Barrier Networks

Delinea - Privilege Manager (Zero Trust & PEDM)

Privilege Manager is the most comprehensive endpoint privilege elevation and application control solution, capable of supporting enterprises and fast-growing organizations at cloud scale. Removing excess privileges from endpoints prevents malware attacks, policy-based application control keeps people productive, and actionable reporting demonstrates progress and compliance to executives and auditors.

Features

Implement and enforce least privilege
Create flexible granular application control policies & deployment configurations
Application Discovery for Administrative or Root Privileges
Automated Local Account Password Rotation
Centralized Application & Execution Event Logging
Child Process Control
End-user Justification/Admin Approval Workflow,
Windows & Mac Account Discovery on Workstations
End Point Monitoring, Application Quarantine, Sandboxing, & Isolation
Local Admin Rights Removal, Local Account/Group management & Activity Auditing

Benefits

Improve Security, Protect privileged access to tighten your attack surface
Unburden IT Teams, Control PAM easily with a simplified interface
Meet Compliance Mandates, Avoid breaches & significant financial penalties
Scale your PAM, Deploy elastically within Delinea’s enterprise-secure architecture
Lower IT support costs
Deploy in Cloud at speed & scale with faster ROI
Easy to Use - simplified interface, OOB templates & reports

£29.02 a device a year

Free trial available

Service documents

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@barriernetworks.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

Contact

Barrier Networks Iain Slater
Telephone: 0141 356 0101
Email: info@barriernetworks.com

Service scope

Software add-on or extension: Yes, but can also be used as a standalone service
What software services is the service an extension to: Delinea Platform
Cloud deployment model: Public cloud

Private cloud

Hybrid cloud
Service constraints: N/a
System requirements: Microsoft Server 2012 or newer

Directory services agent: Windows 2016 or Windows10 with 50Mb RAM/Disk

Inbound port 5593

Mac: macOS 10.15

Windows desktops: Windows 10 or newer

Windows Server 2012 R2 or newer

Unix/Linux: CentOS 7+, RHEL 7+, Oracle Linux 7+, Ubuntu 18.04+

User support

Email or online ticketing support: Email or online ticketing
Support response times: This is as per Delinea's support policy dependent on level of support and Priority level of the issue. Typically between 1hr and 24hrs. Please see https://delinea.com/support for more information.
User can manage status and priority of support tickets: Yes
Online ticketing support accessibility: None or don’t know
Phone support: Yes
Phone support availability: 24 hours, 7 days a week
Web chat support: No
Onsite support: Yes, at extra cost
Support levels: Delinea have award-winning support team to help you resolve any issues and get the most out of your products. Delinea offers 3 support packages:
• Standard - with working hours support
• Premium - 24x7 support
• Premium Plus - 24x7 with faster response times and a technical account manager.
Please see support policy for more details https://delinea.com/support.
Delinea have support teams level 1 to 4 and categorise issues between severity levels 1-5.
Support available to third parties: Yes

Onboarding and offboarding

Getting started: Delinea offers a Support and documentation Portal with all documentation, Knowledge Base Articles, Forums and how to videos. Delinea also offer, with additional charge, training courses, extensive E-Learning library for clients' Administrators, E-Learning for end users. Delinea also have professional services team who can help with installations, configurations and provide in-person training if required.
Service documentation: Yes
Documentation formats: HTML

PDF
End-of-contract data extraction: CSV and XML exports are available for customer data and JSON for configuration data.
End-of-contract process: Clients have 30 days to export their data, as per MSLA (EULA), using in built features, after 30 days the instance and data will be scheduled to be deleted using MS Azure secure delete protocols. See https://delinea.com/msla

