PRIMESYS LTD

Barracuda Email Protection - Premium

Barracuda Email Protection Premium contains everything in 'Advanced', like secure email gateway, spam & malware protection and advanced phishing prevention, and also includes capability to backup Microsoft 365 data for Exchange, OneDrive, SharePoint, MS team and MS Planner

Features

• Protection against spam, malware, viruses, phishing, and other threats
• Zero-Day Advanced Threat Protection
• Business Email Compromise (BEC). Extortion and other socially engineered attacks
• Artificial Intelligence (AI) based detection and response
• Post Delivery Remediation & incident Response including mailbox removal
• Detects and alerts account takeover activity
• Advanced Threat Protection using full-system emulation sandbox
• Link and typo-squatting protection
• Microsoft 365 Backup - Exchange, OneDrive, SharePoint, Teams, Planner
• Easy to buy, deploy & Use

Benefits

• Block spam, malware, and zero-day threats
• Real-time defense against spear phishing
• Defend your organization against account takeover
• Identify potential threats post-delivery based on insights gathered.
• Built-in Advanced Threat Protection uses sandboxing to discover zero-day malware
• API-based architecture with AI engine learns user communication patterns
• Identify anomalies in metadata content to detect socially engineered attacks
• Link protection redirects suspicious and typo-squatted URLs
• Protect Microsoft365 data from accidental & malicious activity
• Detects anomalous email account behaviour and alerts

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@primesys.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

708819754257261

Contact

Ryan Smith
07866813062
info@primesys.co.uk

About your service

• Service categories:

  Applications

  Collaborative

  • Email
• Multi cloud support: No

Service scope

• Software add-on or extension: Yes
• What software services is the service an extension to: Email protection requires Microsoft 365, Google Workspace or a on-premises SMTP server. ; Cloud to Cloud backup requires Microsoft365
• Cloud deployment model: Public cloud
• Service constraints: Requires Microsoft 365, Google Workspace or a on-premises SMTP server
• System requirements:
  • Per user license model
  • M365 Enterprise App Integration
  • MX Record modification optional on deployment method

User support

• Email or online ticketing support: Yes
• Support response times: Enhanced support is included with all services. Upgraded support can be purchased; https://www.barracuda.com/support/plans-and-packages
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: Yes
• Web chat support availability: 24 hours, 7 days a week
• Web chat support accessibility standard: None or don’t know
• How the web chat support is accessible: Web chat is accesible via main Barrauda Website, Support Portal and from within product service
• Web chat accessibility testing: None
• Onsite support: No
• Support levels: All Barracuda SaaS software comes with 24x7x365 support services included with the service. Premium support can be purchased at additional cost; ; https://assets.barracuda.com/assets/docs/dms/Barracuda_Premium_Support.pdf
• Support available to third parties: Yes
• AI chatbot: Yes

Onboarding and offboarding

• Getting started: All Barracuda customer have access to Barracuda Campus which documents both how to use the system and gives access to self paced video training. Customer may also purchase Professional Services direct from Barracuda to support installation and delivery of the solution. Professional Services are an additional cost.
• Service documentation: Yes
• Documentation formats: HTML
• End-of-contract data extraction: Upon termination, Barracuda will retain customer data in the Service for up to thirty days to give customers the opportunity to download their data. After the thirty-day period, Barracuda will have no obligation to maintain or provide any customer data and will have no liability resulting from the destruction of the customer data
• End-of-contract process: Upon termination, Barracuda will retain customer data in the Service for up to thirty days to give customers the opportunity to download their data. After the thirty-day period, Barracuda will have no obligation to maintain or provide any customer data and will have no liability resulting from the destruction of the customer data
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: See Barracuda T&C's https://www.barracuda.com/company/legal

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Platform will work with any browser however recommended to be used via desktop for clarity and ease of use.
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: Interface is web based and allows for resellers and customers to support environments
• Accessibility standards: None or don’t know
• Description of accessibility: Barracuda services are designed to work with accessible features of the web browser.
• Accessibility testing: None
• API: Yes
• What users can and can't do using the API: Currently users can gain access to service health and performance reports. Further expansion of API capabilties will expand in 2026
• API documentation: Yes
• API documentation formats: Open API (also known as Swagger)
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: Customers can modify many elements of the solution to manipulate detection boundaries, allow/block email based on email address or domain and customise the level of automation within the solution.

