Trustmarque Check Point Infinity Product Set

Service scope

Software add-on or extension: Yes, but can also be used as a standalone service
What software services is the service an extension to: Check Point security ecosystem: Check Point offers a variety of security products, including network security, cloud security, and mobile security solutions.
Cloud deployment model: Public cloud

Private cloud

Hybrid cloud
Service constraints: No
System requirements: N/A

User support

Email or online ticketing support: Yes, at extra cost
Support response times: Severity 1: Response time 30 minutes. Check Point and Customer commit necessary resources around clock for Resolution, workaround or reduce severity of issue.
Severity 2: Response time 2 hours. Check Point and Customer commit full-time resources during normal business hours for Resolution, workaround or reduce severity of issue and alternative resources during non-Standard Business Hours.
Severity 3: Response time 4 hours. Check Point and Customer commit full-time resources during normal business hours for Resolution, workaround or reduce severity of issue.
Severity 4: Response time 4 hours. Check Point and Customer provide resources during normal business hours for Resolution.
User can manage status and priority of support tickets: Yes
Online ticketing support accessibility: None or don’t know
Phone support: Yes
Phone support availability: 9 to 5 (UK time), Monday to Friday
Web chat support: Yes, at an extra cost
Web chat support availability: 9 to 5 (UK time), Monday to Friday
Web chat support accessibility standard: None or don’t know
How the web chat support is accessible: Our service is B2B and currently is not tested according to EN 301 549 accessibility standards.
Web chat accessibility testing: Our service is B2B and currently is not tested according to EN 301 549 accessibility standards.
Onsite support: No
Support levels: Type
Collaborative Enterprise Support: local partner experts backed by Check Point.
Direct Enterprise Support: direct support from the Check Point experts.

Levels
Standard - 5 x 9 Business Day, get advanced access to our large, self-service knowledge base and a committed 30-minute response time to issues with level one severity.
Premium – 7 x 24 Every Day, enjoy all the benefits of Standard Collaborative Support, plus real-time 24×7 Global support.
Elite – 7 x 24 Every Day, receive comprehensive support plus the possibility of having an engineer on-site for critical SW issues.
Diamond – 7 x 24 Every Day, extend your Premium/Elite Support with personalised support, in-depth resources and consulting.

PRO - optional support add-on. When a severe issue is detected, a Check Point PRO expert proactively contacts you to help resolve the issue and prevent service downtime. Check Point PRO also provides you with a comprehensive report, delivering an overview of your overall security, diagnostics and actionable insights.

Please speak with Trustmarque to discuss your support requirements and get the level your organisations needs.
Support available to third parties: Yes

Onboarding and offboarding

Getting started: Customer success is offered for both on and offboarding.
Service documentation: Yes
Documentation formats: HTML

PDF
End-of-contract data extraction: Logs in the portal - export via SIEM or export logs
End-of-contract process: Full access to portal however gateways no longer process traffic resulting in paused service.

Using the service

Web browser interface: Yes
Supported browsers: Internet Explorer 11

Microsoft Edge

Firefox

Chrome

Safari
Application to install: Yes
Compatible operating systems: Android

IOS

Linux or Unix

MacOS

Windows

Windows Phone

Other
Designed for use on mobile devices: Yes
Differences between the mobile and desktop service: We use mobile app for connecting users
Service interface: Yes
User support accessibility: None or don’t know
Description of service interface: 1.Agent soloution
2.Agentless solution
*Same management console
Accessibility standards: None or don’t know
Description of accessibility: The service is accessed as a web portal via Check Point's administration portal on portal.checkpoint.com. It is designed to be highly usable, but was not certified by any specific standard
Accessibility testing: Our service is B2B and currently is not tested according to EN 301 549 accessibility standards.
API: Yes
What users can and can't do using the API: We provide RESTful API for controlling administrative operations in the system. Users issue an API key via the administration portal. The APIs provide support for managing users, groups. objects, networks, tunnels, gateways, policies and more. For full documentation kindly refer to: https://app.swaggerhub.com/apis/perimeter81/public-api-yaml/1.0.4#
API documentation: Yes
API documentation formats: Open API (also known as Swagger)

PDF
API sandbox or test environment: Yes
Customisation available: Yes
Description of customisation: N/A

Scaling

Independence of resources: Scale up accordingly - Global reach no limits

Analytics

Service usage metrics: Yes
Metrics types: Go to Statues updates page. https://status.perimeter81.com/
Reporting types: Real-time dashboards

Regular reports

Resellers

Supplier type: Reseller providing extra support
Organisation whose services are being resold: Check Point Software Technologies Ltd

Staff security

Staff security clearance: Other security clearance
Government security clearance: Up to Security Clearance (SC)

