Insight

Insight VMware Carbon Black Cloud

VMware Carbon Black Cloud™ (“VMware Carbon Black Cloud”) is a cloud-native Endpoint and workload protection platform that enables customers toprotect, prevent, detect, and respond to cybersecurity attacks on theirEndpoints and server workloads. This Service Description governs the serviceofferings that are available for purchase.

Features

• VMware Carbon Black Cloud Endpoint™Standard (NGAV)
• VMware Carbon Black® Cloud Audit andRemediation™
• VMware Carbon Black® CloudEnterprise EDR™
• VMware Carbon Black Container™Essentials
• VMware Carbon Black Container™Advanced
• VMware Carbon Black Cloud Endpoint™Advanced
• VMware Carbon Black Cloud Endpoint™Enterprise
• VMware Carbon Black CloudWorkload™ Essentials
• VMware Carbon Black CloudWorkload™ Advanced –
• VMware Carbon Black CloudWorkload™ Enterprise –

Benefits

• Next-generation anti-virus offering,including behavioral endpoint detectionand response.
• Remote system audit and riskremediation solution includingcompliance,
• Advanced enterprise endpoint detectionand response solution for securityoperations
• Continuous visibility, security, andcompliance for full Kubernetes lifecycleapplications.
• Container runtime workload anomalydetection and egress traffic control,
• Vulnerability Management and CarbonBlack Cloud Audit and Remediationcapabilities
• Advanced Threathunting and EnterpriseEDR capabilities
• Protect workloads running in virtualized,private and hybrid cloud environments
• Advanced Workloads plus next-generation antivirus protection andbehavioral EDR.
• Enterprise threat hunting for workloads.

£25 to £74 a licence a year

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at pstenderteam@insight.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

754098260005040

Contact

Public Sector Tender Team
0344 846 3333
pstenderteam@insight.com

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: During the subscription term, content will be deleted as detailed below.VMware Carbon Black Cloud Endpoint Standard:; • Short term events areretained and available to the customer for a minimum of 30 days and amaximum of 32 days for search and investigation.; • Alerts and theirassociated event data (“long term events”) are retained for a minimum of 180days and a maximum of 210 days.; Retention period can be extended withadditional cost
• System requirements:
  • https://docs.vmware.com/en/VMware-Carbon-Black-Cloud/services/cbc-endpoint-standard-oer.pdf
  • https://docs.vmware.com/en/VMware-Carbon-Black-Cloud/services/cbc-audit-and-remediation-oer.pdf
  • https://docs.vmware.com/en/VMware-Carbon-Black-Cloud/services/cbc-enterprise-edr-oer.pdf
  • https://docs.vmware.com/en/VMware-Carbon-Black-Cloud/services/cbc-container-essentials-oer.pdf
  • https://docs.vmware.com/en/VMware-Carbon-Black-Cloud/services/cbc-workloads-oer.pdf

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Premium and Platinum Support would be available 24X7X365 days.; Note: Standard supportwould be available from Mon-Fri (8am-8pm); For more information, please visithttps://community.carbonblack.com/t5/Support-Zone/tkb-p/support
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: No
• Support levels: Support level: Standard - Mon-Fri (8AM-8PM); Premium - 24X7X365; Platinum - 24X7X365For more information on service level agreement:https://community.carbonblack.com/t5/Support-Zone/tkb-p/support; Platinum Support:https://www.vmware.com/content/dam/digitalmarketing/vmware/en/pdf/support/vmware-carbon-black-platinum-support-datasheet.pdf
• Support available to third parties: No

