BT PLC

BT One Mobile Secure Access Cloud

Customer facing Secure Socket Layer Virtual Private Network service (SSL-VPN). This allows customers to securely access intranet connected systems and applications.

Features

• Cloud based SSL VPN service
• Provides secure access intranet access via the Internet
• Delivers user traffic directly to BT Connect UK platform
• Based on Industry-leading SSL VPN technology
• Device-compliance based access
• Secure application layer gateway
• Provides SSL HTTPS 128-bit or 168-bit encryption
• Provides client, clientless and browser based access
• Fully managed service
• Resilient connections and locations

Benefits

• Supports work from home policies
• Industry leading technology partner
• Price and deployment allow size to scale with demand
• Minimal upfront spend facilitates budget management
• Options to retain all traffic “in house” on the web

£5.00 to £8.00 a user a month

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at ccsframeworks@bt.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

800733497436574

Contact

Frameworks Team
0800 3288077
ccsframeworks@bt.com

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: BT Connect
• Cloud deployment model: Private cloud
• Service constraints: The service is accessed by remote end-users from the public internet. The service has network connectivity to BT core MPLS services (IPCG and IPC UK) for termination to the customer WAN services, and for management purposes to an internal IPCG WAN.
• System requirements:
  • Customer has to be BT IPCG or IPC UK customer
  • Or able to provide a private VDC environment

User support

• Email or online ticketing support: No
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: No
• Support levels: 24 hours, 7 days a week, desk to desk
• Support available to third parties: No

Onboarding and offboarding

• Getting started: We support customers IT team to complete initial service configuration and connectivity, however end user implementation is down to customers IT team.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: Data extraction is not applicable to this service
• End-of-contract process: Virtual SSL servers are deleted and all connectivity is decommissioned.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: Yes
• Compatible operating systems:
  • Android
  • IOS
  • Linux or Unix
  • MacOS
  • Windows
  • Windows Phone
  • Other
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: None
• Service interface: No
• User support accessibility: None or don’t know
• API: No
• Customisation available: No

Scaling

• Independence of resources: The system is engineered with resources dedicated to each customer instance, and sized to support the design load in terms of user count and bandwidth. Each customer implementation is a private cloud, with dedicated virtual server builds(s) and connectivity into the core MPLS networks if required. Please refer to the LLD provided

Analytics

• Service usage metrics: Yes
• Metrics types: Usage on multiple system events, including connection attempts, session counts, platform utilisation.
• Reporting types:
  • Regular reports
  • Reports on request

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: No
• Datacentre security standards: Supplier-defined controls
• Penetration testing frequency: At least once a year
• Penetration testing approach: In-house
• Protecting data at rest: Other
• Other data at rest protection approach: Not applicable to this service
• Data sanitisation process: Yes
• Data sanitisation type: Deleted data can’t be directly accessed
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Data export is not applicable to this service
• Data export formats: Other
• Other data export formats: Not applicable
• Data import formats: Other
• Other data import formats: Not applicable

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Legacy SSL and TLS (under version 1.2)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Other
• Other protection within supplier network: Internal traffic is delivered over VLAN and internal BT connections directly into BT Connect, IP Connect IPCG and/or IPC UK WAN services.

Availability and resilience

• Guaranteed availability: BT SLA Cat D Greater than or equal to 99.80%
• Approach to resilience: The service is built in a high-availability virtual data centre.; ; Resilient connections are utilised into the core MPLS network. Resilient locations with inter-location load-balancing may be configured.
• Outage reporting: Services are monitored 24/7 by the BT TSO support team. Servers generate alarms to indicate outages. Locations are probed routinely to verify reachability.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: Management access is restricted to BT internal network connected ports.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Dedicated link (for example VPN)
  • Other
• Description of management access authentication: No non-BT parties, customer or otherwise, have access to the management ports of the service. Customers do not have physical access to the management network.

Audit information for users

• Access to user activity audit information: Users receive audit information on a regular basis
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: You control when users can access audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: LRQA
• ISO/IEC 27001 accreditation date: 20/04/2016
• What the ISO/IEC 27001 doesn’t cover: Any service element not defined as within the scope of the ISO certification
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: Yes
• Any other security certifications: BT SECS SACS

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: BT's Security Policies and processes are modelled against ISO27001

Operational security

• Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Configuration and change management approach: ISO 27001 & BT Corporate security policies as defined in BT SECS SACS.
• Vulnerability management type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Vulnerability management approach: ISO 27001 & BT Corporate security policies as defined in BT SECS SACS.
• Protective monitoring type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Protective monitoring approach: ISO 27001 & BT Corporate security policies as defined in BT SECS SACS.
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: ISO 27001 & BT Corporate security policies as defined in BT SECS SACS.

