Nine23

Cyber Security as a Service (CSaaS) - Information Assurance & Risk Management Advisory

Cyber Security as a Service (CSaaS) & Information Assurance Risk Management. Cyber security advice and guidance.Cyber architecture, specialist cyber advice/solutions, cyber strategy, risk review, ISO27001, portfolio optimisation. Cloud Security Alliance(CSA), OWASP cloud security, MITRE ATT&CK, NIST CSF, cyber security experts who fit within your organisation risk reduction. Zero-trust architecture, cyber-culture.

Features

• Cloud/mobility platform agnostic experts with track record of government deployments
• Review of secure solutions and technical architectures for cloud services
• Cyber security strategy NIST cybersecurity CIS Controls ISO27001 strategy
• NCSC and industry best cyber practice compliance & agile methodologies
• Cyber tool selection-implementation, supply chain risk assurance, policy creation
• Technical threat assessments and risk management for cloud services
• End user device guidance and NCSC cyber guideline compliance
• Information assurance, security and cyber professionals including accreditors
• Cyber Security as a Service (CSaaS) ISO27001 implementation
• Experience in operating across central government, local government and MOD

Benefits

• Cloud solutions - Managed SOC, cyber defence information risk management
• Security assessment and documentation including remedial work where necessary
• De-risked Cyber project and programmes including BIM PAS 1192-5:2015
• Managed engagement with stakeholders inc users, business, accreditors, technical
• Supports implementation of Information Assurance standards, good practice guides
• Coordinates policy distribution, advises and oversees compliance
• Risk assessment, risk management and technical security design and implementation
• Security management plan creation framework adoption ISO27001, NIST CSF
• Cloud cyber security defence assessment/assurance MITRE att@ck framework
• Business continuity planning and risk management strategies cyber culture

£400 to £1,750 a unit a day

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at gcloud@nine23.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

798855504380468

Contact

Stuart McKean
+44 (0) 23 8202 0300
gcloud@nine23.co.uk

Planning

• Planning service: Yes
• How the planning service works: Nine23 has a proven track record of planning, delivering and servicing cloud hosted mobility solutions. This experience has given us knowledge about the requirements of cloud solutions including end user experience, overarching business requirements, technical and security compliance requirements, architectural design and service modelling.
• Planning service works with specific services: Yes
• Hosting or software services the planning service works with:
  • Mobility and remote access cloud solutions
  • Solutions that need to comply with government standards
  • Cyber Security
  • NIST
  • Mitre att&ck
  • NCSC

Training

• Training service provided: Yes
• How the training service works: As part of cloud solution deployments, we can provide training material and support services to ensure once a transition to service has been achieved, the organisation's admin staff can maintain configurations and confidently administer their solution.
• Training is tied to specific services: Yes
• Services the training service works with:
  • Mobility and remote access cloud solutions
  • Solutions that need to comply with government standards

Setup and migration

• Setup or migration service available: Yes
• How the setup or migration service works: Nine23 have worked with multiple vendors to setup and move services between cloud providers and from on-prem to cloud infrastructures. We provide support services to articulate the strategy, undertake the implementation and maintain the configuration, if necessary.
• Setup or migration service is for specific cloud services: Yes
• List of supported services:
  • Mobility and remote access cloud solutions
  • Solutions that need to comply with government standards
  • Private UK sovereign cloud

Quality assurance and performance testing

• Quality assurance and performance testing service: No

Security testing

• Security services: Yes
• Security services type:
  • Security strategy
  • Security risk management
  • Security design
  • Cyber security consultancy
  • Security testing
  • Security incident management
  • Security audit services
• Certified security testers: Yes
• Security testing certifications:
  • CHECK
  • CREST
  • Cyber Scheme

Ongoing support

• Ongoing support service: Yes
• Types of service supported:
  • Buyer hosting or software
  • Hosting or software provided by your organisation
  • Hosting or software provided by a third-party organisation
• How the support service works: We provide flexible support for hosted services with expertise gained through experience of multiple cloud service deliveries. We provide strategic guidance, architectural design, security and accreditation compliance advice, service and configuration support, and networking advice for software and systems - this support can be provided for solutions created by us for the client, or that the client has in place already.

Service scope

• Service constraints: No service contraints yet identified

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Within one hour
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Support levels: We are ISO 20000 certified for Service Management, we provide a standardised SLA for clients to ensure the service is understood by you and is sufficiently supported by our engineers. You will be able to interact directly with engineers who know your account and can deal with issues directly without having to first negotiate an unskilled Helpdesk.; All helpdesk staff are SC and NPPV3 cleared.

