LogiQ Consulting Ltd

Secure Internet Gateway

Delivery of a Secure Internet Gateway to enable internet access from sensitive systems and services. Logiq configure and operate cloud based gateways to enable secure internet access from fixed and remote endpoints. Logiq can support bespoke customer requirements to meet their functional and security objectives.

Features

• Web Category filtering
• File download blocking
• Domain extension blocking
• Intrusion Prevention
• Malware Protection
• SSL/TLS Decryption and packet inspection
• Microsoft Tenant Restrictions
• AWS Restrictions
• Social media controls
• GeoIP Upload Blocking

Benefits

• Secure internet boundary for endpoints and services
• Controlled access to internet based services
• Assured and protected internet browsing
• Centralised traffic monitoring and management
• Elastic scalability
• Suitable for OFFICIAL-SENSITIVE
• Supports remote and fixed endpoints

£15 to £50 a user a year

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at commercial@logiqconsulting.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

790914561950330

Contact

Tamzin Vaughan
0117 313 0902
commercial@logiqconsulting.co.uk

Service scope

• Service constraints: Gateway is hosted as a Cloud service and not suitable for the gateway being hosted on-premise
• System requirements: Endpoint agent installation is preferred

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Within 4 hours, Monday-Friday and between 9am and 5pm (excluding Bank Holidays)
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.1 AA or EN 301 549
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Yes, at an extra cost
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: WCAG 2.1 AA or EN 301 549
• Web chat accessibility testing: NA
• Onsite support: Yes, at extra cost
• Support levels: Logiq Consulting provide online & telephone UK support between 9 - 5pm Monday to Friday (excluding Bank holidays) in our standard pricing. The service is ITIL aligned and certified to ISO20000. Logiq provide additional range of support levels to meet customer requirements, these are tailored to the customers business need and will be priced on request.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Typically an on-site or Video Conference introduction is provided at the beginning of the service, covering the primary aspects of the service. Further support is provided through the service portal and through documentation.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: This process can vary, but the process will be agreed prior to the commencement of the contract. This will largely be conducted via Logiq Consulting.
• End-of-contract process: At the end of the contract a data migration process will be decided upon and a migration plan will be produced. Where there are non-standard requirements and additional hardware is required to facilitate this, there is typically an additional charge.

Using the service

• Web browser interface: No
• API: No
• Command line interface: No

Scaling

• Scaling available: Yes
• Scaling type: Manual
• Independence of resources: This is built on cloud technologies that has scalability and elasticity built into its foundations.
• Usage notifications: Yes
• Usage reporting: Email

Analytics

• Infrastructure or application metrics: Yes
• Metrics types: Other
• Other metrics:
  • Usage
  • Bandwidth
• Reporting types:
  • Regular reports
  • Reports on request

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: Provided on request

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v3.0
  • Physical access control, complying with SSAE-16 / ISAE 3402
• Data sanitisation process: Yes
• Data sanitisation type:
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
• Equipment disposal approach: In-house destruction process

Backup and recovery

• Backup and recovery: Yes
• What’s backed up: The gateway configuration
• Backup controls: This is not operated by the user, but operated by the service provider. Logiq can support the service or can be handed over to the customer.
• Datacentre setup: Multiple datacentres with disaster recovery
• Scheduling backups: Supplier controls the whole backup schedule
• Backup recovery: Users contact the support team

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: Commercially reasonable efforts will be made to ensure that the Service will have an Availability of 99.99999% as measured over each Month.
• Approach to resilience: Resilient and multiple nodes geographically dispersed.
• Outage reporting: Email alerts

Identity and authentication

• User authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Username or password
• Access restrictions in management interfaces and support channels: Available on request
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Username or password
• Devices users manage the service through: Directly from any device which may also be used for normal business (for example web browsing or viewing external email)

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: Between 1 month and 6 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: Between 1 month and 6 months
• How long system logs are stored for: Between 1 month and 6 months

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: Yes
• Who accredited the PCI DSS certification: Barclaycard
• PCI DSS accreditation date: 15/08/2023
• What the PCI DSS doesn’t cover: No exemptions
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: Yes
• Any other security certifications: MOD Accreditation – DISX

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Policies available on request.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Logiq Consulting run a configuration and change management process for all their services. Processes are based on ITIL best practice industry standards. All processes are owned by the Head of Service Management.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Threats are assessed on a daily basis through a Threat and Vulnerability Management engine along with government notices. Patches are deployed within 14 days of a patch being available.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Monitoring is conducted with automated analysis using industry recognised engines and tools. Alerts are configured and responded to as and when these occur. Manual reviews of activities and alerts are conducted by the Logiq SOC.
• Incident management type: Supplier-defined controls
• Incident management approach: Incident management processes are documented and reported on.

