Router and Vetting G-Cloud Service Definition

Transcription

1 Router and Vetting G-Cloud Service Definition 2013 General Dynamics Information Technology. All rights reserved

2 1 In partnership with Government and industry-leading technology partners, General Dynamics Information Technology (GDIT) has selected a next-generation, cloud-based Router and Vetting Service solution tailored to accommodate specific requirements of the Public Sector. The solution enables organisations to route and provide gateway and relay services for multiple disparate systems and domains. The solution keeps malicious content out of a customers environment, prevents theft or inadvertent loss of sensitive data, ensure regulatory data protection mandates by ensuring that Personal and Sensitive Personal Data are handled properly without end user interaction; and securely communicate and collaborate with customers, partners and suppliers. Service Includes Router/Gateway/Relay Service provides the capability to route traffic to, from, and amongst multiple disparate systems. The ability to manage multiple domains and addresses enforcing the use of address display name policies as defined by the organisation. Anti-virus/Anti-spam solution (ProofPoint Enterprise Protection) provides a comprehensive security threat classification and security management solution against phishing, virus, spam s, and other borne malware. Powerful sender reputation management service combines a global sender IP reputation with local sender IP reputation data, analysed by powerful machine learning algorithms to block connections from malicious IP addresses. The patented MLX Threat Classification Engine ensures s are classified based on the level of threat posed and are managed accordingly, whether it s valid , nuisance spam, or malicious, low-volume phishing attacks. security threat protection solution uses real-time message tracing and other security techniques to triage security threats - backed by expert technical support staff focused on supporting the customer s mission-critical communications. Enterprise data security solution, ProofPoint Enterprise Privacy, provides policy-based (as opposed to user-driven) encryption, to enable the enforcement of enterprise rules for consistent and transparent Data Loss Prevention (DLP) between senders and recipients. Customised DLP rules to accommodate the varying needs of any Government agency. Support for administrator-driven workflows and policies enable any identified s to contain sensitive content to be quarantined for investigation, passed through without action, or automatically encrypted and sent to the recipient. Real-time message tracing, dashboards, and audit capabilities provide the necessary tools to triage data loss incidents or warnings. For More information g-cloud@gdit.com +44 (0)

3 2 Features and Benefits Router Supports numerous addressing formats and domains enhancing the capability to support multiple enterprise environments simultaneously. relay and Transport Layer Security (TLS) encryption can be configured in a variety of ways to serve each organisation s specific needs. Security Performs contextual, lexical, and image-based analysis to examine messages content/context to detect and stop spam, phishing, and viruses from entering the customer s environment, effectively blocking the majority of inbound SMTP connections with a very low false positive rate. Data Loss Prevention, Encryption, and Policy Enforcement Enables encryption and decryption across desktops, laptops, and mobile devices with a seamless user experience that encourages usage and discourages circumvention of security controls. Messages can be released, encrypted, blocked, or quarantined depending on the organisation s policies. Privacy Workflow Incident Manager Provides tracking against each data loss incident. The solution removes complexity associated with key management, workflows, and data loss prevention over to a increase incident response team s focus and efficiency. Pricing The solution is priced at 1.84 per month per mailbox Pricing may vary subject to initial order volume and the buying organisation s required security and service levels. The above prices assume: GDIT s Government Community Cloud Security Impact Level 2 Service Availability of 99.9%. Pricing is subject to VAT General Dynamics is a 20 Billion/year, publicly listed corporation with almost 100,000 employees. We have been nominated by Forbes in their List of Best Managed Companies every year since the list s inception in General Dynamics is a leader in cloud computing, virtualisation, migration, and systems support for government agencies worldwide. We develop highly secure cloud solutions integrating industry leading technologies innovating, improving and delivering meaningful results.

