Leicestershire Health Informatics Service

Cloud Hosted Website and Application Security Testing

LHIS security professionals review and test cloud based websites and applications to ensure best practice and highlight areas of weakness and vulnerabilities. This process can be iterated during the development and implementation process to support best practice development. Testing includes the OWASP top ten and any current zero day attacks.

Features

  • Contextualised reporting puts risks into real world content
  • Industry standard testing methodologies - OSSTMM, CREST
  • Experienced qualified penetration testing staff with Public Sector experience
  • Wide ranging support mechanism for technical expertise
  • Experienced provider supporting public sector organisations nationwide
  • Highly experienced Tigerscheme qualified testing staff
  • Assignment scope tailored to customer requirements
  • Repeat testing to ensure vulnerabilities have been succesfully resolved
  • Operating system, platform, web server and code testing

Benefits

  • Contextualised Reporting - presenting risks in an organisational context
  • Post delivery support for report mediation
  • Value: excellent price, quality and service delivery, subscription based options
  • Partnership working approach
  • Wide range of additional support services available
  • Flexible reporting to suit local templates and risk approaches
  • Valued added services - e.g. retesting of fixed vulnerabilities included
  • Comprehensive reporting detailing assignment scope, testing, results and recommendations
  • Confidential service with qualified security vetted (SC/DV) staff
  • Responsive service able to respond to urgent requests

Pricing

£450 a person a day

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at lpt.lhis.info@nhs.net. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 12

Service ID

1 3 1 6 4 7 5 3 6 4 1 2 3 0 7

Contact

Leicestershire Health Informatics Service LHIS
Telephone: 01162953500
Email: lpt.lhis.info@nhs.net

Planning

Planning service
Yes
How the planning service works
We will work with the customer to agree implementation as part of the SLA
Planning service works with specific services
No

Training

Training service provided
Yes
How the training service works
Clinical system and non clinical training
Training is tied to specific services
No

Setup and migration

Setup or migration service available
Yes
How the setup or migration service works
As agreed in the customer SLA.
Setup or migration service is for specific cloud services
No

Quality assurance and performance testing

Quality assurance and performance testing service
Yes
How the quality assurance and performance testing works
Depending on the requirements outlined in the SLA we work with customers to ensure products and services meet required industry standards.

Security testing

Security services
Yes
Security services type
  • Security strategy
  • Security risk management
  • Security design
  • Cyber security consultancy
  • Security testing
  • Security incident management
  • Security audit services
  • Other
Other security services
  • IT Security Review Services
  • Penetration Testing Services
  • Simulated Social Engineering
  • Cyber Essentials Consultancy
  • Technical Security Training
  • Digital Forensics Support
  • Security Investigation Services
  • IT Security Project Support
Certified security testers
Yes
Security testing certifications
  • Tigerscheme
  • Cyber Scheme

Ongoing support

Ongoing support service
Yes
Types of service supported
  • Buyer hosting or software
  • Hosting or software provided by your organisation
  • Hosting or software provided by a third-party organisation
How the support service works
Via SLA as agreed with the customer

Service scope

Service constraints
Any constraints are agreed with the customer via SLA and managed accordingly.

User support

Email or online ticketing support
Email or online ticketing
Support response times
Response times agreed by SLA. LHIS service desk operates 07:00 to 20:30 Monday to Friday and 08.00 to 13.00 Saturday excluding weekends and UK Bank Holidays. A 24 hour out of hour’s service is available for an additional surcharge. We also provide out-of-hours IT and Senior Management cover where there is a priority 1, urgent loss of service which has a direct impact on patient care and where there is no alternative.
User can manage status and priority of support tickets
Yes
Online ticketing support accessibility
None or don’t know
Phone support
Yes
Phone support availability
24 hours, 7 days a week
Web chat support
No
Support levels
Typically an SLA is drawn up detailing availability, resilience, redundancy and support arrangements and this is then managed during the lifetime of the system.

See below for standard response times within LHIS (which may differ if required). When calls are logged with our service desk we grade them with severities depending on the nature of the issue. The service desk operates according to ITIL change management procedures. Each severity has a standard response time as shown below. These standards are negotiable if required to meet customer needs, however customers should note this may have an impact on the service price.

Response Times
Severity Standard Response Times
1 8 Working Hours
2 16 Working Hours
3 24 Working Hours
4 40 Working Hours
5 10 Working Days
6 5 Working Days
7 5 Working Days
8 20 Working Days (from receipt into installation)

LHIS uses back office support and system functions from with the UK.

Service Levels are typically based on availability with varying options available from 99% to 99.9%.

Standard service hours for the reporting of incidents are 08:00 to 17:00 Monday to Friday excluding UK public holidays.

However 24 hour phone support can be provided at an extra cost.

Resellers

Supplier type
Not a reseller

Staff security

Staff security clearance
Other security clearance
Government security clearance
Up to Security Clearance (SC)

Pricing

Price
£450 a person a day
Discount for educational organisations
No

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at lpt.lhis.info@nhs.net. Tell them what format you need. It will help if you say what assistive technology you use.