Onboarding and offboarding

• Getting started: VMware provides a range of resources to help to start using the VMwareCarbon Black Cloud service. These include comprehensivedocumentation (in multiple formats), introductory videos, hands-on labs,online and in-person training, access to a large ecosystem of partners andsupport from the customer success team and public sector accountteam.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: If you wish to extract your content from the VMware Carbon Black Cloudservice offering (to the extent you have not already done so prior totermination of your Subscription Term), you must notify us within five (5)days after the effective termination date, and we will assist you inextracting your content from the VMware Carbon Black Cloud serviceoffering. You will be responsible for all fees associated with contentextraction. If you do not notify us within that five-day period, YourContent may be permanently deleted and may not be recoverable.
• End-of-contract process: Termination of your Service Offering instance will result in permanentloss of access to the environments, discontinuation of services, and adeletion of the environments and configurations. We will retain yourContent in our backup systems for 90 days following the effectivetermination date. If you wish to extract your Content from the ServiceOffering (to the extent you have not already done so prior to terminationof your Subscription Term), you must notify us within thirty (30) daysafter the effective termination date, and we will assist you in extractingContent from the Service Offering. You will be responsible for all feesassociated with Content extraction. If you do not notify us within that 30-day period, your Content will be permanently deleted and will not berecoverable.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: Yes
• Compatible operating systems:
  • Linux or Unix
  • MacOS
  • Windows
• Designed for use on mobile devices: No
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: Web based Interface
• Accessibility standards: None or don’t know
• Description of accessibility: Using a browser; Device administration; Endpoint Security Incident ResponseThreathunting
• Accessibility testing: Browser magnification for impaired vision
• API: Yes
• What users can and can't do using the API: Carbon Black Cloud Python SDK; This SDK works with Platform, EndpointStandard, Audit Remediation, Enterprise EDR, and Workload APIs; Platform APIsare available to customers using any of the Carbon Black Cloud products.Additional product-specific APIs are available depending on which productsyour organization uses.; Container APIs help organizations reduce risk, obtaincompliance, and achieve secure Kubernetes environments at scale. Thissolution integrates into existing DevOps processes to reduce operationalcomplexity, and helps Security teams enforce compliance, security, andgovernance from a single dashboard.https://developer.carbonblack.com/reference/carbon-black-cloud/integrations/python-sdk/
• API documentation: Yes
• API documentation formats: HTML
• API sandbox or test environment: No
• Customisation available: No

Scaling

• Independence of resources: VMware Carbon Black Cloud is hosted on AWScloud and it can scale up without affecting service

Analytics

• Service usage metrics: No

Resellers

• Supplier type: Reseller (no extras)
• Organisation whose services are being resold: VMware

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest: Physical access control, complying with SSAE-16 / ISAE 3402
• Data sanitisation process: Yes
• Data sanitisation type:
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: Customers can export the event data in CSV format from theconsole at any time. Also, using REST APIhttps://developer.carbonblack.com/reference/carbon-black-cloud/cb-defense/latest/rest-api/
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • Legacy SSL and TLS (under version 1.2)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: VMware will use commercially reasonable efforts to ensure that, during any given monthof the Subscription Term, a Service achieves 100% Availability (as defined below). If theAvailability Percentage (as defined below) during a given month is less than 99.9%, acustomer will be eligible for a credit as provided below (“Service Credit”). This SLAapplies only to a customer’s production environment of the Service, and not to any non-production environment, including, without limitation, testing, staging,; For moreinformation on SLA, please follow the link:https://www.vmware.com/content/dam/digitalmarketing/vmware/en/pdf/support/vmw-carbon-black-cloud-service-level-agreement.pdf
• Approach to resilience: Our resiliency program identifies what preparations must be made in advance of adisruption, as well as the steps to be taken when an event occurs. The program isreviewed periodically to determine the most critical business processes and theresources—people, equipment, records, computer systems and office facilities requiredfor operation. All documented resiliency plans and processes follow an annual standardmaintenance and assessment schedule.; Key aspects of the resiliency program: Businesscontinuity management, Disaster recovery, Crisis management/crisis communications,Exercise and maintenance, Staffing, Pandemic planning
• Outage reporting: Public Dashboard; https://status.carbonblack.com/