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Developed Vetting (DV)

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: UKAS
• ISO/IEC 27001 accreditation date: 01/07/2022
• What the ISO/IEC 27001 doesn’t cover: None
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: No

Social Value

• Fighting climate change:

  Fighting climate change

  One of our key objectives for 2022 is to complete certification of ISO 14001:2015 – Environmental Management. This internationally agreed standard sets out the requirement for businesses to review all areas of their organisation and improve their environmental performance through more efficient use of resources and waste reduction. Nine23 are anticipating certification by the end of May 2022. We welcome queries as to the status of this; ; For an SME it is harder to make a larger strides in reducing the causes of Climate Change; therefore we have joined forces with a number of other global hi-tech companies to set collective goals . The first is with the Trust X Alliance; which brings a number of SME’s together to look at the United Nations Sustainable Development Goals. There are a total of 17 Goals aimed at transforming our world, with Good Health and Wellbeing, Gender Equality, Decent Work and Economic Growth and Climate Action being our main focus.; ; In addition, Nine23 are part of a pilot group of technology companies working with Net Zero to create a consensus across the Tech industry as to what Net Zero means for businesses in the sector and to provide an industry standard against which business claiming to be Net Zero can be assessed. The goal is to create a pragmatic, effective and publicly available guide for Tech firms to achieve Net Zero. This “protocol” will be practical and easy to use, whilst remaining comprehensive in its scope and ambitious in its scientific robustness - offering businesses a realistic method of achieving credible sustainability goals, in line with the global climate goals required by the Paris Agreement.
• Covid-19 recovery:

  Covid-19 recovery

  Nine23 are working hard to help build a stronger economy by supporting Local businesses and creating jobs, apprenticeships and training opportunities within the local community where employees reside. We work closely with a number of local businesses to supply key areas of support. Accounting, telephony, and the University of Southampton Park - in addition, all hands-on trades are locally based. Where possible we also prefer to use SMEs for hardware or software procurement. We are also members of the living wage foundation and aim to raise living standards of our staff, in addition to paying our taxes.; ; Nine23 are a firm supporter of the apprenticeship scheme and graduate work placements and have provided numerous opportunities for developing roles through the service desk and marketing departments, into more senior positions. We are proud our business has a part to play in the wider health of the UK economy
• Tackling economic inequality:

  Tackling economic inequality

  Nine23 Ltd are passionate about tackling economic inequality. We are members of the Living Wage foundation and have moved from being office based, to hybrid working. This has enabled us to recruit further afield, broadening our reach of potential employees and giving us more diverse candidates. We now have staff based in various locations around the UK.; ; We strongly believe in the 5 foundational principles of quality work as outlined in the Governments Good Work Plan and closely align our culture, processes, and values in support of these. A continual focus on job satisfaction, safety wellbeing & security, fair pay, participation & progression, and voice & autonomy help to attract and retain staff from all backgrounds, minimise staff turnover, increase capability and maximise efficiency. Targeted plans are implemented to ensure continuous improvement in these key areas.; ; Continued focus alongside ongoing skill development, enables our workforce to reach their potential. Removing their (real or perceived) barriers to success, providing support for educational attainment, including providing training schemes to access professional qualifications ensures that their unique and valuable perspectives and skills are nurtured. Active engagement with the recruitment and development of existing staff and apprentices and offer posts specifically to those seeking to re-train into Digital and Cyber Security related roles. Our most recent apprentice joined Nine23 with a clear path for personal growth whilst learning on the job skills in the highly technical sector of IT support. We will be recruiting more individuals into our Cyber Security apprentice scheme.; ; We provide support for the existing workforce by providing careers advice, mentoring, coaching, training and development, mock interviews, and CV advice. We give them support for in-house progression and development into high growth areas or known skills shortages.
• Equal opportunity:

  Equal opportunity

  Even as a SME we aim to ensure opportunities are available to all. We are actively working to monitor, influence and improve our workforce diversity and social mobilisation efforts.; Nine23 are working hard to help build a stronger economy by supporting Local businesses and creating jobs, apprenticeships and training opportunities within the local community where employees reside. We work closely with a number of local businesses to supply key areas of support. Accounting, telephony, and the University of Southampton Park - in addition, all hands-on trades are locally based. Where possible we also prefer to use SMEs for hardware or software procurement. We are also members of the living wage foundation and aim to raise living standards of our staff, in addition to paying our taxes.; ; Nine23 are a firm supporter of the apprenticeship scheme and graduate work placements and have provided numerous opportunities for developing roles through the service desk and marketing departments, into more senior positions. We are proud our business has a part to play in the wider health of the UK economy.
• Wellbeing:

  Wellbeing

  Employee wellbeing has always been a priority - especially during the 2020 – 2022 Pandemic. Whilst all staff have been working from home we have increased our daily check-in calls and staff one2ones to ensure any issues are picked up and support provided as soon as possible.; We have provided free counselling sessions for any member of staff that needs it and supported those that have taken time off work due to sickness.; Nine23 have adapted working hours to fit with the real life situations people have to deal with – from child to caring or the elderly.

Pricing

• Price: £400 to £1,750 a unit a day
• Discount for educational organisations: No

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at gcloud@nine23.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.