BT PLC

BT Managed Security DDOS

To protect BT provided circuits from DDoS attacks.

Features

• Monitoring
• Detection
• Mitigation

Benefits

• Monitoring - automated multi-layered monitoring based on Netfow.
• Detection - looking for Volumetric, State Exhaustion, Application layer attacks.
• Mitigation - determined triggers based on normal traffic & requirements.

£1,200 to £10,880 a unit a year

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at ccsframeworks@bt.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

936464885496716

Contact

Frameworks Team
0800 3288077
ccsframeworks@bt.com

Service scope

• Service constraints: Must be a BTNet or BT Internet Connect circuit
• System requirements: Must have an internet connect service and appropriate CPE router.

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: 24 hours
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: No
• Support levels: The basic Bronze Lite & Bronze services are a set up and leave service.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: We have a data capture document, our trained engineers will take the customer through the capture process, and build a mitigation strategy.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: There is no data to extract.
• End-of-contract process: Customers have the option to extend but if they do not we remove their Managed Objects from the DDoS Platform.

Using the service

• Web browser interface: Yes
• Using the web interface: Our web based portal interface is available for customers to view their traffic usage and anomalies.
• Web interface accessibility standard: None or don’t know
• How the web interface is accessible: Our web interface is available to customers. Access is via HTTPS user ids and passwords are authenticated.
• Web interface accessibility testing: None
• API: No
• Command line interface: No

Scaling

• Scaling available: No
• Independence of resources: Customers Managed Objects are separated and there is a limit on the number of MO available.
• Usage notifications: No

Analytics

• Infrastructure or application metrics: Yes
• Metrics types: Other
• Other metrics: Metrics are available in the customers portal
• Reporting types: Regular reports

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: No
• Datacentre security standards: Supplier-defined controls
• Penetration testing frequency: Less than once a year
• Penetration testing approach: In-house
• Protecting data at rest: Other
• Other data at rest protection approach: There is no data at rest.
• Data sanitisation process: No
• Equipment disposal approach: In-house destruction process

Backup and recovery

• Backup and recovery: Yes
• What’s backed up:
  • Backup equipment is built into the BT network
  • Traffic can be re-directed to other sites.
  • Traffic is never at rest.
• Backup controls: Customers cannot control what is backed up.
• Datacentre setup: Multiple datacentres with disaster recovery
• Scheduling backups: Supplier controls the whole backup schedule
• Backup recovery: Users contact the support team

Data-in-transit protection

• Data protection between buyer and supplier networks: Other
• Other protection between networks: Data is not stored for the DDoS service
• Data protection within supplier network: Other
• Other protection within supplier network: Data is not stored for the DDoS service.

Availability and resilience

• Guaranteed availability: BT guarantees a 99.95% availability for this service.
• Approach to resilience: BT have a number of scrubbing stations within the network.
• Outage reporting: Monitored by a SOC 24/7 and reported internally.

Identity and authentication

• User authentication: Username or password
• Access restrictions in management interfaces and support channels: User ID and password.
• Access restriction testing frequency: At least every 6 months
• Management access authentication: Username or password
• Devices users manage the service through: Directly from any device which may also be used for normal business (for example web browsing or viewing external email)

Audit information for users

• Access to user activity audit information: No audit information available
• Access to supplier activity audit information: No audit information available
• How long system logs are stored for: Between 6 months and 12 months

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: No
• Security governance approach: N/a
• Information security policies and processes: BT have our own full policy and process implementation along with regular reviews.

Operational security

• Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Configuration and change management approach: Configuration and change management are built into everything we do in BT. High and low level processes and procedures are produced, followed and audited.
• Vulnerability management type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Vulnerability management approach: Vulnerability management is built into everything we do in BT. High and low level processes and procedures are produced, followed and audited.
• Protective monitoring type: Undisclosed
• Protective monitoring approach: Monitored by a SOC 24/7 and reported internally.
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: Incident management is built into everything we do in BT. High and low level processes and procedures are produced, followed and audited.