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Social Value

• Fighting climate change:

  Fighting climate change

  BT consumes less than 1% of UK’s electricity, and we take our role in reducing our carbon output and energy consumption seriously. We’re now using 100% renewable electricity worldwide.; ; We’re leading our industry sector, targeting net zero carbon emissions by 2030, ahead of the government target. We reduced our carbon emissions by 29% last year. By 2030 we’ll transition most of our fleet to electric vehicles. ; ; We are investing in energy-efficient/climate-resilient networks, reducing energy needs and decarbonising the energy we use. We’ve reduced the carbon intensity of our operations by 57% and cut supplier emissions by 19%. We achieved a reduction of 11,400 tonnes of CO2e, 168 tonnes of waste electronic equipment, and 160 tonnes of plastic.; ; We’re pioneering ‘Climate Contracts’ in our commercial contracts, committing our suppliers to measurable carbon savings. We’re working with suppliers to design products/packaging to minimise energy and materials use, to support reuse/recycling, as well as encouraging reduction of emissions. ; ; We are asking our suppliers to innovate from plastic-free packaging to new business models/radical product redesigns. We are eradicating the use of single-use plastics throughout our organisation. We’ll have zero waste to landfill by 2025 and 100% of plastic packaging will be reused/recycled or composted by 2025. ; ; We incentivise customers to return products for recycling/refurbishment. EE offers a Trade-In scheme, and BT customers must return equipment to avoid incurring a fee; we refurbished/recycled c.700,000 in 2020. ; ; We’re developing low carbon products/solutions that enable customers to reduce their own carbon footprints too. ; ; For a sustainable future we are partaking in many initiatives, finding ways to reduce our footprint and that of our partners, suppliers, and customers. We’re aiming to reduce supply chain emissions by 42% by Mar 2031. We will cut our carbon intensity by 87% and supply chain emissions by 42% by 2030.
• Covid-19 recovery:

  Covid-19 recovery

  BT employs over 83,000 people throughout the UK, in every region of our 4 nations. We indirectly provide employment for a further 300,000 so we really understand the impact Covid-19 has had on families, communities, and society. BT provides solutions to help communities Build Back Better and we are hugely proud of the work we have done to enable children to continue education safely online learning with free vouchers for the most economically challenged families. ; ; We are championing digital inclusion, leaving no home behind with our mission to provide great connectivity. We’ve already built next generation, full fibre broadband to more than 6 million premises. And by 2026, 25 million homes and businesses will have access to strong, secure, ultrafast FTTP broadband. By 2028, our EE 5G mobile network will reach 90% of the UK’s geography. ; ; BT is focused on supporting SME’s and individuals right across the UK through our Skills for Tomorrow programme to offer a range of free online or face-to-face courses, designed to help people feel more confident online. We’ve collaborated with leading digital skills organisations to collate the best courses and information. Experts from BT and Google share their advice and ideas with free webinars covering topics from: digital marketing, creating engaging content, growing your online presence and more.; ; We’re already active with many charities and we encourage our employees to use their volunteering days to support local communities. We work with the ‘Good Things Foundation’ ensuring older, vulnerable people have digital skills to keep informed. ; ; We support the National Emergencies Trust with UK fundraising that supports charities through 46 Community Foundations, and Red Nose Day and Children In Need. This is what BT does well, because we care about the country coming back from a devastating period of personal, social, economic, and physical shocks.
• Tackling economic inequality:

