accessibility testing: In house AT users that perform some limited testing.
Delinea also use tools for AT testing:
Axe Dev Tools are used for accessibility scanning and pipeline automation
For manual testing Delinea use both nvda and jaws.
More information and the WCAG report can be found at https://docs.delinea.com/online-
API: Yes
What users can and can't do using the API: Privilege Manager has limited API capabilities details of which can be found here https://docs.delinea.com/online-help/privilege-manager/api/index.htm
API documentation: Yes
API documentation formats: HTML

PDF
API sandbox or test environment: No
Customisation available: Yes
Description of customisation: Logos can be uploaded via Platform and the colour scheme can be amended to match corporate colours via the system setting plus the Dark & Light mode options

Scaling

Independence of resources: Privilege Manager production environment is set up to our defined baseline with load balancing to automatically scale with increased resource demand. Azure resources are dynamically allocated as required.

Analytics

Service usage metrics: Yes
Metrics types: OOB reports, custom reports and
Cloud Solution datacentre status: https://status.delinea.com/
Reporting types: Real-time dashboards

Regular reports

Reports on request

Resellers

Supplier type: Reseller providing extra features and support
Organisation whose services are being resold: Delinea

Staff security

Staff security clearance: Conforms to BS7858:2019
Government security clearance: Up to Baseline Personnel Security Standard (BPSS)

Asset protection

Knowledge of data storage and processing locations: Yes
Data storage and processing locations: European Economic Area (EEA)
User control over data storage and processing locations: Yes
Datacentre security standards: Managed by a third party
Penetration testing frequency: At least once a year
Penetration testing approach: ‘IT Health Check’ performed by a Tigerscheme qualified provider or a CREST-approved service provider
Protecting data at rest: Scale, obfuscating techniques, or data storage sharding

Other
Other data at rest protection approach: Data at rest is protected with AES256 and Transparent database encryption TDE.
Data sanitisation process: Yes
Data sanitisation type: Deleted data can’t be directly accessed
Equipment disposal approach: A third-party destruction service

Data importing and exporting

Data export approach: Use inbuilt functionality to export data in XML or CSV format.
Data export formats: CSV

Other
Other data export formats: XML

PDF

ZIP
Data import formats: CSV

Other
Other data import formats: XML

ZIP

Data-in-transit protection

Data protection between buyer and supplier networks: TLS (version 1.2 or above)
Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

Guaranteed availability: 99.9% uptime availability and 99.99% as part of the Delinea platform as per MSLA Service Level Addendum. Please see https://delinea.com/legal for more information and service credit information. Service credits can be applied upon written request as per MSLA Service Level Addendum.
Approach to resilience: Privilege Manager Cloud utilizes Azure SQL Databases, which are based on SQL Server Database Engine architecture adapted for the cloud environment in order to provide 99.9% availability. The architectural model is based on a separation of compute and storage and model relies on high availability and reliability of Azure Premium Storage that transparently replicates database files and guarantees no data loss if underlying infrastructure failure happens. Premium storage utilizes locally redundant SSD storage for replication. Locally redundant storage keeps three copies of the data within a single region. For regional disaster recovery, full database backups are performed weekly, differential database backups are performed approximately every 12 hours, and transaction log backups are performed every 5-10 minutes to protect the customer's business from data loss. The backups are stored in geo-redundant storage for 35 days. Privilege Manager Cloud uses Failover Groups with geo-replication which asynchronously replicates data from the primary region to a paired secondary region located in an alternate Azure region. The asynchronous replication results in a 5-second RPO in the event of failover. A critical component for many customers is auditing. Because of the data loss during a failover event, failovers are not performed immediately.
Outage reporting: Yes public dashboard, available at https://status.delinea.com/ Email Alerts to subscribed users