4 3 Information Assurance GDIT s Router and Vetting Service solution is provided as an IL2 service to deliver the optimum balance of comprehensive security and cost-efficiency for a customer s specific needs. Reporting Customer reports/notifications include system capacity and performance reports, anti-spam and anti-virus reports, incident and SLA reports, outage/problem notifications, growth projections, and outage status reporting. Detailed reports are provided to allow compliance officers to quickly analyse details such as specific end users that frequently trigger policies, and the number of encrypted messages that have been sent and the type of content that triggered the encryption. Additional reporting requirements can be finalised and agreed either pre or post contract. On-boarding Process GDIT leverages a proven approach to ensure seamless transition. Our methodology ensures shared stakeholder understanding, increased business value, and low development risk. It consists of five phases, Kickoff, Assessment, Implementation, Pilot Migration, and Enterprise Migration. The phases encompass activities such as requirements identification, communications planning, risk identification, technical evaluation and planning, training, testing, and finally, production migration to the service. An ITIL change management process is established early on and followed throughout. Onboarding and migration to GDIT s Router and Vetting Services does not involve a data migration but implementations can range widely in complexity depending upon the level of rule customisation desired. Consequently, on-boarding times vary on an organisational basis depending on the complexity of the effort. Off-boarding Process GDIT understands the importance of a smooth and managed exit strategy. We cooperate with customers and incoming contractors to coordinate schedules to meet transition goals and mitigate service disruption. Knowledge and procedures are shared to ensure transition of on-going efforts in a logical fashion according to plans agreed between all parties, while maintaining continuity of operations during transition. GDIT provides a phased approach to accomplish transitions, considering service levels, virtualisation architecture, network integration/operation with the receiving infrastructure/site, and security concerns during site evacuation and transition.

5 4 Data Extraction The only data stored on the platforms would be messages contained in quarantine folders, however, GDIT will purge and destroy (as defined in security accreditation for different ILs) consumer data from any computers, storage devices and storage media that are to be retained after the end of the subscription period and the subsequent extraction of consumer data (if requested by the consumer). Service Management, Service Levels, and Customer Service The GDIT solution ensures greater than 99.9% service availability, as measured over a rolling 1-month (720-hour) period. GDIT s helpdesk and engineering staff support our system from client connectivity to the edge where the message enters/leaves the service. Supporting the solution is GDIT s customer service/help desk located at our, 24x7 call centre in the UK, which already handles more than 2 million annual customer enquiries for UK government agencies. The standard service provides for a Tier 3 help desk and technical support of the infrastructure to the Government administrators. Tier 1 and Tier 2 are typically handled by customers or their contractors. GDIT can support additional levels of support to the ordering agency. These services can be priced once additional requirements are known. The help desk and technical support is available 24x365 and will be accessible by phone and through electronic submission via . Action will be initiated based on severity level and Government administrators can elect to receive alerts directly if an event is detected. GDIT uses an industry-leading, best-of-breed service management toolset, which combines ITIL based process driven incident management, customer support, ticket assignment, service levels, escalation and notification. The toolset also includes mature change and problem management workflows which dovetail seamlessly into the security advice and help line management process. Training GDIT offers comprehensive training support for all of our system integration programmes. This helps ensure that users are able to gain the full potential of our products and services, with the minimum delay and disruption to normal business. GDIT can provide training for administrators prior to service initiation, and also for end-users, where applicable. The standard offering provides training material to users in the form of online brochures and FAQs. Webinars, forums, and classroom/instructor led training models can be tailored for any specific needs. One-on-one executive level training for desktop and mobile device access can be provided with follow-on support and incident response. Ordering and Invoice Process GDIT will require an authorised Call-Off Agreement or work order from the customer covering the full value of the services required. GDIT will invoice as agreed in the Call-Off Agreement, this may be based on volume consumed, the achievement of key deliverables, at regular intervals or stages in the service or upon completion of the service to be determined with the customer on a service by service basis. All invoices will be issued in electronic or paper format to the address designated by the customer. Payment of invoices must be made within 30 days of issue and by BACS.

6 Cottons Centre Cottons Lane London, SE1 2QG Tel. +44 (0)