Asset protection

Knowledge of data storage and processing locations: Yes
Data storage and processing locations: European Economic Area (EEA)
User control over data storage and processing locations: No
Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
Penetration testing frequency: At least every 6 months
Penetration testing approach: Another external penetration testing organisation
Protecting data at rest: Physical access control, complying with CSA CCM v3.0

Physical access control, complying with another standard

Encryption of all physical media

Scale, obfuscating techniques, or data storage sharding
Data sanitisation process: No
Equipment disposal approach: A third-party destruction service

Data importing and exporting

Data export approach: Logs in the portal - export via SIEM or export logs
Data export formats: CSV

Other
Other data export formats: SIEM

S3 Bucket

IDP
Data import formats: Other
Other data import formats: Via API

Data-in-transit protection

Data protection between buyer and supplier networks: Private network or public sector network

TLS (version 1.2 or above)

IPsec or TLS VPN gateway

Legacy SSL and TLS (under version 1.2)

Other
Other protection between networks: Wireguard
Data protection within supplier network: TLS (version 1.2 or above)

IPsec or TLS VPN gateway

Availability and resilience

Guaranteed availability: 99.999% SLA
Approach to resilience: This information is available on request.
Outage reporting: We provide an online status page and option for customer to be notified via email and SMS messages.

Identity and authentication

User authentication needed: Yes
User authentication: 2-factor authentication
Access restrictions in management interfaces and support channels: We provide role-based access in the administration and support systems
Access restriction testing frequency: At least every 6 months
Management access authentication: 2-factor authentication

Identity federation with existing provider (for example Google Apps)

Audit information for users

Access to user activity audit information: Users have access to real-time audit information
How long user audit data is stored for: Between 1 month and 6 months
Access to supplier activity audit information: Users have access to real-time audit information
How long supplier audit data is stored for: Between 1 month and 6 months
How long system logs are stored for: Between 1 month and 6 months

Standards and certifications

ISO/IEC 27001 certification: Yes
Who accredited the ISO/IEC 27001: Institute of Quality & Control
ISO/IEC 27001 accreditation date: 07/06/2023
What the ISO/IEC 27001 doesn’t cover: All aspects of HEC are covered under ISO27001
ISO 28000:2007 certification: No
CSA STAR certification: No
PCI certification: No
Cyber essentials: Yes
Cyber essentials plus: Yes
Other security certifications: Yes
Any other security certifications: SOC 2 Type 2 for 2021

SOC 2 Type 2 in progress proof for 2022

ISO 27001-27017 in progress proof for 2022

ISO 27001-27018 in progress proof for 2022

ISO 27001-27036 in progress proof for 2022

CloudGuard PCI-DSS Level 1 Service Provider 2021-2022

LCyber Essentials and Cyber Essentials plus accreditation

Security governance

Named board-level person responsible for service security: Yes
Security governance certified: Yes
Security governance standards: ISO/IEC 27001
Information security policies and processes: Please see Check Point's full information security policy at: https://www.checkpoint.com/privacy/security/

Operational security

Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Configuration and change management approach: SOC 2 Compliance.

Change requests are documented within the Change Management tool. The request is reviewed and approved by the Director of Operations. Emergency changes are performed and updated as part of hot fixes, which follow the same process as described above though the time frame may be shortened, and approvals may be provided after the change was already performed. Key Check Point personnel are notified of cases of test failures. Every test failure is documented in the change management tool and sent to the relevant personal in the Project manager.
Vulnerability management type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Vulnerability management approach: Check Point performs monthly vulnerability scans and employs a centrally managed configuration management system, including infrastructure-as-code systems through which predefined configurations are enforced on its servers, and the desired patch levels of various software components.
There is an internal procedure that defines the Patch management process and employees are trained in the corporate security policy.
In addition to the ongoing patch management processes, Check Point performs security monitoring from three main channels:
1. Internal Security Research (vulnerability scanners, penetration test, company’s Incident response team and researchers, etc.)
2. External sources (threat intelligence, US-CERT, publications, vendors updates, etc.)
3. Anonymous notifications
Protective monitoring type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Protective monitoring approach: Check Point monitors the production environment with several tool such as grafana, sumologic and implements a continuous monitoring strategy.
Check Point plans to mandate ongoing security control assessments to be completed in accordance with the FedRAMP continuous monitoring strategy and respond to security related vulnerabilities and issues generated by security assessment and monitoring activities by either fixing, remediating or implementing mitigating controls to reduce the overall risk.
The Check Point CISO team plans to use information obtained from continuous monitoring and ongoing assessments of Check Point for FedRAMP reports the security state of the system via vulnerability scan results
Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
Incident management approach: In the event of a security incident, Check Point’s security team is responsible for investigating and responding. Check Point has clear risk and damage assessment procedures to define the SLA required to solve any security incident. Check Point’s Information Security Manager, and other managers, will coordinate security response including containment, investigation, infrastructure securing, reporting, closure and follow up. Check Point will respond using the appropriate management and technical resources in order to promptly restore operations impacted by any incident. Check Point will adhere to applicable laws and industry standards in this process, including following any required notifications.

