Trustmarque Solutions Limited

TRUSTMARQUE FORCEPOINT DATA GAURD

Forcepoint Data Guard delivers zero trust, bi-directional, automated data and file transfers between physically separated networks. Data Guard leverages a trusted operating system and security policies enforcing role and process separation/isolation for automated, byte-level content inspection and sanitisation, with customisable rules handling the most specialised data types and protocols.

Features

  • Data in Motion DLP
  • Data Redaction
  • Protocol Break
  • XML Schema Validation
  • Secure File Transfer
  • Content Disarm and Reconstruct (CDR)
  • Antivirus
  • Webservice API Protections
  • CCTV Security
  • Protocol Inspection

Benefits

  • Protocol Break
  • Zero Trust File Protection
  • Data Protection in Motion
  • Zero Trust Network Segmentation
  • CCTV Centralisation
  • SOC Centralisation
  • Webservice API Controls and Data Protection
  • Protection of Sensitive Networks

Pricing

£49.80 a unit

  • Education pricing available
  • Free trial available

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@trustmarque.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

7 6 6 9 4 4 5 0 2 2 8 4 3 3 1

Contact

Trustmarque Solutions Limited Darren Moyes
Telephone: 01904 934435
Email: tenders@trustmarque.com

Service scope

Software add-on or extension
No
Cloud deployment model
  • Public cloud
  • Private cloud
Service constraints
Software is EAR99. Cannot be sold/used in certain sanctioned countries.
System requirements
  • FDG Small - 4 CPU CORE, 64GB-RAM, 2x 240GB SSD
  • FDG Medium - 8 CPU CORE, 128GB-RAM, 2x 480GB SSD
  • FDG Large 16 CPU CORE, 256GB-RAM, 2x 480GB SSD

User support

Email or online ticketing support
Email or online ticketing
Support response times
Forcepoint offers a range of support and SLA options with 24/7 online coverage available on all plans. For more details please see https://www.forcepoint.com/support/forcepoint-technical-support
User can manage status and priority of support tickets
Yes
Online ticketing support accessibility
None or don’t know
Phone support
Yes
Phone support availability
24 hours, 7 days a week
Web chat support
Web chat
Web chat support availability
24 hours, 7 days a week
Web chat support accessibility standard
None or don’t know
How the web chat support is accessible
N/A
Web chat accessibility testing
N/A
Onsite support
Yes, at extra cost
Support levels
Forcepoint Technical Support Offerings are backed by highly skilled professional service teams with knowledge and experience across Forcepoint’s entire product portfolio. Please use link for more detail and SIFA card for cost. https://www.forcepoint.com/support/forcepoint-technical-support
Support available to third parties
Yes

Onboarding and offboarding

Getting started
Forcepoint offers onsite training, remote training, user documentation, and professional services support. A customer can choose one or more of these options to understand and utilise the services.
Service documentation
Yes
Documentation formats
PDF
End-of-contract data extraction
Configuration files and log files can be exported manually at any time or done automatically through scheduled backups. Data extraction utilises SFTP or SCP.
End-of-contract process
At the end of the contract, the Data Guard will still be accessible so that log files and configuration files can be accessed and extracted, but data will no longer flow through the Data Guard.

Using the service

Web browser interface
Yes
Supported browsers
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
Application to install
No
Designed for use on mobile devices
No
Service interface
Yes
User support accessibility
None or don’t know
Description of service interface
The interface is a command line interface created based off of common networking CLI interfaces. This interface offers help, autofilling, and guidance as a user interacts with the system.
Accessibility standards
None or don’t know
Description of accessibility
The terminal used to access the command line can be configured with user selected font size, text colors, and background colors
Accessibility testing
N/A
API
No
Customisation available
Yes
Description of customisation
Users can customise the service by selecting the combination of security filters that are utilised. They can also create their own custom Lua scripts for inspection/validation rules.

Scaling

Independence of resources
Available on request

Analytics

Service usage metrics
No

Resellers

Supplier type
Reseller providing extra support
Organisation whose services are being resold
Forcepoint

Staff security

Staff security clearance
Conforms to BS7858:2019
Government security clearance
Up to Developed Vetting (DV)

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
United Kingdom
User control over data storage and processing locations
Yes
Datacentre security standards
Complies with a recognised standard (for example CSA CCM version 3.0)
Penetration testing frequency
At least once a year
Penetration testing approach
Another external penetration testing organisation
Protecting data at rest
Other
Other data at rest protection approach
Please contact a representative for details.
Data sanitisation process
No
Equipment disposal approach
In-house destruction process

Data importing and exporting

Data export approach
SIEM integration will allow data to be extracted into a 3rd party SIEM solution. Reports can be downloaded from Admin portal Dashboard
Data export formats
CSV
Data import formats
  • CSV
  • Other
Other data import formats
  • PDF
  • XLS
  • DOCX

Data-in-transit protection

Data protection between buyer and supplier networks
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
Data protection within supplier network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

Guaranteed availability
99.999% availability - SLA detail availble upon request
Approach to resilience
Data Guard cloud offering is run on the AWS environment. This utilizes the AWS resiliency capabilities.
Outage reporting
Data Guard will report outages via email or through log messages sent to a log collector.