  Tackling economic inequality

  The UK’s manufacturing, the bedrock of the North, has been gradually eroded by the growth of the services economy in the South. Economic power has shifted inexorably southbound, leading to an unequal, unsustainable distribution of wealth. The Government has made its ‘levelling up’ policy a strategic imperative, such that businesses are required to think differently about their actions and future capital investment. ; ; BT’s strategy already is to recruit and retain employees from economically poorer areas. As we shift our UK regional focus, employees are encouraged to move to other UK geographies, where possible, and recruitment from non-traditional areas is also accelerating.; ; Our support for the levelling up strategy includes investment in our Birmingham regional hub (1,000 more roles) and a further 7,000 new BT members recruited as part of our accelerated fibre UK rollout.; ; We have also pledged £12Bn investment to accelerate fibre rollout, as we see digital inclusion, as a vital element in achieving levelling up as this will speed up UK economic recovery. Our investment and commitment to Bristol, Birmingham, Glasgow, Belfast, and Manchester, in talent, leadership and other resources underpin this.; ; As a leading UK private sector employer of apprentices, we took on almost 3,800 new apprentices (including c.2,800 in digital and engineering roles, 13% women) last year. We also welcomed nearly 500 new graduates (32% women). BT’s Academy offers online learning resources including support to build digital skills and our Skills for Tomorrow programme, enabling reach to 10 million UK people by 2025 with digital skills training. ; ; BT is also innovative about how we can do more, through local partnerships, volunteering and leveraging our commitments to Social Value in all the work we bid for contract by contract, as well as the many national programmes which we have delivered over many years.
• Equal opportunity:

  Equal opportunity

  Everyone, regardless of background, experience, or social position should have opportunities to learn and grow. We all benefit from talent, irrespective of source; being able to grow, mature and prosper. This is BT’s philosophy. We employ over 83,000 UK-based people and recruit in many locations. Whilst we work extensively with external partners, it is our people and how they drive behavioural change that has most impact. ; ; We value diversity and celebrate difference. By increasing diversity in BT, we become more creative and innovative, and this in turn inspires our teams to develop products and services which make a universal difference. ; ; We are proud signatories of the Valuable 500, a global movement to put disability on the business leadership agenda. We have a Disability Rapid Action Plan, providing additional focus and resource to achieve better outcomes for disabled colleagues. ; ; For race equality, we’ve introduced our Ethnicity Rapid Action Plan, which promises swift action, regular updates, and maximum transparency. 96% of the senior leadership team have been through D&I training. Our training champions diversity and challenges racism where it exists. ; ; Our focus on evidence-based inclusion has enabled us to ensure that our gender pay gap and quartiles figures remain stable and low, whilst we continue to progress gender equality. We support International Women’s day, and intersectionality.; ; We recognise the life-changing benefits new knowledge brings and encourage our employees to continue learning via completion of non-work-related courses at their pace. Our industry-leading Apprenticeship frameworks and standards are used in various roles. We have a world class graduate programme, always seeking to recruit a diverse talent pool.; ; BT has embedded Equal Opportunity in the way we work, recognising individuals’ talents and respecting their abilities.; ; Our recently published BT manifesto is our explicit commitment to the country and is available to view on www.bt.com
• Wellbeing:

  Wellbeing

  Well-being is about ‘how we are doing’, our health, security, relationships, and purpose, as individuals and communities; how sustainable this is for the future, how satisfied we are with our lives, our sense that what we do in life is worthwhile, our day-to-day emotional experiences and our wider mental well-being. ; ; BT’s employees throughout the UK add a great deal of value to the communities in which they live and work. But being an effective citizen means well-being is paramount. Every BT manager knows that their people are ambassadors, and the right work/life balance is important. We ask a lot of our people, and we show them respect and understanding. Employees will have suffered periods of loneliness, or questioning what they are doing, their value to BT and to family and friends as well as their communities and society. We respect that life has become more complex and the reasons for doing what we do have sometimes been questioned.; ; Well-being is a critical function that BT values greatly, our health, security, relationships, and purpose are all vital components of who we are. BT places deep emphasis on the well-being of our people, taking care of them and ensuring that we support their needs. For example, we have produced a ‘Well-being toolkit’ to support staff in need. BT funds several services that provide support for colleagues in need, with confidential independent advice. We provide free mental health and physiotherapy services for UK colleagues and our employee assistance programme offers free confidential counselling and advice lines. We support colleagues, past and present, who face financial hardship through the BT Benevolent Fund. ; ; Externally it's an extremely challenging time for many small businesses. BT’s Skills for Tomorrow programme offers support to SMEs and individuals to build digital skills and confidence online.

Pricing

• Price: £5.00 to £8.00 a user a month
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at ccsframeworks@bt.com. Tell them what format you need. It will help if you say what assistive technology you use.