Using the service

Web browser interface: Yes
Supported browsers: Microsoft Edge

Firefox

Chrome

Safari
Application to install: No
Designed for use on mobile devices: Yes
Differences between the mobile and desktop service: Most functions pertaining to mobile access are available through the Delinea Mobile application installed on a consumer's mobile device. UI is preferred and more feature-rich.
Service interface: Yes
User support accessibility: WCAG 2.1 AA or EN 301 549
Description of service interface: The Interface is a WEB Gui
Accessibility standards: WCAG 2.1 AA or EN 301 549
Accessibility testing: In house AT users that perform some limited testing.
Delinea also use tools for AT testing:
Axe Dev Tools are used for accessibility scanning and pipeline automation
For manual testing Delinea use both nvda and jaws.
More information and the WCAG report can be found at https://docs.delinea.com/online-
API: Yes
What users can and can't do using the API: All features can be accessed via API services, for more information please see https://docs.delinea.com/online-help/secret-server/api-scripting/index.htm
API documentation: Yes
API documentation formats: HTML

PDF
API sandbox or test environment: No
Customisation available: Yes
Description of customisation: Logos can be uploaded via Platform and the colour scheme can be amended to match corporate colours via the system setting plus the Dark & Light mode options

Scaling

Independence of resources: Privilege Manager production environment is set up to our defined baseline with load balancing to automatically scale with increased resource demand. Azure resources are dynamically allocated as required.

Analytics

Service usage metrics: Yes
Metrics types: "inbuilt Usage reports with in the Service
Service status stats https://status.delinea.com/"
Reporting types: Real-time dashboards

Reports on request

Resellers

Supplier type: Reseller providing extra support
Organisation whose services are being resold: Delinea

Staff security

Staff security clearance: Other security clearance
Government security clearance: Up to Developed Vetting (DV)

Asset protection

Knowledge of data storage and processing locations: Yes
Data storage and processing locations: United Kingdom

European Economic Area (EEA)
User control over data storage and processing locations: Yes
Datacentre security standards: Managed by a third party
Penetration testing frequency: At least once a year
Penetration testing approach: ‘IT Health Check’ performed by a Tigerscheme qualified provider or a CREST-approved service provider
Protecting data at rest: Scale, obfuscating techniques, or data storage sharding
Data sanitisation process: Yes
Data sanitisation type: Deleted data can’t be directly accessed
Equipment disposal approach: A third-party destruction service

Data importing and exporting

Data export approach: In- built functionality. Export in CSV and XML exports are available for customer data and JSON for configuration data.
Data export formats: CSV

Other
Other data export formats: XML
Data import formats: CSV

Other
Other data import formats: XML

Data-in-transit protection

Data protection between buyer and supplier networks: TLS (version 1.2 or above)
Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

Guaranteed availability: Delinea platform has a 99.99% uptime SLA as per MSLA Service Level Addendum. Please see https://delinea.com/legal for more information and service credit information. Service credits can be applied upon written request as per MSLA Service Level Addendum.
Approach to resilience: The Service leverages MS Azure High Availability capabilities with multiple replicas and automatic backups. More information can be found here: https://trust.delinea.com/
Outage reporting: Public dashboard, available at https://status.delinea.com/ Email Alerts to subscribed users

Identity and authentication

User authentication needed: Yes
User authentication: 2-factor authentication

Username or password

Other
Other user authentication: User logins to the service can be authenticated via Federated services, e.g. Active directory. Authentication is configurable by the client as required and typically uses a username and password with MFA and/or SSO options The customer controls access to the Service and the data and would need to generate and provide an OTP to give access to Delinea Support. See https://trust.delinea.com/?itemName=access_control&source=click&itemUid=7103fdad-d6ac-45f6-b28d-e71f32884b7f and https://trust.delinea.com/?itemUid=7103fdad-d6ac-45f6-b28d-e71f32884b7f&source=click https://docs.delinea.com/online-help/delinea-platform/start.htm https://docs.delinea.com/online-help/delinea-platform/authentication/index.htm#MultifactorAuthentication https://docs.delinea.com/online-help/delinea-platform/federation/index.htm#Federation
Access restrictions in management interfaces and support channels: User logins to the service can be authenticated via Federated services, e.g. Active directory, or local account, or platform. Authentication is configurable by the client as required and typically uses a username and password with MFA and/or SSO options The customer controls access to the Service and the data and would need to generate and provide an OTP to give access to Delinea Support. To access Delinea support users must be a registered support user or provide the customer support pin.
Please see https://trust.delinea.com/?itemUid=7103fdad-d6ac-45f6-b28d-e71f32884b7f&source=click
Access restriction testing frequency: At least once a year
Management access authentication: 2-factor authentication

