Cyber Security Services
Our agile NHS focused Cyber Security solutions/services alleviate strain on IT/Cyber teams by providing strategic advice and technical skills. We support compliance with Cyber Essentials and DSPT, by delivering improvements to patch management, secure by default principles, security operations, risk management, subject matter expertise and wider cyber security programmes.
Features
- Real-time device monitoring through SIEM, and XDR technology products
- Patching and updates management service, end of support system upgrades
- CareCERT management, remediation, and compliance
- DSPT, ISO 27001, and Cyber Essentials compliance support
- Penetration test technical remediation assistance
- Vulnerability scanning, assessment and programme architecture and management
- vCISO - Strategic Cyber guidance for OnPrem, Hybrid & Cloud
- Managed security infrastructure services, Firewall, Web, Anti-Virus
- Managed security infrastructure services, Firewall, Web, Anti-Virus
- 24x365 Security Operations Centre (SOC)
Benefits
- Vendor agnostic. (SCCM, SolarWinds, Qualys, Lansweeper, Nessus, ManageEngine, PaloAlto)
- Responsive and agile SLAs to suit all customers’ requirements
- Scalable, elastic service with on demand access to cyber professionals
- Expert advice from a leading IT consultancy in healthcare
- Proactive monitoring of systems and network infrastructure
- Allows customers to focus on their core business functions
- Achieving a proactive posture which is secure by default
- Extensive Security Operations knowledge and experience within healthcare
- Improved ability detecting, remediating and responding to a cyber-attack
- DSPT compliant, ISO 27001 and Cyber Essentials Plus accredited
Pricing
£375 to £1,625 a unit a day
Service documents
Request an accessible format
Framework
G-Cloud 14
Service ID
9 2 7 2 2 4 6 1 5 2 3 1 8 1 8
Contact
CLOUD 21 LIMITED
Steve Tope
Telephone: 0845 838 8694
Email: bids@cloud21.net
Planning
- Planning service
- Yes
- How the planning service works
-
We work with our customers initially hosting scoping workshops to understand the full scope of the services which need to be delivered.
This also allows us to fully understand the business, strategies, objectives and current position – and where the customer wants to get to. We can then align technically with the business strategies and deliver the right outcomes and value. Our consultants will ensure that the design and delivery of any of our Managed IT Security Service meets the needs of our customers. - Planning service works with specific services
- Yes
- Hosting or software services the planning service works with
-
- Vulnerability scanning (Qualys, ManageEngine, Nessus)
- SIEM (Graylog, Splunk, ManageEngine Log360)
- Firewalls and Cloud Network Security (Palo Alto)
- Penetration Tests
- SOC Services
- Patch Management (SCCM/MECM, ManageEngine, Qualys PM, Ivanti)
- XDR Services (MDE, Sophos, Trend, PaloAlto)
Training
- Training service provided
- Yes
- How the training service works
-
We can provide all manner of cyber security training both directly and through partners. The training offered includes online instructor lead and on the job (skill transfer).
We can also work with clients’ marketing and communications team to create security awareness campaigns and also help develop or update your on-boarding processes. - Training is tied to specific services
- No
Setup and migration
- Setup or migration service available
- Yes
- How the setup or migration service works
- Cloud21 can provide implementation planning, risk assessments and impact analysis to support set-up and migration.
- Setup or migration service is for specific cloud services
- No
Quality assurance and performance testing
- Quality assurance and performance testing service
- Yes
- How the quality assurance and performance testing works
- Cloud21 are ISO9001 accredited.
Security testing
- Security services
- Yes
- Security services type
-
- Security strategy
- Security risk management
- Security design
- Cyber security consultancy
- Security incident management
- Security audit services
Ongoing support
- Ongoing support service
- Yes
- Types of service supported
- Hosting or software provided by your organisation
- How the support service works
- We are accredited under ISO27001 and Cyber Essential+ and all our IT Security Services are operated in compliance with the ISO20000 framework.
Service scope
- Service constraints
- Our support service has no constraints. We can provide services remotely or on site as required by the customer. We can work alongside the customer's existing IT team, or act autonomously to manage and resolve any aspects of the service that arise 24x365.