Secure development

• Approach to secure software development best practice: Supplier-defined process

Separation between users

• Virtualisation technology used to keep applications and users sharing the same infrastructure apart: No

Energy efficiency

• Energy-efficient datacentres: Yes
• Description of energy efficient datacentres: N/A

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  BT Group has been a leader on climate action for over 30 years. We have been tracking our carbon reductions since 1992 and become one of the first companies in the world to set a science-based target in 2008. Our networks and buildings are all powered by renewable electricity, and we are aiming to transition majority of our fleet to electric or zero-emission vehicles by 2030 (now over 2,400 in total). To date, our electric fleet has travelled more than 7.9 million miles, saving over 2,200 tonnes of CO2e, which helps us transition to a net zero economy much faster. ; ; We are investing in full fibre broadband and 5G networks that will pave the way for lower-carbon ways of life and work. We believe to reach Net Zero renewable energy, low-emission vehicles and technology hardware are important, which the Crown Commercial Services also believe. Due to our solutions for Carbon reduction aligning, BT can consider setting a workshop with CCS to share ideas and objectives on how to achieve net zero.; ; We have pledged to become a net zero business by the end of March 2031, and we are targeting net zero for our supply chain and customer emissions by the end of March 2041.We have also set a target to help customers avoid 60 million tonnes of CO2e by the end of March 2030. We aim to contribute to a circular economy by reducing waste and enhancing opportunities to repair, refurbish and recycle. This year, our customers returned more than 1.8 million home hubs and set-top boxes to us and through our refurbishment operation, we reused 83% and recycled the rest. We also collected over 190,000 mobile devices through trade-in schemes, all of which were reused (97%) or recycled.

  Covid-19 recovery

  At BT we understand the important of showing support to others, especially those who are in vulnerable situations. To show our support, BT has launched the award-winning Care Companions initiative during Covid – matching BT volunteers with residents in care homes, providing a befriending service with weekly calls brightening someone’s day. From those humble beginnings there are now around 400 BT volunteers from 29 contact centres across the UK making weekly calls to around 15,000 care home residents. As well as befriending residents, tackling loneliness and isolation, BT volunteers have also continued to support the care homes with fundraising and gardening.; ; We also work closely with Home-Start. A local community network of trained volunteers and expert support, helping families with young children through challenging times. Our partnership helps people improve their digital skills, whilst opening fantastic fundraising and volunteering opportunities for our colleagues. ; ; Our partnership aims to support Home-Start families with: ; · Digital Confidence ; · Data Connectivity ; · Access to devices ; ; Staff will use their volunteering hours to help support families with digital support. We will be teaching families basic digital skills such as using a laptop, tablet, or mobile phones. Also, we would use these hours to help families apply for schools, colleges, and jobs to put them in a position for a better future. ; ; We also offer flexible working. Since Covid people have been through demanding situations, and now going through cost-of-living issues. Giving our employees the chance to work from home twice a week, allows them to save on expenditures traveling from and to the office including spending while within the office. We also understand how covid affected many people through losing loved ones. We hope flexibility allows employees to be more around their loved ones and support each other after going through such tough times.