Identity federation with existing provider (for example Google Apps)

Dedicated link (for example VPN)

Username or password

Other
Description of management access authentication: https://trust.delinea.com/?itemUid=7103fdad-d6ac-45f6-b28d-e71f32884b7f&source=click
User logins to the service can be authenticated via Federated services, e.g. Active directory, or local account, or platform. Authentication is configurable by the client as required and typically uses a username and password with MFA and/or SSO options The customer controls access to the Service and the data and would need to generate and provide an OTP to give access to Delinea Support.
Please see https://trust.delinea.com/?itemUid=7103fdad-d6ac-45f6-b28d-e71f32884b7f&source=click
https://trust.delinea.com/?itemUid=7103fdad-d6ac-45f6-b28d-e71f32884b7f&source=click https://docs.delinea.com/online-help/delinea-platform/start.htm https://docs.delinea.com/online-help/delinea-platform/authentication/index.htm#MultifactorAuthentication https://docs.delinea.com/online-help/delinea-platform/federation/index.htm#Federation

Audit information for users

Access to user activity audit information: Users have access to real-time audit information
How long user audit data is stored for: User-defined
Access to supplier activity audit information: Users have access to real-time audit information
How long supplier audit data is stored for: User-defined
How long system logs are stored for: User-defined

Standards and certifications

ISO/IEC 27001 certification: Yes
Who accredited the ISO/IEC 27001: Coalfire
ISO/IEC 27001 accreditation date: 08/08/2023
What the ISO/IEC 27001 doesn’t cover: N/A
ISO 28000:2007 certification: No
CSA STAR certification: No
PCI certification: No
Cyber essentials: Yes
Cyber essentials plus: Yes
Other security certifications: Yes
Any other security certifications: SOC2

FIPS 140-2

CSA STAR/NIST Compliant

Security governance

Named board-level person responsible for service security: Yes
Security governance certified: Yes
Security governance standards: ISO/IEC 27001

Other
Other security governance standards: Delinea is SOC2 audited. Our software is Common Criteria , FIPS 140-2, CSA STAR, and NIST compliant. Delinea is GDPR compliant and EU/US Data Privacy Framework certified. Please see our trust centre for more information https://trust.delinea.com . We are currently undergoing Fed ramp certification and updating some of our accreditations.
Information security policies and processes: Delinea follows the ISO27001 framework and the controls are validated by SOC2 type II Audit. Delinea also follow NIST Cybersecurity framework. Delinea has a documented information security policy which is tested, reviewed and updated annually and approved by senior management and executive levels.

Operational security

Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Configuration and change management approach: Delinea follows an Agile methodology for our S/SDLC with change management tracked in our Issue and Project management system and worked between Development and QA. Before every release Delinea conducts vulnerability testing, both Static and Dynamic Code Analysis, and code reviews by two other developers. For major releases, "full system" QA process takes place. Delinea also adheres to OWASP and NIST. Delinea’s security controls aligned with NIST Cybersecurity Framework’s Core are tested by SOC2. Delinea monitor/protect against web application security risks, e.g. SQL injection, cross site scripting, OWASP Top 10 and Automated Top 20 threats.
Vulnerability management type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Vulnerability management approach: Vulnerability scans occur before application release and for our SSDLC. Delinea monitor and protect against the most critical web application security risks, e.g. SQL injection, cross site scripting, OWASP Top 10 and Automated Top 20 threats. Threat data is continuously updated and Delinea subscribe to direct vulnerability feeds, threat newsletters and vulnerability lists for Microsoft, Amazon AWS, SANS, and US-CERT and software vendors. Patch management processes are in place typically monthly. Delinea have independent 3rd party perform annual independent penetration and vulnerability testing on our solutions.
Please see https://trust.delinea.com/ and https://trust.delinea.com/?itemUid=9162b815-d8af-49f2-8c26-4ddb72f42f48&source=search and https://trust.delinea.com/?itemUid=f8feb4d4-b79d-47f3-9dd7-06c479a49dfe&source=title
Protective monitoring type: Supplier-defined controls
Protective monitoring approach: Delinea have systems and processes in place to perform protective monitoring, incident management and vulnerability management. Delinea perform regular vulnerability and penetration testing, as well as monitor threat data and updates. When a security report is filed, either from a customer or discovered internally, the same process occurs. First, each individual reported item is validated and, if valid, it is given a CVSS score. Delinea follow NIST guidelines for remediation. For more information please see our trust centre https://trust.delinea.com/ and https://trust.delinea.com/?itemUid=9162b815-d8af-49f2-8c26-4ddb72f42f48&source=search and https://trust.delinea.com/?itemName=application_security&source=click
Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
Incident management approach: Delinea have incident management plan which is based on ISO27001 and NIST and is SOC2 Audited. All potential security incidents are first reviewed and triaged by Delinea’s Security Operations team and escalated to the Critical Incident Response Team (CIRT) as required. the CIRT determines the scope and risk and responds appropriately to that incident with immediate control and mitigation measures.

