SALUS DIGITAL SECURITY LIMITED

Cyber Incident Exercising

All strategies and plans need to be exercised within an organisation. Cyber security incident response has become an essential component
of Information Technology systems. Cyber security-related attacks have become more numerous, diverse, damaging, and disruptive.
Understanding how resilient your organisation is to such attacks is now a critical business requirement.

Features

• Cyber Security Strategy development
• Policy Review
• Measurement against Standards and Certifications
• Supplier Assurance
• Security and Business priority alignment

Benefits

• Leadership or organisations security policy implementation
• Management of Organisation Risk and Remediation activity
• Measurement against HMG Minimum Cyber Security Standards
• Evidence to support prioritisation of work
• Information to support risk management planning
• Incident Response Planning and Exercising
• Disaster Recovery Planning and Exercising
• Business Continuity Planning support

£650 to £1,200 a user a day

• Education pricing available

Service documents

• Pricing document

  ODP

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at greg.king@saluscyber.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

829834292354684

Contact

Greg King
(+44) 01242 374087
greg.king@saluscyber.com

Planning

• Planning service: Yes
• How the planning service works: Salus uses its extensive experience in risk management, assurance testing, design advice and supplier assurance audits to support clients in migrating to cloud, enhancing features of existing cloud services or developing bespoke private cloud capabilities. ; ; Planning takes into account current Mitre Common Vulnerability Exploits, Cloud Security Alliance guidance, and Tactics, Techniques and Procedures (TTPs) of offensive actors captured in the Mitre Att&ck frameworks.; ; Planning also maps adherence to ISO 27001, ISO 27035, NIST SP800-53r3 and more.
• Planning service works with specific services: No

Training

• Training service provided: No

Setup and migration

• Setup or migration service available: Yes
• How the setup or migration service works: Salus uses its extensive experience in assurance testing, design advice and supplier assurance audits to support clients in migrating to cloud, enhancing features of existing cloud services or developing bespoke private cloud capabilities. Planning takes into account current Mitre Common Vulnerability Exploits, Cloud Security Alliance guidance, and Tactics, Techniques and Procedures (TTPs) of offensive actors captured in the Mitre Att&ck frameworks.
• Setup or migration service is for specific cloud services: No

Quality assurance and performance testing

• Quality assurance and performance testing service: Yes
• How the quality assurance and performance testing works: Salus uses well defined risk and assurance testing standards in line with the National Cyber Security Centre (NCSC) CHECK ITHC standard and cloud security principles. ; ; These are Nationally approved standards and guidance governed by the National Technical Authority on Cyber Security. ; ; Performance testing and risk reviews of vendor service and security claims can be planned via a detailed scoping exercise and agreement on the quality Standards/outcomes expected.

Security testing

• Security services: Yes
• Security services type:
  • Security strategy
  • Security risk management
  • Security design
  • Cyber security consultancy
  • Security testing
  • Security incident management
  • Security audit services
  • Other
• Other security services:
  • Virtual CISO
  • Cloud Security Management
  • Exercising of Incident Response Plans
• Certified security testers: Yes
• Security testing certifications:
  • CHECK
  • CREST
  • Cyber Scheme
  • Other
• Other security testing certifications: Offensive Security Certified Professional

Ongoing support

• Ongoing support service: No

Service scope

• Service constraints: Salus works both remotely and onsite as required by the client. ; ; The only constraints that may exist in any testing work are those presented by the the vendor/3rd Party service supplier. ; ; Salus works with all parties to resolve any constraints that it identifies.

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Monday to Friday - 09:00 to 17:30 ; Monday to Friday - Out of hours by arrangement ; Saturday/Sunday/public holidays - support by arrangement
• User can manage status and priority of support tickets: No
• Phone support: No
• Web chat support: No
• Support levels: Monday to Friday - 09:00 to 17:30; Monday to Friday - Out of hours by arrangement; Saturday/Sunday/public holidays - support by arrangement; ; Pricing included in the rate card ; ; An account manager is allocated to each job or group of jobs for any specific client.

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Developed Vetting (DV)

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: Yes
• Any other security certifications:
  • CHECK Team Member (CTM)
  • CHECK Team Leader Web Applications (CTL WEB)
  • CHECK Team Leader Infrastructure (CTL INF)
  • Offensive Security Certified Professional

Social Value

• Social Value:

  Social Value

  Wellbeing

  Wellbeing

  In 2021 Salus introduced our Sustainable Travel Plan, Positive Working Environment and Wellbeing Plans. These aimed to provide all employees with a healthy working environment and opportunities for enhanced personal wellbeing through our cycle to work, private medical, buddy and volunteering schemes. ; The above plans are linked to in-person and online review meetings where the entire business can feedback on if the support is working and what additional support is require. This includes an anonymous form where employees can provide feedback without being identified. This is alongside a quarterly strategy day for the entire business which focuses on better understanding each other through behavioural and physical activities with a section of each day focusing on mental health including how to support and identify it in your professional and personal life.; Salus volunteers with several local charities including The Nelson Trust where Salus offer employees the chance to volunteer as a break from working to reset, recharge and meet new local people. Each employee is offered a minimum of 1 day per year of volunteering, this is not mandatory however they are recommended. Due to Salus employing a diverse workforce include neuro-diverse and disabled employees, volunteering is not mandatory as each employee has the right to decide.

Pricing

• Price: £650 to £1,200 a user a day
• Discount for educational organisations: Yes

Service documents

• Pricing document

  ODP

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at greg.king@saluscyber.com. Tell them what format you need. It will help if you say what assistive technology you use.