PMD DATA SOLUTIONS LIMITED

Barracuda Email Protection and Cloud-to-Cloud Backup for Microsoft 365

Barracuda Email Protection and Cloud Backup for Microsoft 365 - including Exchange, OneDrive, SharePoint, Teams and Entra ID

Features

• Microsoft 365 Security
• Exchange, OneDrive, SharePoint, Teams, Entra ID
• Unlimited backup capacity
• Infinite Data Retention by Default
• Customisable retention
• Advanced Malware Protection
• Email Archiving
• AI-powered Impersonation Protection
• Domain Fraud Protection
• Security Awareness Training

Benefits

• Multi-tenancy support
• Advanced UI
• Automated backup and recovery
• 24/7 global support
• Reduce recovery times
• Granular data protection
• Point-in-time retrieval
• Automated email alerts
• Advanced reporting
• 256-bit AES encryption for data at rest

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@pmddatasolutions.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

959094478843255

Contact

Matthew Gwynn
01789 268579
sales@pmddatasolutions.co.uk

About your service

• Service categories:

  Applications

  Production and operations

  • Other operations
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Hybrid cloud
• Service constraints: No known constraints
• System requirements:
  • Per user license model
  • SaaS platform requires app integration to M365 using Enterprise App

User support

• Email or online ticketing support: Yes
• Support response times: 24/7 global support by email or phone; 4 hour response time ; Enhanced support packages available
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: All Barracuda SaaS software come with 24x7x365 support services included with the service. Premium support can be purchased at additional cost for guaranteed SLAs.; https://assets.barracuda.com/assets/docs/dms/Barracuda_Premium_Support.pdf; Support uplifts vary on product purchased.; All support cases receive a desginated engineer resource.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: All Barracuda SaaS services come with free onboarding support with a Barracuda engineer.; For customers who wish to self-install, all services can be activated using interactive wizards.; Ongoing product support and updates are provided via Barracuda Campus:-; ; https://campus.barracuda.com/
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Customers can export data at any time while their contract is active.
• End-of-contract process: At end of contract Barracuda will destroy any data held within the system within 90 days of license expiry.
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: Onboarding documentation is available via Barracuda Campus: https://campus.barracuda.com/

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Other
• Application to install: Yes
• Compatible operating systems: Windows
• Designed for use on mobile devices: No
• Service interface: No
• User support accessibility: None or don’t know
• API: No
• Customisation available: Yes
• Description of customisation: Data retention periods can be customised from the standard default of infinite retention.; Users and mailboxes can be included/excluded form services as required.; Customisation can only be performed by authorised admin with full access rights, or by request to Barracuda support.

Scaling

• Independence of resources: Barracuda Networks supply a service with an SLA of 99.9%. See link for latest SLA documentation:; https://assets.barracuda.com/assets/docs/dms/Barracuda_Email_Protection_SLA.pdf

Analytics

• Service usage metrics: Yes
• Metrics types: All metrics are provided via Barracuda's central user interface - BarracudaOne. This resource enables users to monitor and manage all Barracuda SaaS services from a single portal.
• Reporting types:
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Reseller (no extras)
• Organisation whose services are being resold: Barracuda

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest: Encryption of all physical media
• Data sanitisation process: Yes
• Equipment disposal approach: In-house destruction process
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase

Data importing and exporting

• Data export approach: All data backed up to the Barracuda Cloud is accessible, searchable, and retrievable from anywhere with an Internet connection. Barracuda Cloud-to-Cloud Backup not only allows for restoring data to a restore target but also provides the ability to export and download data directly to your workstation or directly to Microsoft Azure Blob Storage, offering greater flexibility in data recovery options.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • Zip
  • Pst
• Data import formats:
  • CSV
  • Other
• Other data import formats: Pst

Data-in-transit protection

• Data protection between buyer and supplier networks: Private network or public sector network
• Data protection within supplier network: IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: Barracuda cloud solutions are built with high availability at the core to ensure uptime of services.; Barracuda Networks supply a service with an SLA of 99.9%. See link for latest SLA documentation; ; https://assets.barracuda.com/assets/docs/dms/Barracuda_Email_Protection_SLA.pdf
• Approach to resilience: Barracuda cloud solutions are built in public cloud with high availability at the core to ensure uptime of services. Further details can be requested during purchase process.; Barracuda Networks supply a service with an SLA of 99.9%. See link for latest SLA documentation; ; https://assets.barracuda.com/assets/docs/dms/Barracuda_Email_Protection_SLA.pdf
• Outage reporting: All service outages are published at https://status.barraucda.com. ; ; Customers can sign up for proactive email alerts for the service they utilise

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: Access is restricted via authentication and role-based access. Users can be created to allow viewing or editing of specific parts of the platform only.; If customer wishes to apply conditional access controls integration with Entra ID is recommended.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: Between 1 month and 6 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: Between 1 month and 6 months
• How long system logs are stored for: Between 1 month and 6 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: Other
• Other security governance standards: SOC2 Type 2
• Information security policies and processes: Details around policies and procedures are not published to the public. Information can be requested during purchasing process if required.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Details around policies and procedures are not published to the public. Specific information can be provided during purchasing process if specifically required.
• Vulnerability management type: Undisclosed
• Vulnerability management approach: Details around policies and procedures are not published to the public. Specific information can be provided during the purchasing process if specifically required.
• Protective monitoring type: Undisclosed
• Protective monitoring approach: Details around policies and procedures are not published to the public. Specific information can be provided during the purchasing process if specifically required.
• Incident management type: Undisclosed
• Incident management approach: Details around policies and procedures are not published to the public. Specific information can be provided during the purchasing process if specifically required.
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: All Barracuda SaaS services can be trialled free of charge for up to 14 days. Extended trials for POC purposes are available by arrangement.
• Link to free trial: https://www.barracuda.com/support/free-trials

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 1%
• Between £250,000 and £500,000: 1.5%
• Between £500,001 and £1,000,000: 3%
• Between £1,000,001 and £2,500,000: 5%
• Between £2,500,001 and £5,000,000: 5%
• Over £5,000,001: 5%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: Kompleye
• ISO/IEC 27001 accreditation date: Wednesday 19 June 2024
• What the ISO/IEC 27001 doesn’t cover: All UK services are covered by the 27001 certification.
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 7898d4dd-3b81-4683-beac-e3222b654903
• Cyber essentials plus: No
• Cyber Essentials Alternative: You do not have a current and valid Cyber Essentials Plus certificate, or will not have in place within 12 months of the date of award but have an IASME certified equivalent.
• Other security certifications: Yes
• Any other security certifications:
  • ISO 22301 for Business Continuity
  • HIPAA compliant
  • SOC 2 Type 1 Accredited
  • SOC 2 Type 2 Accredited

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@pmddatasolutions.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.