Secure development

Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

Connection to public sector networks: No

Social Value

Fighting climate change
Covid-19 recovery
Tackling economic inequality
Equal opportunity
Wellbeing

Fighting climate change

"Delinea complies with all environmental laws and has a Green office policy for environmental and sustainability. Additionally, we leverage third party cloud service providers (Microsoft & AWS) to host our software services. These providers maintain robust programs and provide relevant information on emissions, sustainability, and reduction initiatives. You can find additional information at the links below. Delinea are currently assessing our ESG status and are working to formalize and document our ESG program. However we do have recycling capabilities and initiatives to reduce unnecessary travel and impact to the environment As an organisation we allow our employees to work from home, thereby lowering the environmental impact of travel.
please see:
https://azure.microsoft.com/en-us/explore/global-infrastructure/sustainability
https://aws.amazon.com/sustainability/"

Covid-19 recovery

Delinea have taken a number of actions in response to the recent covid pandemic. Delinea initiated a work from home policy even before the government restrictions were introduced. Delinea have a documented Pandemic policy, which is reviewed and updated at least annually or as needed. Most staff are still working from home, with the office open with social distancing and hygiene cleaning basis when required. Delinea provide covid testing and sanitising stations in office environments when required and perform regular deep cleaning. During the Covid pandemic Delinea ran a customer campaign that made a $25 donation to Coronavirus Relief Fund for every customer review. The Coronavirus Relief Fund is part of Global Giving, a non-profit based in DC, but doing work globally to help with COVID-19 relief efforts.

Tackling economic inequality

Delinea have a code of conduct and employment policies that include equality, regular employee reviews and industry audits to ensure we are in line with industry standard. At Delinea
employee diversity is a valuable asset, and every employee is treated with dignity and respect. As explained in the Employee Guide, employees and applicants for employment will be judged on the basis
of their performance and qualifications, without regard to race, creed, gender, religion, national origin, age, disability, political affiliation, matriculation, personal appearance, veteran status, sexual orientation
or any other legally protected characteristic.

Equal opportunity

Wellbeing

At Delinea we believe in the importance of our employee wellbeing. Delinea have comprehensive health cover including mental as well as physical health coverage. Delinea have chat channel, formal and public events to foster communications and fun.

Pricing

Price: £29.02 a device a year
Discount for educational organisations: No
Free trial available: Yes
Description of free trial: Yes Free trials available for 30 days. See https://delinea.com/resources?t=trial
Link to free trial: https://delinea.com/resources?t=trial

Service documents

Request an accessible format

Cookies on Digital Marketplace

Delinea - Privilege Manager (Zero Trust & PEDM)

Features

Benefits

Pricing

Service documents

Framework

Service ID

Contact

Service scope

User support

Onboarding and offboarding

Using the service

Scaling

Analytics

Resellers

Staff security

Asset protection

Data importing and exporting

Data-in-transit protection

Availability and resilience

Identity and authentication

Audit information for users

Standards and certifications

Security governance

Operational security

Secure development

Public sector networks

Social Value

Pricing

Service documents