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: Role Based Access Controls
• Access restriction testing frequency: Never
• Management access authentication:
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: Between 1 month and 6 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: Between 1 month and 6 months
• How long system logs are stored for: Between 1 month and 6 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: Schellman and Company LLC
• ISO/IEC 27001 accreditation date: October 14, 2021
• What the ISO/IEC 27001 doesn’t cover: The scope of the ISO/IEC 27001:2013 certification is limited to theinformation security management system (ISMS) supporting themanagement of the infrastructure and services used to support VMware’sin-scope cloud services and in accordance with the statement ofapplicability version 1.8, dated June 9, 2021, and aligned to the controlsets in ISO/IEC 27017:2015 and ISO/IEC 27018:2019. Assets within thescope of the ISMS include information, software,; databases, hardware,and employees supporting the in-scope VMware cloud services.
• ISO 28000:2007 certification: No
• CSA STAR certification: Yes
• CSA STAR accreditation date: 05/06/2021
• CSA STAR certification level: Level 1: CSA STAR Self-Assessment
• What the CSA STAR doesn’t cover: Please visit:https://cloudsecurityalliance.org/star/registry/vmware-inc/ for the various CSA STAR Certification details
• PCI certification: No
• Cyber essentials: No
• Cyber essentials plus: Yes
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: No
• Security governance approach: We model our security framework using the NIST SP 800-53 -We have an Information Security Governance Committee(ISGC) that is chaired by members of senior management andrepresentatives from our Information Security, IT Operations,HR, Marketing, Facilities and Legal teams.
• Information security policies and processes: Our Information Security Program is modeled using industrybest practices and regulatory standards, including NIST SP800-53 and ISO 27001. We maintain our own InformationSecurity Program and Policies to protect customer datahosted in our systems and perform annual reviews and auditsof our program to ensure the integrity of our hosted offering. --The VMware Information Security team manages theenforcement, development, and maintenance of informationsecurity policies and standards to ensure VMware InformationAssets are preserved in a security environment, in accordancewith generally accepted best practices, focusing on VMwarebusiness and risk objectives. The VMware InformationSecurity Team is responsible for updating policies as threatsand technologies change, initiating and managing periodicreviews of the information security policies and standards, aswell as evaluating exceptions to information security policyand standards. -- Our Information Security team overseesorganizational compliance while team leads in conjunctionwith IT and HR teams help enforce department-levelcompliance.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: We receive threat information and explore threat resolutions from theVMware Security Response Center(http://www.vmware.com/security/vsrc.html) - Regular internal andexternal vulnerability assessments tests performed against the SaaSenvironment - Risk methodology based on NIST standards, including: --Identifying and characterizing threats -- Assessing the vulnerability ofcritical assets to specific threats -- Determining risk (i.e., expectedlikelihood and consequences of attacks) -- Identifying ways to reducerisks -- Prioritizing risk reduction measures based on strategy
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: VMware has a Vulnerability Management program backed by approvedand tested policies and procedures. Vulnerability scans are performedregularly on internal and external systems. System and applicationowners are required to address critical and high vulnerabilities with a planof corrective action within 5 days of vulnerability discovery. Othervulnerabilities need to be addressed with a plan of corrective actionwithin a reasonable period of time.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Our cloud support staff have configured the system to notify IT personnelif the central processing unit (CPU) utilization is too high, disk spacelimited, memory issues, key service failures, bandwidth utilization, powerconsumption, or other performance items. - IT Operations hassubscriptions to pertinent vendor security and bug-tracking mailing lists.- After analyzing the severity and impact, network, utility and securityequipment is patched or upgraded
• Incident management type: Supplier-defined controls
• Incident management approach: We maintain an Incident Management Plan as part of our InformationSecurity Program. - Incidents are reported to and resolved by theappropriate Cloud Operations team and by senior management whereneeded. -- Alerts, responses and resolutions are tracked throughcompletion. -- In the unlikely event of an incident, we will notifycustomers within two business days of any customer data that isaffected. - Incident logs are reviewed by applicable support personnel foranalysis and remediation to avoid further incidents of similar type. Allremediation actions are reviewed and approved by our InformationSecurity Governance Committee.

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Social Value

• Fighting climate change:

  Fighting climate change

  ● Sustainable growth for VMware’s business requires decoupling our companygrowth from carbon emissions. To this end, we’ve accelerated our focus ondecarbonization and received third-party validation from the Science BasedTarget Initiative (SBTi) on our science-based targets. Since 2018, we havemaintained our certified CarbonNeutral® company status, in accordance withThe CarbonNeutral Protocol. Since 2019, we have sourced 100 percent of ourpower in our global facilities from renewable sources, in accordance withRE100 Reporting Guidance. ● VMware’s net zero emissions goal builds onapproved science-based targets and expands the scope of our climatecommitments. For us, a net zero goal means reducing emissions for our entirecarbon footprint. We are focused on prioritizing energy efficiency within ouroperations through our commitment to green buildings, working with oursuppliers to reduce their emissions, and supporting distributed workforcesthrough our Future of Work initiative. Through carbon financing, we supportlow carbon sustainable development projects that enable carbon avoidance tooffset our remaining emissions. In line with the leading net zero guidance, weare developing our strategy to include carbon removal projects to addressresidual emissions. ● In FY22, we furthered climate transition planning atVMware, guided by Taskforce on Climate-related Financial Disclosures (TCFD)recommendations. As VMware continues to learn more about climate risks, wecan build longer time horizon risks into our strategy to become even moresustainable and resilient.
• Covid-19 recovery:

