QINETIQ LIMITED
Cyber Threat Check - CTC
QinetiQ’s Cyber Threat Check provides a snapshot of threats, vulnerabilities and other cyber issues for a client’s environment, providing an understanding of the cyber state and how to improve the security posture. This is framed within a wider threat intelligence picture from a variety of sources.
Features
- Analyses real-world behaviour to report vulnerable systems and services
- Reports observed attacks and threats to networks
- Provides evidence of cyber security weaknesses for targeted remediation
- Deployed log collection/analysis facility - passive collection of network traffic
- Delivers assurance that technical security controls are functioning as designed
- Reports real attack information collected from systems and networks
- Uses threat intelligence about campaigns, attacks and vulnerability exploitations
- Uses library of attack signatures and advanced behaviour anomaly detection
- Uses Open Source Threat Intelligence from web and social media
- Data can be queried to extract specific information and events
Benefits
- Detects early signs of attack, supporting preventative actions
- Detects targeted attacks often missed by IDS, antivirus and firewalls
- Detects anomalies indicating infection by malware, spyware and adware
- Detects unusual user behaviour that impacts systems and networks
- Improves network security configuration
- Decreases the incident response time following an attack
- Supports patching and vulnerability management
- Illuminates the risk/threat landscape to inform organistional security posture
- Delivers real security information for strategic planning processes
- Low-cost requiring little effort and investment on your part
Pricing
£7,500 a device a month
Service documents
Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format,
email the supplier at ost@qinetiq.com.
Tell them what format you need. It will help if you say what assistive technology you use.
Framework
G-Cloud 14
Service ID
7 7 6 6 9 9 6 7 8 9 3 8 4 1 3
Contact
QINETIQ LIMITED
QinetiQ Opportunity Support Team
Telephone: 07786174902
Email: ost@qinetiq.com
Planning
- Planning service
- Yes
- How the planning service works
- CTC provides insight into how an organisation's networks are set up, including cloud service connectivity. From this it can provide advice on best practice around security configuration to cloud environments.
- Planning service works with specific services
- Yes
- Hosting or software services the planning service works with
- Supports connection to cloud service providers: Google, AWS, Azure, Office365.
Training
- Training service provided
- No
Setup and migration
- Setup or migration service available
- Yes
- How the setup or migration service works
- CTC provides insights into network topology including cloud connectivity. From this we can provide advice on industry good practice around connecting and securing connections to cloud.
- Setup or migration service is for specific cloud services
- Yes
- List of supported services
- Supports connection to cloud service providers: Google, AWS, Azure, Office365.
Quality assurance and performance testing
- Quality assurance and performance testing service
- Yes
- How the quality assurance and performance testing works
- CTC is targeted at network security analysis and testing, highlighting patching issues, configuration issues, as well as network attacks and threats. It can also reveal inefficiencies in the use of networks, such as users or applications using large proportions of available bandwidth.
Security testing
- Security services
- Yes
- Security services type
-
- Security strategy
- Security risk management
- Security design
- Cyber security consultancy
- Security testing
- Security incident management
- Security audit services
- Other
- Other security services
-
- Cloud Cyber Security Exercising
- Cloud Supply Chain Resilience
- Certified security testers
- Yes
- Security testing certifications
-
- CHECK
- CREST
- Tigerscheme
- Cyber Scheme
- Other
- Other security testing certifications
-
- CHECK
- CREST
- Tigerscheme
- Cyber Scheme
Ongoing support
- Ongoing support service
- No
Service scope
- Service constraints
- Not Applicable.
User support
- Email or online ticketing support
- Yes, at extra cost
- Support response times
-
The Helpdesk operates between 08:00 to 18:00, Monday to Friday excluding UK public holidays (reduced service between Christmas and New Year). During these hours, email queries will typically be responded to within 4 hours, but usually within one hour.
Support emails received outside these hours will be responded to when the Helpdesk is back online as above. - User can manage status and priority of support tickets
- Yes
- Online ticketing support accessibility
- WCAG 2.1 AAA
- Phone support
- Yes
- Phone support availability
- 9 to 5 (UK time), Monday to Friday
- Web chat support
- No
- Support levels
- Cyber Threat Check is sold as a consultancy service so experts provide bespoke advice and support to the client. QinetiQ employs a four tier priority system for incidents, problems, changes and service requests aligned with ITIL standards.
Resellers
- Supplier type
- Not a reseller
Staff security
- Staff security clearance
- Other security clearance
- Government security clearance
- Up to Developed Vetting (DV)
Standards and certifications
- ISO/IEC 27001 certification
- No
- ISO 28000:2007 certification
- No
- CSA STAR certification
- No
- PCI certification
- No
- Cyber essentials
- Yes
- Cyber essentials plus
- Yes
- Other security certifications
- No
Social Value
- Social Value
-
Social Value
- Fighting climate change
- Tackling economic inequality
- Equal opportunity
- Wellbeing
Fighting climate change
QinetiQ is experienced in delivering measurable and meaningful environmental outcomes and will offer customers a detailed Social Value plan tailored for individual contracts. This will include specific, measurable commitments that will be implemented by the Project Manager, supported by our internal environmental subject matter experts.
Commitments will be designed to deliver additional environmental benefits, and influence staff, customers, suppliers and communities. Contract-specific commitments agreed with the customer, will be proportionate to the scale of the contract, and could include:
>All staff supporting G-Cloud14 projects will undertake sustainability training as part of on-boarding for the contract, this can include Carbon Awareness Training.
>Creation and delivery of an annual bespoke sustainability workshop for G-Cloud14 customers and employees working on G-Cloud14 projects; this will be tailored to the customer’s key focus areas.
>Ongoing commitment to net zero and proactively looking for ways to deliver in a low carbon manner in line with the Science Based Targets Initiative.