  Tackling economic inequality

  At BT we are aware, in the UK there are skill shortages for many people who face multiple barriers into employment for several reasons out of their control. This is why we have supported more than 51,000 people with employability guidance and work life digital skills since 2014. Our aim is to boost social mobility and economic productivity by helping young people succeed in an increasingly digital world of work.; ; We are committed to being responsible, sustainable, and inclusive. It is fundamental to our purpose that we ‘connect for good’. BT is one of the largest employers of apprentices in the UK. In 2022, we ranked third place in the top 100 Apprenticeship employers in the UK and recruited more than 2,600 apprentices and graduates over the past four years. An addition to this, we hired 400 apprentices and graduates in 2023 in different cities across the UK such as London, Birmingham, Manchester, and Bristol and more. ; As well as employment schemes, BT have delivered over 185 workshops reaching over 4900 pupils aged between 11 and 19. Our employees share their work skills and experiences with this next generation of employees and drive aspirations to work in engineering, innovation, and technology industries. ; Our 5-hour workshops: ; ; • Give young people the opportunity to explore their individuality, skills and interests through group activities and challenges, supporting their careers education at school. ; • Align with the Gatsby Benchmarks to support schools to deliver great careers education across the UK and Northern Ireland and work towards their quality education standards e.g. OFSTED Inspections ; • Feature STEM (science, technology, engineering, maths) activities that link curriculum-based learning to the skills employers are looking for in areas such as Software Design and Engineering, Fibre Network Build and Cybersecurity Planning and Solutions.

  Equal opportunity

  Everyone, regardless of background, experience, or their place in society, should be afforded opportunities to help them learn and grow. This is the foundation upon which a modern, progressive, and inclusive society functions. In achieving this, we all benefit. We benefit from talent, no matter from where it comes; being able to grow, mature and prosper. This is BT’s philosophy.; ; We have set out some 2030 ambitions relating to gender, ethnicity, and disability. By 2030, our workforce will be; ; • 50% Gender (we want 50% of BT Group colleagues (excl. Openreach) to be women); • 25% Ethnicity (we want 25% of BT Group colleagues (UK workforce, excl. Openreach) to be Black, Asian or from an ethnic minority background); • 17% Disability (we want 17% of BT Group colleagues (UK workforce ex Openreach); • ; We have partnerships with different agencies which we work with to support equal opportunity. Such is Purple Goat, which is one of the UK’s only communications agencies run by disabled people. We partnered with them to deliver a series of videos highlighting the experiences of colleagues with a range of disabilities – including diabetes, autism, and visual and hearing impairments. ; We have also built relationships with Code First Girls, Women Returners, Black Girls Tech Summit, and Girls Talk London. These initiatives help delegates develop their skills and network with peers, creating more opportunities for women to move into technology careers. ; And as lead sponsor of the Avado FastFutures programme, we are helping upskill over 7,000 18–24-year-old learners from ethnically diverse backgrounds. We want to help them develop digital and data skills to unlock opportunities and launch their careers.

  Wellbeing

  At BT, we always put wellbeing and safety first. For us, there are no shortcuts in keeping everyone safe. We work on creating fulfilled, safe, happy, and healthy employees in a culture where everyone can thrive. BT’s supporting wellbeing in the workplace includes: ; ; SilverCloud, which provides programmes designed to help improve and maintain wellbeing by addressing core underlying issues that can have a negative impact on how employees live their lives. We will ensure that all our staff within the contract are aware of this support option if needed. These include modules on stress, money worries, perinatal wellbeing, anxiety and more. Users would usually be recommended to complete one module of their choice within a week period. ; ; We will measure the mental health in respect of the contract using a ‘YourSay’ survey, published annually, of: ; · No. of individuals are aware of the support services. ; · No. of individuals have participated in mental health awareness events. ; · No. of managers who completed the mandatory training. ; · Additionally, managers that qualified mental health first aiders. ; ; BT also provide their Employee Assistance Programmes (EAP). EAP's provide a range of services, notably employee counselling, but also legal advice, practical financial information, and advice on dealing with debts. BT's EAP includes a comprehensive range of personal and group services to help our people deal with worrying or tricky situations. It is entirely free of charge for users. ; The EAP is delivered by Optum - our Occupational Health & Wellbeing Centre of Expertise makes sure the services are delivered to the highest standards to meet our people's needs. You can contact the EAP, in confidence, 24 hours a day, 7 days a week, 365 days a year so that help is available whenever it is needed. Assistance can be provided face-to-face basis or via telephone.

Pricing

• Price: £1,200 to £10,880 a unit a year
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at ccsframeworks@bt.com. Tell them what format you need. It will help if you say what assistive technology you use.