Scaling

• Independence of resources: Barracuda Email Protection is designed and built with a highly resilient and sclable cloud architecture that will expand upon demand increase. This is all backed by a published SLA of which further details can be found here: https://assets.barracuda.com/assets/docs/dms/Barracuda_Email_Protection_SaaS_Description.pdf

Analytics

• Service usage metrics: Yes
• Metrics types: Email processing volumes; Top attacked email addresses; Volume of various email types processed; Volume of email protected; Plus much more
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Reseller (no extras)
• Organisation whose services are being resold: Barracuda Networks

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with another standard
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
  • Other
• Other data at rest protection approach: Data at rest encryption to AES256bit
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type: Deleted data can’t be directly accessed / Cryptographic Erasure

Data importing and exporting

• Data export approach: Upon termination, Barracuda will retain customer data in the Service for up to thirty days to give customers the opportunity to download their data. After the thirty-day period, Barracuda will have no obligation to maintain or provide any customer data and will have no liability resulting from the destruction of the customer data
• Data export formats: Other
• Other data export formats:
  • PST
  • ZIP
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • Other
• Other protection between networks: Data is secured using TLS based encryption.
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • Other
• Other protection within supplier network: Data is stored at rest encrypted to AES256bit standards. Additional protections are in place to ensure restricted access to certificate repositories.

Availability and resilience

• Guaranteed availability: Barracuda cloud solutions are built with high availability at the core to ensure uptime of services. Further details can be requested during purchase process.; Barracuda Networks supply a service with an SLA of 99.9%. See link for latest SLA documentation; https://assets.barracuda.com/assets/docs/dms/Barracuda_Email_Protection_SaaS_Description.pdf
• Approach to resilience: Available upon request
• Outage reporting: All outages are recorded on website https://status.barracuda.com. Email and SMS alerts can be subscribed to for the relevant service

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: Barracuda Email Protection has an inbuilt RBAC system that allows users of the platform to be granted access to services
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Other
• Description of management access authentication: Barracuda Email Protection platform has an inbuilt RBAC system that allows users of the platform to be granted access to services

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: You control when users can access audit information
• How long supplier audit data is stored for: Between 1 month and 6 months
• How long system logs are stored for: Between 1 month and 6 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards:
  • ISO/IEC 27001
  • Other
• Other security governance standards: SOC 2 Type 2
• Information security policies and processes: https://assets.barracuda.com/assets/docs/dms/Barracuda_Email_Protection_SaaS_Description.pdf
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Barracuda has a comprehensive change control and QA process in place. Further details can be requested via https://trust.barracuda.com regarding inependent verification
• Vulnerability management type: Undisclosed
• Vulnerability management approach: Barracuda has a comprehensive vulnerability management process in place. Further details can be requested via https://trust.barracuda.com regarding inependent verification
• Protective monitoring type: Undisclosed
• Protective monitoring approach: Barracuda has a comprehensive proactive monitoring process in place. Further details can be requested via https://trust.barracuda.com regarding inependent verification
• Incident management type: Undisclosed
• Incident management approach: Barracuda has a comprehensive Incident management process in place. Further details can be requested via https://trust.barracuda.com regarding independent verification
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Barracuda offers full featured trial license for 14 days. Customer will be required to complete information form to have trial licenses assigned. ; ; https://www.barracuda.com/support/free-trials
• Link to free trial: https://www.barracuda.com/support/free-trials

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 5%
• Between £500,001 and £1,000,000: 5%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 9f316d05-94ac-492e-9466-4e57b54bb49f
• Cyber essentials plus: No
• Cyber Essentials Alternative: None of the criteria
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Measures to involve local stakeholders and/or users in design (e.g. in the design of services, systems, products or buildings)

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Inclusive and accessible recruitment practices, and retention-focused activities, including those provided in the Guide for line managers on recruiting, managing and developing people with a disability or health condition
    • Introducing transparency to pay and reward processes
    • Working conditions which promote an inclusive working environment and promote retention and progression

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@primesys.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.