Identity and authentication

User authentication needed
Yes
User authentication
Username or password
Access restrictions in management interfaces and support channels
Authentication is done via username and password.
Access restriction testing frequency
At least once a year
Management access authentication
Username or password

Audit information for users

Access to user activity audit information
Users have access to real-time audit information
How long user audit data is stored for
User-defined
Access to supplier activity audit information
Users have access to real-time audit information
How long supplier audit data is stored for
User-defined
How long system logs are stored for
User-defined

Standards and certifications

ISO/IEC 27001 certification
Yes
Who accredited the ISO/IEC 27001
Coalfire
ISO/IEC 27001 accreditation date
2021
What the ISO/IEC 27001 doesn’t cover
https://www.forcepoint.com/sites/default/files/resources/files/datasheet_iso27001_certification_en.pdf
ISO 28000:2007 certification
No
CSA STAR certification
Yes
CSA STAR accreditation date
Cloud Security Alliance
CSA STAR certification level
Level 2: CSA STAR Attestation
What the CSA STAR doesn’t cover
https://cloudsecurityalliance.org/star/registry/forcepoint-cloud-limited
PCI certification
No
Cyber essentials
Yes
Cyber essentials plus
No
Other security certifications
Yes
Any other security certifications
  • Privacy Shield - EU/US data privacy
  • ISO27018

Security governance

Named board-level person responsible for service security
Yes
Security governance certified
Yes
Security governance standards
  • CSA CCM version 3.0
  • ISO/IEC 27001
  • Other
Other security governance standards
ISO 27018
Information security policies and processes
Please contact a representative for details.

Operational security

Configuration and change management standard
Supplier-defined controls
Configuration and change management approach
Please contact a representative for details.
Vulnerability management type
Supplier-defined controls
Vulnerability management approach
Please contact a representative for details.
Protective monitoring type
Supplier-defined controls
Protective monitoring approach
Please contact a representative for details.
Incident management type
Supplier-defined controls
Incident management approach
Please contact a representative for details.

Secure development

Approach to secure software development best practice
Supplier-defined process

Public sector networks

Connection to public sector networks
No

Social Value

Fighting climate change

Fighting climate change

Trustmarque's Environmental Policy and Carbon Reduction Plan include delivering and supporting actions on reducing our carbon footprint and our impact on climate change. Our policies include 'Virtual First 'meetings, energy reduction plans, flexible working. Please contact Trustmarque to discuss the provision of Social Value. Any Social Value deliverable must be agreed with Trustmarque and be proportionate to the contract value and deliverables.
Covid-19 recovery

Covid-19 recovery

Trustmarque can provide re-training for those left unemployed by Covid-19 through skills training, CV and interview workshops. Please contact Trustmarque to discuss the provision of Social Value. Any Social Value deliverable must be agreed with Trustmarque and be proportionate to the contract value and deliverables.
Tackling economic inequality

Tackling economic inequality

Trustmarque tackles economic inequality through operating a diverse supply chain including a large number of SMEs and micro businesses. Our access to a broad range of suppliers ensures both resilience and capacity. Trustmarque is also continuously refining our supply chain to meet the ever-changing needs of our customers and to ensure we can always offer the best solution through capability, capacity and resilience at the best price. Our vendor agnostic approach among suppliers allows us to support innovation and disruptive technologies to deliver lower cost and/or higher quality goods and services to customers. Please contact Trustmarque to discuss the provision of Social Value. Any Social Value deliverable must be agreed with Trustmarque and be proportionate to the contract value and deliverables.
Equal opportunity

Equal opportunity

Trustmarque operates an Equal Opportunities policy that outlines our commitments including creating a workforce that reflects the diversity of our communities. Other initiatives include supporting disabled people to develop skills and supporting in-work progression. Please contact Trustmarque to discuss the provision of Social Value. Any Social Value deliverable must be agreed with Trustmarque and be proportionate to the contract value and deliverables.
Wellbeing

Wellbeing

Wellbeing

We align our approach to mental wellbeing to the six standards in the Mental Health at Work commitment, including staff work and wellbeing sessions, flexible working, speak-up policy, etc. Please contact Trustmarque to discuss the provision of Social Value. Any Social Value deliverable must be agreed with Trustmarque and be proportionate to the contract value and deliverables.

Pricing

Price
£49.80 a unit
Discount for educational organisations
Yes
Free trial available
Yes
Description of free trial
Please contact a representative for details.
Link to free trial
Please contact a representative for details.

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@trustmarque.com. Tell them what format you need. It will help if you say what assistive technology you use.