LOCKDOWN CYBER SECURITY LIMITED

Security Awareness Video Training and Phishing Simulation

Security Awareness and Phishing Simulation including three hours of content which are designed to build a learning pathway of monthly content. Includes key Cyber Security topics and risk areas, Data Protection and AI threats. Includes Phishing Simulation managed service

Features

• real time reporting
• remote access
• scorm compliance
• AWS hosted
• Passwordless logins
• Browser based on demand e-learning

Benefits

• Helps user with AI literacy
• Helps users understand AI Best Practices
• Helps understand Cyber Security risks of using AI
• Can be used on any LMS
• Engaging documentary style content
• Agile learning and repeat watching
• Content Rich
• Can bespoke/tailor

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at william@lockdowncybersecurity.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

880173561402041

Contact

William Taaffe
0330 043 6282
william@lockdowncybersecurity.co.uk

About your service

• Service categories:

  Applications

  Production and operations

  • Other operations
• Multi cloud support: Yes

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: No
• System requirements: Browser requirement

User support

• Email or online ticketing support: Yes
• Support response times: We provide both email and online ticketing support, dependent on if training has been uploaded to customer LMS email would apply, whereas if training platform used online ticketing will apply.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Reasonable support is provided free of charge, any bespoke training requirements would be scoped and quoted in addition.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Yes we help users start using our online training services via an onboarding process, which involves them providing a user list of email addresses, which we upload to our training platform, that then automates emails to new users to access the training. We also include an introduction video to explain how the platform works.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
  • Other
• Other documentation formats: Video/MP4
• End-of-contract data extraction: Evidence of training done by whom, when and scores obtained can be extracted from the platform and exported to excel and download it.
• End-of-contract process: The training is accessed via the purchase of an annual user licence which automatically expires unless renewed at a new annual licence. The client or we would need to download the client data/ user training activity and scores obtained, for the client to keep as evidence of training done.
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: Via email or portal login

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
  • Other
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: The Service interface for the user to be able to access the online training content is provided through a user portal login or access via an email token, there is no API in place.
• Accessibility standards: None or don’t know
• Description of accessibility: The Service interface for the user to be able to access the online training content is provided through a user portal login or access via an email token.
• Accessibility testing: Training has been tested with Gloucestershire Deaf Association who provided feedback on use of captions. For those with visible impairments we can enhance text size if required.
• API: No
• Customisation available: Yes
• Description of customisation: We offer ready made training content and we can build and deliver bespoke content based on customer specific needs and requirements. Which can be delivered online via video training, in person classroom training or virtual delivery.

Scaling

• Independence of resources: Its an online video program that requires minimal setup and is set up on AWS S3 which offers virtually unlimited fully managed scalability

Analytics

• Service usage metrics: Yes
• Metrics types: There are quizzes for each video programme which tests the user for retention of knowledge learnt from the online training. A pass rate of minimum of 70% is required to progress to course completion. If user is unable to obtain minimum score another set of quiz questions are provided until they reach the required 70% score.; Training video watch stage or completion is logged in the platform.; User activity is also logged.
• Reporting types: Real-time dashboards
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CREST-approved service provider
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Encryption of all physical media
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type: Data Erasure

Data importing and exporting

• Data export approach: Download data from the platform onto excel or PDF.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • PDF
  • Excel
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Availability is provided via Amazon S3 provides industry-leading availability, designed for 99.99% availability for the Standard storage class, backed by a 99.9% service-level agreement (SLA)
• Approach to resilience: We do daily backups and cross region replication is available upon request.
• Outage reporting: Email alerts

Identity and authentication

• User authentication needed: Yes
• User authentication: Other
• Other user authentication: Passwordless token emailed to user
• Access restrictions in management interfaces and support channels: All platform admin is IP locked.
• Access restriction testing frequency: At least once a year
• Management access authentication: Other
• Description of management access authentication: Passwordless token provided by email.

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: No
• Security governance approach: We align our security governance to ISO27001
• Information security policies and processes: Follow Data Protection Policy, Information Security policy, BYOD policy, Incident Response Policy, PAM policies, Starters, Movers & Leavers policies, Mobile Phone Security policy, Change Management Policy. Security is baked into all business processes.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: New features are tested before go live and have roll back processes in place
• Vulnerability management type: Undisclosed
• Vulnerability management approach: We do annual pen testing, have vulnerability management tools in place, we response to critical patches with urgency.
• Protective monitoring type: Undisclosed
• Protective monitoring approach: Runtime Monitoring: Detects threats on EC2, EKS, and ECS (Fargate).; Malware Protection: Scans EBS volumes for malware.; S3 Protection: Monitors S3 data access for suspicious activity.; RDS Protection: Detects brute-force attacks on Amazon Aurora and RDS.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: Yes we have pre-defined processes for common events. Users can report incidents via tickets, email or phone. Incident reports are provided by email or phone dependent on nature of incident.
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Fully Featured Access to Course programme for up to 5 users for one month

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 5%
• Between £250,000 and £500,000: 10%
• Between £500,001 and £1,000,000: 10%
• Between £1,000,001 and £2,500,000: 10%
• Between £2,500,001 and £5,000,000: 10%
• Over £5,000,001: 10%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Cyber essentials plus: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials Plus certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials Plus certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
    • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at william@lockdowncybersecurity.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.