Identity and authentication

User authentication needed: Yes
User authentication: 2-factor authentication

Username or password

Other
Other user authentication: User logins to the service can be authenticated via Federated services, e.g. Active directory, local account, Secret server or platform. Authentication is configurable by the client as required and typically uses a username and password with MFA and/or SSO options The customer controls access to the Service and the data and would need to generate and provide an OTP to give access to Delinea Support. See https://trust.delinea.com/?itemName=access_control&source=click&itemUid=7103fdad-d6ac-45f6-b28d-e71f32884b7f and https://docs.delinea.com/online-help/privilege-manager/admin/users/index.htm?Highlight=users
Access restrictions in management interfaces and support channels: User logins to the service can be authenticated via Federated services, e.g. Active directory, or local account, or platform. Authentication is configurable by the client as required and typically uses a username and password with MFA and/or SSO options The customer controls access to the Service and the data and would need to generate and provide an OTP to give access to Delinea Support. To access Delinea support users must be a registered support user or provide the customer support pin.
Please see https://trust.delinea.com/?itemUid=7103fdad-d6ac-45f6-b28d-e71f32884b7f&source=click
Access restriction testing frequency: At least once a year
Management access authentication: 2-factor authentication

Identity federation with existing provider (for example Google Apps)

Dedicated link (for example VPN)

Username or password

Other
Description of management access authentication: https://trust.delinea.com/?itemUid=7103fdad-d6ac-45f6-b28d-e71f32884b7f&source=click
User logins to the service can be authenticated via Federated services, e.g. Active directory, or local account, or platform. Authentication is configurable by the client as required and typically uses a username and password with MFA and/or SSO options The customer controls access to the Service and the data and would need to generate and provide an OTP to give access to Delinea Support.
Please see https://trust.delinea.com/?itemUid=7103fdad-d6ac-45f6-b28d-e71f32884b7f&source=click
https://docs.delinea.com/online-help/privilege-manager/admin/users/index.htm?Highlight=users

Audit information for users

Access to user activity audit information: Users have access to real-time audit information
How long user audit data is stored for: User-defined
Access to supplier activity audit information: Users have access to real-time audit information
How long supplier audit data is stored for: User-defined
How long system logs are stored for: User-defined

Standards and certifications

ISO/IEC 27001 certification: Yes
Who accredited the ISO/IEC 27001: Coalfire
ISO/IEC 27001 accreditation date: 08/08/24
What the ISO/IEC 27001 doesn’t cover: The only 2 control objectives that are not in scope:
11.1.4 Protecting against external and environmental threats. Delinea leverage Azure and AWS physical datacentres, and they manage the physical and environmental controls for these facilities.
11.1.6 Delivery and loading areas. We do not manage delivery and loading areas of the facilities.
ISO 28000:2007 certification: No
CSA STAR certification: No
PCI certification: No
Cyber essentials: No
Cyber essentials plus: No
Other security certifications: Yes
Any other security certifications: SOC2 audited

Our software is Common Criteria , FIPS 140-2,

CSA STAR, and NIST compliant

Security governance

Named board-level person responsible for service security: Yes
Security governance certified: Yes
Security governance standards: ISO/IEC 27001

Other
Other security governance standards: Delinea is ISO27001 accredited and SOC2 audited. Our software is Common Criteria , FIPS 140-2, CSA STAR, NIST compliant. Delinea is GDPR-compliant and EU/US Data Privacy-Framework certified. Please see our trust centre for more information https://trust.delinea.com . We are currently undergoing Fed ramp certification and updating some of our accreditations.
Information security policies and processes: Delinea follows the ISO27001 framework and the controls are validated by SOC2 type II Audit. Delinea also follow NIST Cybersecurity framework. Delinea has a documented information security policy which is tested, reviewed and updated annually and approved by senior management and executive levels.