  Covid-19 recovery

  ● Decisive action by VMware during the early days of the COVID-19 pandemicled to a company-wide remote workforce, which our customers were able toimplement as well through VMware’s Workspace solutions. ● ThroughVMware’s unique Citizen Philanthropy approach to giving, we empower everyVMware employee—wherever they are—to be active, engaged citizens,contributing to what matters most to them in their own communities.Throughout the pandemic, VMware people delivered food to neighbors inneed, made masks and donated resources to frontline workers and reliefefforts, and helped nonprofit organizations strengthen their IT operations sothey can focus on supporting their communities. VMware also supportedGlobalGiving’s Coronavirus Relief Fund and TechSoup’s COVID-19 ResponseFund, and raised the limit on matching gifts available to all VMware people.
• Tackling economic inequality:

  Tackling economic inequality

  ● VMware IT Academy partners directly with more than 2,500 educationalinstitutions, governments and nonprofits globally to empower learnersthrough coursework, labs and experiences. To enrich learning and help jump-start careers, our partner academic institutions can also access the latestsuite of VMware software solutions and use them in a hands-on educationalenvironment. VMware IT Academy is key to our 2030 goal of upskilling 15million people through our educational offerings and creates a pipeline ofdiverse talent that is available to advance companies’ digital journeys anddeploy VMware solutions. ● VMware donates our technology to academicinstitutions, enabling learners with access to technical training and labs acrosstechnology solutions and companies through Academic Cloud. ● VMware ITAcademy partners with the Rochester Institute of Technology (RIT) for theirCybersecurity Bootcamp, an immersive, 15-week hands-on training course toreskill or upskill unemployed individuals, including minorities and veterans. ●VMinclusion Taara offers free technical education on VMware products &technology that enable digital business transformation, addressing the gendergap in the Indian IT sector and empowering women with financial and socialindependence. ● VMware Responsible Sourcing supports sustainability,diversity and accessibility across our supply chain. VMware has committed toworking with 75% of our suppliers (by spend) to set their own science-basedtargets by the end of 2024. We are also prioritizing the sourcing of goods andservices through diverse businesses and have committed to spending $1.5Bwith diverse suppliers through 2030. Our definition of diverse supplierincludes: small-business enterprises, minority-owned enterprises, woman-owned enterprises, and businesses owned by other underrepresented groupssuch as LGBTQ, veterans, and proprietors with disabilities.
• Equal opportunity:

  Equal opportunity

  ● VMware joined the Valuable 500, a global business collective that is ignitingsystemic change and unlocking the business, social and economic value ofmore than 1 billion people with disabilities around the world. From ensuring thetechnology we develop is accessible for all to empowering our employeesthrough accessible, inclusive and innovative engagement and wellbeingprograms, our company remains committed to driving meaningful impact ondisability, wellness and neurodiversity inclusion. ● As a leading softwarecompany, user accessibility is top of mind at VMware. One of our ESG goals by2030 is to ensure the technology that we develop, and source within oursupply chain, is accessible for all. We created internal Accessibility Guidelineswithin VMware and committed to assess all new software and events suppliersfor accessibility standards aligned with our own guidelines. ● EmployeeResource Groups at VMware are called Power of Difference communities(“PODs”), and they play a strategic role in building a culture of belonging. Weare focused on driving a culture that is inclusive of all forms of diversity,including supporting employees with disabilities. In 2021, VMware was nameda Best Place to Work for Disability Inclusion by the Disability Equality Index(DEI).
• Wellbeing:

  Wellbeing

  ● At VMware, we enrich lives at work, at home and in the community, becausewe believe that empowering our people to bring their authentic selves to workdrives business excellence and enables us to achieve our business goals. Weprioritize employee wellbeing and work hard to foster a culture that is ethicaland respectful, kind and compassionate, which is defined by our EPIC2 values—Execution, Passion, Integrity, Customers and Community. ● Employeewellbeing at VMware is a top priority as we believe people are the key to oursuccess, and we are always striving to make it easier for employees to pursuewellbeing on their own terms, which will also help them perform well at work.We recognize that VMware has a responsibility to help support our employeesmanage the added complexities of their work and family situations since thestart of the COVID-19 pandemic. Our wellbeing benefits include: foursupplemental days off (our “EPIC2” days), life coaching and emotionalsupport, work-life services for employees and their families, and a wellbeingallowance.

Pricing

• Price: £25 to £74 a licence a year
• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: We can provide a free trial/proof of concept for any of thecomponents of Carbon Black Cloud. This would be to an agreedtimeline of typically 30 days maximum and would be set up with fullcollaboration between VMware and the Public Sector organizationto an agreed set of KPI's.

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at pstenderteam@insight.com. Tell them what format you need. It will help if you say what assistive technology you use.