Secure development

• Approach to secure software development best practice: Supplier-defined process

Separation between users

• Virtualisation technology used to keep applications and users sharing the same infrastructure apart: Yes
• Who implements virtualisation: Supplier
• Virtualisation technologies used: Other
• Other virtualisation technology used: Available on request
• How shared infrastructure is kept separate: Best practices related to virtualisation and segregation.

Energy efficiency

• Energy-efficient datacentres: Yes
• Description of energy efficient datacentres: Available on request

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  Logiq Consulting recognises it has a responsibility to the environment beyond legal and regulatory requirements and is dedicated to mitigating negative environmental impacts through targeted measures. We prioritise energy efficiency by employing smart technologies, virtualization and remote working policy. We manage electronic waste responsibly through certified recycling programs and promote green procurement practices through our SCM tool. Additionally, we invest in carbon offsetting initiatives by implementing our own Carbon Reduction Plan working toward Net Zero in line with PPN/0621 to counterbalance unavoidable emissions. Employee awareness and training programs foster a culture of sustainability, while ongoing environmental impact assessment drive continuous improvement. Strategic collaborations play a significant role in our approach and we collaborate with various providers and industry associations focused on sustainable solutions. These collaborations enable us to access cutting-edge technologies and share best practices for reducing environmental footprint in delivering the contract. This collaboration ensures that Logiq’s services not only meet security needs but also minimize its environmental impact. Logiq engages with its clients, regulatory bodies and industry experts to gather input and align its services with the environmental objectives. ; ; Logiq will regularly review the supply chain to ensure that they align with our ethos and environmental committments. We will conduct supply chain assessments by implementinga specialized Supply Chain Management tool where the responses will be monitored for compliance.By using this SCM tool, Logiq will ensure the contract performance will support the environmental objectives imposed by the Government’s 25 year plan. ; ; Throughout the contract lifecycle, we will maintain a commitment for continuous improvement where the environmental performance metrics will be monitored at Board Level and mitigation measures will be put in place to avoid any negative impacts. Also, feedback from stakeholders will guide our efforts to optimize environmental sustainability in providing the delivery of the contract.

  Covid-19 recovery

  As the global pandemic continues to have a knock-on effect to businesses and individuals, Logiq Consulting remains committed to ensuring that there are measures in place to minimise the impact to our employees and stakeholders. ; ; Prioritising the health and safety of our workforce while maintaining operational efficiency is key. Our offices are maintained to a high standard of cleanliness, and it is encouraged that employees adopt the same approach in their home office spaces. We respect the choices of the individual and strive to satisfy the requirements of the team to ensure that they feel safe in the workplace. Our employees have access to personal protective equipment if they choose as well as access to our HR team and Employee Assistance Programme for any concerns they may have. ; ; During the lifecycle of the contract, Logiq is dedicated at ensuring the customer’s Covid-19 policies are followed by all Logiq employees whilst also maintaining the highest level of precaution. ; ; Whilst Logiq has been proactive on ensuring its employees focused on working from home before, during and after the Covid-19 pandemic by making sure Covid-19 health and safety practices have been followed at all times. ; ; We have introduced flexible working arrangements as well as remote working which ensures continuity of contract delivery and uninterrupted services whilst simultaneously supporting the employees to work safely. ; ; We believe as a business we strike the right balance for our employees, the client and the local communities and will continue to monitor and assess the COVID-19 situation as well as taking on board feedback from our employees and stakeholders allowing us to implement changes as necessary.