Operational security

Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Configuration and change management approach: Delinea follows an Agile methodology for our S/SDLC with change management tracked in our Issue and Project management system and worked between Development and QA. Before every release Delinea conducts vulnerability testing, both Static and Dynamic Code Analysis, and code reviews by two other developers. For major releases, "full system" QA process takes place. Delinea also adheres to OWASP and NIST. Delinea’s security controls aligned with NIST Cybersecurity Framework’s Core are tested by SOC2. Delinea monitor/protect against web application security risks, e.g. SQL injection, cross site scripting, OWASP Top 10 and Automated Top 20 threats.
Vulnerability management type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Vulnerability management approach: Vulnerability scans occur before application release and for our SSDLC. Delinea monitor and protect against the most critical web application security risks, e.g. SQL injection, cross site scripting, OWASP Top 10 and Automated Top 20 threats. Threat data is continuously updated and Delinea subscribe to direct vulnerability feeds, threat newsletters and vulnerability lists for Microsoft, Amazon AWS, SANS, and US-CERT and software vendors. Patch management processes are in place typically monthly. Delinea have independent 3rd party perform annual independent penetration and vulnerability testing on our solutions.
Please see https://trust.delinea.com/ and https://trust.delinea.com/?itemUid=9162b815-d8af-49f2-8c26-4ddb72f42f48&source=search and https://trust.delinea.com/?itemUid=f8feb4d4-b79d-47f3-9dd7-06c479a49dfe&source=title
Protective monitoring type: Supplier-defined controls
Protective monitoring approach: Delinea have systems and processes in place to perform protective monitoring, incident management and vulnerability management. Delinea perform regular vulnerability and penetration testing, as well as monitor threat data and updates. When a security report is filed, either from a customer or discovered internally, the same process occurs. First, each individual reported item is validated and, if valid, it is given a CVSS score. Delinea follow NIST guidelines for remediation. For more information please see our trust centre https://trust.delinea.com/ and https://trust.delinea.com/?itemUid=9162b815-d8af-49f2-8c26-4ddb72f42f48&source=search and https://trust.delinea.com/?itemName=application_security&source=click
Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
Incident management approach: Delinea have incident management plan which is based on ISO27001 and NIST and is SOC2 Audited. All potential security incidents are first reviewed and triaged by Delinea’s Security Operations team and escalated to the Critical Incident Response Team (CIRT) as required. the CIRT determines the scope and risk and responds appropriately to that incident with immediate control and mitigation measures.

Secure development

Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

Connection to public sector networks: No

Social Value

Fighting climate change
Covid-19 recovery
Tackling economic inequality
Equal opportunity
Wellbeing

Fighting climate change

"Delinea complies with all environmental laws and has a Green office policy for environmental and sustainability. Additionally, we leverage third party cloud service providers (Microsoft & AWS) to host our software services. These providers maintain robust programs and provide relevant information on emissions, sustainability, and reduction initiatives. You can find additional information at the links below. Delinea are currently assessing our ESG status and are working to formalize and document our ESG program. However we do have recycling capabilities and initiatives to reduce unnecessary travel and impact to the environment As an organisation we allow our employees to work from home, thereby lowering the environmental impact of travel.
please see:
https://azure.microsoft.com/en-us/explore/global-infrastructure/sustainability
https://aws.amazon.com/sustainability/"

Covid-19 recovery

Delinea have taken a number of actions in response to the recent covid pandemic. Delinea initiated a work from home policy even before the government restrictions were introduced. Delinea have a documented Pandemic policy, which is reviewed and updated at least annually or as needed. Most staff are still working from home, with the office open with social distancing and hygiene cleaning basis when required. Delinea provide covid testing and sanitising stations in office environments when required and perform regular deep cleaning. During the Covid pandemic Delinea ran a customer campaign that made a $25 donation to Coronavirus Relief Fund for every customer review. The Coronavirus Relief Fund is part of Global Giving, a non-profit based in DC, but doing work globally to help with COVID-19 relief efforts.

Tackling economic inequality

"Delinea have a code of conduct and employment policies that include equality, regular employee reviews and industry audits to ensure we are in line with industry standard. At Delinea
employee diversity is a valuable asset, and every employee is treated with dignity and respect. As explained in the Employee Guide, employees and applicants for employment will be judged on the basis
of their performance and qualifications, without regard to race, creed, gender, religion, national origin, age, disability, political affiliation, matriculation, personal appearance, veteran status, sexual orientation
or any other legally protected characteristic."

Equal opportunity

Wellbeing

At Delinea we believe in the importance of our employee wellbeing. Delinea have comprehensive health cover including mental as well as physical health coverage. Delinea have chat channel, formal and public events to foster communications and fun.

Pricing

Price: £29.02 a licence
Discount for educational organisations: No
Free trial available: Yes
Description of free trial: Yes Free trials available for 30 days.
Link to free trial: https://delinea.com/resources?t=trial

Service documents

Request an accessible format

Cookies on Digital Marketplace

Delinea - Privilege Manager (Zero Trust & PEDM)

Features

Benefits

Pricing

Service documents

Framework

Service ID

Contact

Service scope

User support

Onboarding and offboarding

Using the service

Scaling

Analytics

Resellers

Staff security

Asset protection

Data importing and exporting

Data-in-transit protection

Availability and resilience

Identity and authentication

Audit information for users

Standards and certifications

Security governance

Operational security

Secure development

Public sector networks

Social Value

Pricing

Service documents