This G-Cloud 9 service is no longer available to buy.

The G-Cloud 9 framework expired on Monday 1 October 2018. Any existing contracts with Commissum are still valid.
Commissum

Red Teaming & Intelligence-Led Penetration Testing

Open source research is carried out to determine your public footprint, and to uncover any leakage of information that attackers could leverage in a targeted attack. Then a test like a real world attack is conducted.

Features

  • Open source intelligence gathering
  • Penetration testing
  • Test ability to detect, respond and recover from an attack
  • SC & DV cleared staff and testers

Benefits

  • A likely scenario of how attackers compromise systems
  • Testing as under realistic circumstances
  • Better understanding of incident response maturity

Pricing

£800 a person a day

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at alexander.northwood@commissum.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 9

Service ID

6 1 8 4 6 3 5 8 5 3 8 1 6 1 5

Contact

Commissum Alex Northwood
Telephone: 0121 663 1026
Email: alexander.northwood@commissum.com

Planning

Planning service
Yes
How the planning service works
Independent planning advice around assurance of data and infrastructure architecture, providing assurance to service users and providers that data is secure. Advice around data segregation, user identity and access management, multi-factor authentication, secure private and public cloud implementation.
Planning service works with specific services
No

Training

Training service provided
No

Setup and migration

Setup or migration service available
Yes
How the setup or migration service works
Secure migration consultancy services, cloud service provider security auditing & assurance and review services, cloud infrastructure and application architecture security testing and review services.
Setup or migration service is for specific cloud services
No

Quality assurance and performance testing

Quality assurance and performance testing service
Yes
How the quality assurance and performance testing works
Commissum, via a partner, provide software performance, load and quality assurance testing utilising both proprietary and open source tools. Test teams can be embedded or remote and Commissum can provide single testers or large teams for larger projects or fast turnaround times.

Security testing

Security testing service
Yes
Security testing type
  • Penetration testing
  • IT Health Checks
  • Risk analysis
  • Other
Other security testing
  • Application Security Testing
  • Mobile Application Testing
  • SCADA / Critical Infrastructure
  • Internet of Things (IoT) security testing
  • Embedded Systems Security Testing
  • Red-Team Security Testing
  • PCI DSS Testing
  • Vulnerability Assessments
Accredited security testers
Yes
Security testing accreditations
CREST
Certified Professional (CCP) risk analysts
Yes

Ongoing support

Ongoing support service
No

Service scope

Service constraints
UK-based, normal working hours (9am-5:30pm, Mon-Fri, excluding public holidays) unless otherwise agreed.

User support

Email or online ticketing support
Email or online ticketing
Support response times
4 hour email response during normal working hours. Weekend support hours need to be agreed per contract.
User can manage status and priority of support tickets
No
Phone support
Yes
Phone support availability
9 to 5 (UK time), Monday to Friday
Web chat support
No
Support levels
Support level provided includes unlimited remote support including telephone and web, onsite support for incident response. Multiple levels are offered ranging from next business day to best efforts.
Costs vary depending on contract.

Resellers

Supplier type
Not a reseller

Staff security

Staff security clearance
Conforms to BS7858:2012
Government security clearance
Up to Developed Vetting (DV)

Pricing

Price
£800 a person a day
Discount for educational organisations
No

Documents

Pricing document
Pricing document
Skills Framework for the Information Age rate card
Skills Framework for the Information Age rate card
Service definition document
Service definition document
Terms and conditions document
Terms and conditions document

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at alexander.northwood@commissum.com. Tell them what format you need. It will help if you say what assistive technology you use.