  Tackling economic inequality

  Logiq Consulting is committed to addressing economic inequality. We understand and have experience in issues affecting employment, skills, and employment shortages in high-growth sectors. We also understand and have experience in relevant education and training issues. ; ; Through our recruitment policy and a range of methodologies and activities, we strive to create jobs and develop new skills to support contract requirements. We target recruitment to improve awareness of opportunities amongst people facing barriers to employment, e.g., ex-service personnel, work returners, people with disabilities, school leavers, and those in regionally deprived areas. ; ; We encourage collaboration and value feedback from stakeholders which guide our efforts to optimise effective recruitment campaigns, gathering ideas for solutions and initiatives. We work with suppliers to ensure they prioritise skills development and employment throughout the supply chain. ; ; Our commitment extends beyond recruitment where we create targeted programmes focusing on providing interested pupils with diverse work experience, conducting training schemes designed to result in recognised qualifications, building staff capabilities, actively attracting new and diverse talent, and promoting awareness of career development and recruitment opportunities. ; ; Through Continual Professional Development and by providing necessary tools and resources, we provide opportunities for employees to enhance their skills in collaboration with local training providers. We encourage volunteering, finding opportunities for employees to support careers initiatives in the local community. ; ; Our initiatives are strategically located to benefit individuals residing in and around the South-West (Bristol, Wiltshire, Devon) where 95% of our employees live and work. These initiatives include fostering social value, tackling economic inequality and contributing to local and regional community development. ; ; A social values committee is appointed to manage, monitor and deliver on our commitments, regularly consolidating metrics to be measured and analysed for review at Board level and ensuring that all initiatives and activities are robust, successful and metrics are transparently reported.

  Equal opportunity

  Logiq Consulting is dedicated to fostering an inclusive and diverse work environment where providing equal opportunities is more than policy. We strongly believe that diversity is a fundamental driver of innovation, creativity and success and everyone, regardless of background, has an equal chance to thrive at Logiq. ; ; In line with this commitment, Logiq have implemented various initiatives and practices aimed at promoting equality and diversity within our workforce. We have created an unbiased recruitment process to ensure a level playing field for all candidates, offering fair pay and flexible working to all employees. During the lifecycle of the contract, we strive to increase representation of people with disabilities and disadvantaged or under-represented groups and collect data to support our efforts. ; ; Logiq provides training and development opportunities for all employees supporting growth and to develop skills relevant to the contract. We aim to create an environment where everyone has an opportunity to succeed based on their skills, experience, and dedication. ; ; Logiq have established clear policies and procedures to prevent discrimination and harassment of any kind. We tackle modern slavery risks in the delivery of the contract by stringent diligence of the supply chain requiring all stakeholders to adhere to the Logiq ethos. ; ; We actively promote a culture of respect, understanding, and collaboration, where every individual has a voice and is valued for their unique perspectives and contributions. We are committed to continuous improvement and strive to continue in our efforts to maintain a safe and respectful working environment for all.

  Wellbeing

  Logiq Consulting is committed to supporting our employees and their families, suppliers and local communities to enhance their physical, mental and emotional wellness. We recognise that a healthy workforce is crucial for productivity, engagement and success and have implemented various strategies and initiatives to support our employees. ; ; Logiq promotes a healthy work-life balance by offering flexible working to all employees. We encourage a culture of open communication and support by internal resources as well as access to mental health support services via an Employee Assistance Programme. Logiq supports an active Mental Health First Aid Team, who provide support to all employees using on-line engagement for mental health drop-ins and physical meets through dedicated regular coffee mornings. ; ; Logiq strive to increase employee awareness and have focussed activity for Mental Health Awareness week. Our activities include guided meditation, wellbeing workshops, team walks, runs and cycling as well as a companywide steps initiative. We encourage a positive and nurturing working environment where employees feel able to prioritise their wellbeing. Logiq are committed to expanding the support of our employees and will regularly offer the opportunity to attend Mental Health First Aider training throughout the contract to ensure there is qualified support within each team. ; ; We have developed guidelines so that all employees have access to resources and support needed throughout the employee lifecycle. By demonstrating our commitment to employee wellbeing, we not only enhance the health and happiness of the team but also drive performance, productivity and retention. We strive to continuously seek to improve and develop our initiatives and are dedicated to maintaining a culture of respect, understanding and support.

Pricing

• Price: £15 to £50 a user a year
• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Proof of Concept

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at commercial@logiqconsulting.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.