User support
- Email or online ticketing support
- Yes, at extra cost
- Support response times
-
All support levels required can be customised to meet the customer's requirements, typically this would either be 5x9-5, 7-8x8 or 24x365. Details on all of our service levels are available upon request.
All of our customers have a technical account manager to make sure the needs of the service are being delivered and reporting is provided on a schedule defined by the customer from our service delivery manager. - User can manage status and priority of support tickets
- No
- Phone support
- Yes
- Phone support availability
- 9 to 5 (UK time), Monday to Friday
- Web chat support
- No
- Support levels
-
All support levels required can be customised to meet the customer's requirements, typically this would either be 5x9-5, 7-8x8 or 24x365. Details on all of our service levels are available upon request.
All of our customers have a technical account manager to make sure the needs of the service are being delivered and reporting is provided on a schedule defined by the customer from our service delivery manager.
Resellers
- Supplier type
- Reseller providing extra features and support
- Organisation whose services are being resold
- Microsoft, Qualys, Graylog, Splunk, SolarWinds, ManageEngine, PaloAlto, Cylera, Imprivata, Sophos
Staff security
- Staff security clearance
- Other security clearance
- Government security clearance
- Up to Developed Vetting (DV)
Standards and certifications
- ISO/IEC 27001 certification
- Yes
- Who accredited the ISO/IEC 27001
- British Assessment Bureau
- ISO/IEC 27001 accreditation date
- 09/01/2024
- What the ISO/IEC 27001 doesn’t cover
- We are covered for the following activities: The provision of professional IT services and IT support providing Consultancy, Product Development and Managed services including IT Service Desk, Cyber Security and SOC within the Healthcare, Local Authorities, Education and Professional Service Sectors. Anything outside of this would not be covered.
- ISO 28000:2007 certification
- No
- CSA STAR certification
- No
- PCI certification
- No
- Cyber essentials
- Yes
- Cyber essentials plus
- Yes
- Other security certifications
- Yes
- Any other security certifications
- ISO 9001:2015
Social Value
- Social Value
-
Social Value
- Fighting climate change
- Wellbeing
Fighting climate change
Cloud21’s quality and compliance team have been extremely busy over the last 24 months and have recently become ISO14001 certified demonstrating our commitment to reducing its environmental impact.
Ambitions for 2024/25
For this service we will:
• Implement a reduce, reuse and recycle scheme (coffee pods, pens and batteries)
• Eliminate single use plastic bottles from our office headquarters
• Promote rail travel over air travel for practical journeys
• Promote the ‘green leaf hotel’ scheme where practical to do so
• Accurately measure commutable mileage
• Reduce paper use and printing at the our headquarters
• Reduce emissions by 7.14% (19.23 tCO2e) from baseline
We believe it is all about making small changes in order to make a big impact and promoting environmental sustainability.
Cloud21 has implemented a carbon reduction plan in line with the NHS’s carbon reduction roadmap.Wellbeing
We have a company-wide approach called VIBE (Valuing Inclusion, Belonging and Equity), which includes the provision of resources and support to improve physical, emotional and mental health and wellbeing which complements our company values.
Our VIBE team promote social inclusion and wellbeing by running events that supporting charities, such as Samaritans and MIND.
We understand stress can impact a person’s mental health, this can result in absences and even resignations, but more importantly, it can impact people's lives fundamentally. Making sure that work is a safe place to discuss wellbeing and mental health by creating an inclusive and supportive environment will provide employees with the tools needed to manage mental health.
We look to reduce the pressure and stress involved in modernising systems and technology leveraging our past experience and sharing this with all stakeholders involved.
Initiatives we are looking to run within the next 18 months:
Run Health and wellbeing webinars and sharing resources to support our teams such as ‘NHS Every mind matters’ and the ‘6 ways to wellbeing’.
Continue to raise mental health awareness through running company lead events such as ‘fun-runs’ or ‘Movember’ to promote mental health awareness.
Offer mentoring support from trained mental health first aiders to support our staff.
Ensuring we continue to develop our Wellbeing policy.
Pricing
- Price
- £375 to £1,625 a unit a day
- Discount for educational organisations
- No