Secure development

Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

Connection to public sector networks: No

Social Value

Fighting climate change
Covid-19 recovery
Tackling economic inequality
Equal opportunity
Wellbeing

Fighting climate change

Trustmarque's Environmental Policy and Carbon Reduction Plan include delivering and supporting actions on reducing our carbon footprint and our impact on climate change. We have set a target to achieve net zero by 2035. Our policies include 'Virtual First 'meetings, energy reduction plans, flexible working, green software solutions and associated services from innovative suppliers to promote digital environmental innovation, promoting sustainable procurement. Please contact Trustmarque to discuss the provision of Social Value. Any Social Value deliverable must be agreed with Trustmarque and be proportionate to the contract value and scope.

Covid-19 recovery

Trustmarque can provide re-training for those left disadvantaged by Covid-19 through skills training, CV and interview workshops. We promote employment and skills by working with Buyers to identify individuals who can benefit from our incentives, which can include workshops to develop and help those who face barriers to employment and increase digital accessibility for communities and hard to reach groups. We can also provide access to apply for apprenticeship and work experience opportunities. Please contact Trustmarque to discuss the provision of Social Value. Any Social Value deliverable must be agreed with Trustmarque and be proportionate to the contract value and scope.

Tackling economic inequality

Trustmarque tackles economic inequality through operating a diverse supply chain including many SMEs and micro businesses. Our access to a broad range of suppliers ensures both resilience and capacity. Trustmarque is continuously refining our supply chain to meet the ever-changing needs of our customers and to ensure we can always offer the best solution through capability, capacity and resilience at the best price. Our vendor agnostic approach among suppliers allows us to support innovation and disruptive technologies to deliver lower cost and/or higher quality goods and services to customers. Please contact Trustmarque to discuss the provision of Social Value. Any Social Value deliverable must be agreed with Trustmarque and be proportionate to the contract value and scope.

Equal opportunity

Trustmarque operates an Equal Opportunities policy that outlines our commitments including creating a workforce that reflects the diversity of our communities. Other initiatives include supporting disabled people to develop skills and supporting in-work progression. Trustmarque is a Level 1 Disability Confident employer, demonstrating our commitment to employing a diverse workforce so all can flourish. We are committed to a policy of treating all its employees and applicants equally. We are committed to creating an environment where diversity is valued and respected and where our people can bring their different perspectives, and whole selves to work. Inclusivity and equal opportunities for all colleagues are paramount. Trustmarque is a Living wage employer, and we offer 14–18-month apprenticeships. In February 2024 we launched Encircle our DEI network – made by colleagues, for colleagues to support Diversity, Equity, and Inclusion in the workplace. Please contact Trustmarque to discuss the provision of Social Value. Any Social Value deliverable must be agreed with Trustmarque and be proportionate to the contract value and scope.

Wellbeing

We align our approach to mental wellbeing to the six standards in the Mental Health at Work commitment, including staff work and wellbeing sessions, flexible working, speak-up policy, etc. We have a dedicated team of qualified Mental Health First Aiders who offer support to all Trustmarque Group Colleagues to offer advice regarding how to support and signpost – this is linked to the ALGEE mental health action plan. The Work+Wellbeing team also facilitate workshops or share resources to support wellbeing within the workplace, this can be found on our Work+Wellbeing team via the Trustmarque Hub. We have an Employee Assistance Programme which is available 24/7 to all Trustmarque Group Colleagues. Please contact Trustmarque to discuss the provision of Social Value. Any Social Value deliverable must be agreed with Trustmarque and be proportionate to the contract value and scope.

Pricing

Price: £36 a user a year
Discount for educational organisations: No
Free trial available: Yes
Description of free trial: Free trial includes all functionality as described in the service functionality for a limited time period of 30 days for up to 500 seats.
Link to free trial: Please contact your chosen partner to discuss beginning a free trial.

Trustmarque Check Point Infinity Product Set

Features

Benefits

Service documents

Framework

Service ID

Contact

Service scope

User support

Onboarding and offboarding

Using the service

Scaling

Analytics

Resellers

Staff security

Asset protection

Data importing and exporting

Data-in-transit protection

Availability and resilience

Identity and authentication

Audit information for users

Standards and certifications

Security governance

Operational security

Secure development

Public sector networks

Pricing

Service documents

Cookies on Digital Marketplace

Trustmarque Check Point Infinity Product Set

Features

Benefits

Pricing

Service documents

Framework

Service ID

Contact

Service scope

User support

Onboarding and offboarding

Using the service

Scaling

Analytics

Resellers

Staff security

Asset protection

Data importing and exporting

Data-in-transit protection

Availability and resilience

Identity and authentication

Audit information for users

Standards and certifications

Security governance

Operational security

Secure development

Public sector networks

Social Value

Pricing

Service documents