STONESTHRO LTD

Threat modelling and risk assessment

Threatplane delivers expert threat modelling consulting services through our experienced security professionals. We produce comprehensive threat models for your systems, applications and business processes, providing simultaneous insight into risks, threats and controls. Each engagement delivers a prioritised remediation roadmap that serves as your master plan for cyber risk management.

Features

• Comprehensive threat model documentation for systems and processes
• Identified threats and attack vectors targeting your architecture
• Risk assessment linking threats to business impact
• Controls assessment and security gap analysis
• Prioritised remediation roadmap with actionable recommendations
• Dedicated consultant assigned throughout each engagement
• Discovery workshops capturing system context and business priorities
• Fixed-fee pricing based on system complexity
• Standard 4-week delivery with expedited 2-week option
• Post-delivery support included for 30 days

Benefits

• Gain clarity on cyber risks threatening your critical systems
• Prioritise security investments based on actual business impact
• Receive a master plan for systematic cyber risk management
• Get certainty of value through fixed-fee engagements
• Reduce internal resource burden with expert-led delivery
• Accelerate compliance with documentation ready for audit requirements
• Make informed decisions using evidence-based risk analysis
• Build compelling business cases with quantified security risk data
• Identify control gaps before they become security incidents
• Transform ad-hoc security efforts into structured risk management

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at andy.bates@stonesthro.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

710075373217568

Contact

Andy Bates
07880783166
andy.bates@stonesthro.co.uk

About your service

• Service categories:

  Cloud Support Services

  Security Services

  • Security risk management

Service scope

• Service constraints: Services are delivered remotely as standard. Onsite delivery is available at extra cost. Customer participation is required for discovery workshops and information gathering sessions. Final deliverables are provided in PDF and Excel format. Standard delivery is within 4 weeks. Expedited 2-week delivery is available on request.

User support

• Email or online ticketing support: Yes, at extra cost
• Support response times: Within 48 hours during business hours (9am to 5pm UK time, Monday to Friday). Support is not available at weekends or bank holidays.
• User can manage status and priority of support tickets: No
• Phone support: No
• Web chat support: No
• Support levels: During each engagement, a dedicated consultant is assigned to your project with direct communication throughout. Your consultant is your single point of contact for all project queries, status updates and deliverable discussions. Post-delivery support is included for questions about the delivered threat model for 30 days following completion. Extended support beyond this period is available at additional cost, either as ad-hoc consultancy or through our ongoing platform subscriptions which include access to our expert team for continued guidance and model maintenance.

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: Threatplane

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Developed Vetting (DV)

Pricing

• Discount for educational organisations: No

Architecture roles

Business architect

Role level	UK Rate	Offshore Rate
Trainee business architect	£1,200.00	£1,000.00
Associate business architect	£1,200.00	£1,000.00
Business architect	£1,200.00	£1,000.00
Lead business architect	£1,500.00	£1,200.00

Data architect

Role level	UK Rate	Offshore Rate
Data architect	£1,800.00	£1,500.00
Senior data architect	£1,800.00	£1,500.00
Chief data architect	£2,000.00	£1,800.00

Enterprise architect

Role level	UK Rate	Offshore Rate
Enterprise architect	£1,200.00	£1,000.00
Senior enterprise architect	£1,500.00	£1,200.00
Lead enterprise architect	£1,500.00	£1,200.00
Principal enterprise architect	£1,500.00	£1,200.00

Network architect

Role level	UK Rate	Offshore Rate
Associate network architect	£800.00	£800.00
Network architect	£1,000.00	£800.00
Lead network architect	£1,200.00	£1,000.00

Security architect

Role level	UK Rate	Offshore Rate
Security architect	£1,000.00	£800.00
Lead security architect	£1,200.00	£1,000.00
Principal security architect	£1,500.00	£1,200.00

Solution architect

Role level	UK Rate	Offshore Rate
Associate solution architect	£1,200.00	£1,000.00
Solution architect	£1,500.00	£1,200.00
Senior solution architect	£1,500.00	£1,200.00
Lead solution architect	£1,800.00	£1,500.00
Principal solution architect	£1,800.00	£1,500.00

Chief digital and data roles

Chief data officer

Role level	UK Rate	Offshore Rate
Chief data officer	£2,000.00	£1,500.00

Chief information security officer

Role level	UK Rate	Offshore Rate
Chief information security officer	£2,000.00	£1,500.00

Cyber security roles

Cyber security audit and assurance

Role level	UK Rate	Offshore Rate
Lead cyber security audit and assurance	£1,200.00	£1,000.00
Principal cyber security audit and assurance	£1,200.00	£1,000.00

Cyber security governance and risk management

Role level	UK Rate	Offshore Rate
Associate cyber security governance and risk manager	£1,200.00	£1,000.00
Lead cyber security governance and risk manager	£1,500.00	£1,200.00
Principal cyber security governance and risk manager	£1,500.00	£1,200.00

Cyber security monitoring

Role level	UK Rate	Offshore Rate
Associate cyber security monitoring	£1,000.00	£800.00
Lead cyber security monitoring	£1,200.00	£1,000.00
Principal cyber security monitoring	£1,200.00	£1,000.00

Cyber security incident response

Role level	UK Rate	Offshore Rate
Associate cyber incident response	£5,000.00
Lead cyber security incident response	£5,000.00
Principal cyber security incident response	£5,000.00

Cyber security vulnerability management

Role level	UK Rate	Offshore Rate
Associate cyber security vulnerability management	£1,000.00	£1,000.00
Lead cyber security vulnerability management	£1,200.00	£1,000.00
Principal cyber security vulnerability management	£1,200.00	£1,000.00

Cyber security digital forensics

Role level	UK Rate	Offshore Rate
Associate cyber security digital forensics	£1,800.00	£1,500.00
Lead cyber security digital forensics	£1,800.00	£1,500.00
Principal cyber security digital forensics	£1,800.00	£1,500.00

Quality assurance testing (QAT) roles

Quality assurance testing (QAT) analyst

Role level	UK Rate	Offshore Rate
Tester (QAT)	£1,000.00	£800.00
QAT analyst	£1,200.00	£1,000.00
Senior QAT analyst	£1,200.00	£1,000.00
Lead QAT analyst	£1,200.00	£1,000.00

Test engineer

Role level	UK Rate	Offshore Rate
Tester (test engineer)	£1,000.00	£800.00
Test engineer	£1,200.00	£1,000.00
Senior test engineer	£1,200.00	£1,000.00
Lead test engineer	£1,500.00	£1,000.00

User-centred design roles

User researcher

Role level	UK Rate	Offshore Rate
Associate user researcher	£750.00	£750.00
Junior user researcher	£900.00	£700.00
User researcher	£1,000.00	£800.00
Senior user researcher	£1,000.00	£800.00
Lead user researcher	£1,200.00	£1,000.00
Head of user research	£1,500.00	£1,300.00

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: Eda8b040-5636-4501-8dfd-375f408288e3
• Cyber essentials plus: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials Plus certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials Plus certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Other security certifications: Yes
• Any other security certifications:
  • ISO9000 in certification process
  • Cyber essentials+ in assessment at time of submission
  • ISO27001 in progress at time of submission

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
    • Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at andy.bates@stonesthro.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.