>All involved on G-Cloud14 projects will undertake a minimum of one annual volunteering day – we will signpost those working on G-Cloud14 projects to environmental not-for-profit organisations located in customer’s local area, focusing on environmental issues relevant to that location. Additionally, we will encourage them to offer their skills to assist environmentally focused not-for-profit organisations with things such as software development or website development which these organisations may otherwise struggle to access.
>Offering slots on our sustainability lunch and learn programme to local charities and community organisations where they will be able to share key messages and invite QinetiQ staff to take part in volunteering days.
Contract specific commitments will be included as part of the project management plan and reported to the customer at agreed intervals.Tackling economic inequality
QinetiQ will deliver measurable and impactful initiatives to create new businesses, new jobs and build new skills, and increase supply chain resilience and capacity. Tailored commitments will be agreed on an individual contract basis to meet the specific challenges around economic inequality in the customer’s industry and locality.
Commitments will be proportionate to the scale of the contract, and could include:
• Integration of G-Cloud14 opportunities into our early careers programme, wherever possible, involving graduates and apprentices within G-Cloud14 contracts to provide opportunities to develop skills delivering these services.
• Delivering annual employability skills sessions for all apprentices and graduates in the Customer’s local area, or targeting a region with high levels of deprivation and relative proximity to a customer site.
• Offering STEM outreach sessions delivered by our skilled and experienced team using their allocated volunteering days. Locations for delivery and subject theme areas can be agreed with the customer to ensure relevance to their industry and the skillsets they require. This activity helps to generate interest and develop skills to build a pipeline of future talent locally.
• Flexible working arrangements remove barriers to employment experienced by many groups, including carers, we will offer remote working and a 9-day fortnight wherever possible.
• Uphold our commitment to fair recruitment and employment conditions through all recruitment under the G-Cloud14 framework, this includes use of diverse recruitment agencies, partners and platforms to attract a wide range of candidates.
• Offering support such as assistance with JOSCAR registration, to the following types of organisation to facilitate their growth: Small to medium sized enterprises, Voluntary, Community and Social Enterprises, Mutuals, Entrepreneurs
Commitments will be implemented and monitored by the Contract’s Manager with support from internal HR and Supply Chain experts. Progress will be measured and reported to Customers at agreed intervals.Equal opportunity
All recruitment, management and training actions undertaken to support G-Cloud14 contracts will be performed in alignment with our organisational commitments to reduce the disability employment gap and tackle workforce inequality. This includes, but is not limited to:
>Each person working on G-Cloud14 services will be paid a real living wage with annual pay reviews. Additionally, we implement the Living Wage Foundation concept of a Living Pension by offering a minimum salary threshold that ensures a real living wage, plus sufficient funds to put 7% into their pension fund without falling below the National Minimum Wage. This enables employees to choose to put this payment into their pension to take advantage of the maximum 10.5% matching contribution from QinetiQ.
>Each employee will receive a dedicated training budget of £500 annually to spend on training and development.
>All employees have access to thousands of online training programmes through our internal platform, Success Factors, LinkedIn Learning and through partner organisations, e.g. Henley Business School.
>Mentorship opportunities from a senior role who is not linked to the employees’ team.
>Flexible working options include hybrid working arrangements and 9-day working fortnights. This supports people to overcome barriers to work including caring responsibilities and mobility challenges.
Additionally, tailored initiatives will be offered, for example:
>G-Cloud14 specific training placements can be created dependent on contract duration and suitability.
>Delivering an annual Modern Slavery awareness day for G-Cloud14 customers and supply chain partners. This will be run by our Supply Chain Lead for Sustainable Procurement.
>Reasonable adjustments to physical working environments to support those with disabilities work on G-Cloud14 contracts.
Commitments will be implemented and monitored by the Contract’s Project Manager with support from internal Human Resources and Supply Chain experts. Progress will be measured and reported to Customers as part of an agreed reporting frequency.Wellbeing
Physical and mental wellbeing is a key consideration in our workplace culture and this carries through to delivery of customer contracts. In addition to our strong corporate offerings to all employees, G-Cloud14 employees will receive tailored commitments that are designed on a per contract basis to meet the needs of the service and working environment.
Contract-specific commitments will be agreed with the customer, will be proportionate to the scale of the contract, and could include:
>Improving community integration through use of volunteering days to support not for profit organisations in communities local to customer sites. This could involve skills donation or project work that both benefits local communities, and the individual’s mental and physical health.
>Uphold the mental health at work commitment through the delivery of all G-Cloud14 contracts.
>Establishing a contract-specific Employee-led Wellbeing group to guide employees to organisation wide offerings, and to implement contract specific initiatives that meet the needs of the contract workforce.
>Bespoke G-Cloud14 guidance to support individuals and line managers which could involve specialist coaching or online training courses.
>Ensuring access to Mental Health First Aiders
>Occupational health support for home working environments, when working onsite for a customer or on QinetiQ sites.
>Access to our Employee Assistance Programmes which provides access to a GP services, independent counselling, financial advice and legal assistance to employees and their immediate families. This has 24/7 access via the web, phone, or face-to-face.
>Access to Yu Life App which supports wellbeing though physical activity challenges including meditation. Employees can earn reward points that can be exchanged for vouchers (e.g., from Amazon) or donated to charities (e.g., Earthly).
Commitments will be implemented and monitored by the Contract’s Project Manager with support from internal experts. Progress will be measured and reported to Customers at an agreed reporting frequency.
Pricing
- Price
- £7,500 a device a month
- Discount for educational organisations
- No
Service documents
Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format,
email the supplier at ost@qinetiq.com.
Tell them what format you need. It will help if you say what assistive technology you use.