Outsourcing of services or business risks to be managed on your behalf.
Cyber security is a strategic asset to any organisation and there is no one size fits all answer. The purpose of the cyber security function is to protect your digital assets, both internally and within your supply chain from cyber attacks.
The purpose of our Cyber Security as Service (CSaaS) is to support you in mitigating risks to your organisation.
We can support you at the start of your cyber security journey by reviewing your existing cyber strategy and/or help you develop a strategy. Additionally, we can provide a first class ongoing UK Sovereign, fully managed cyber security service.
Advisory Services
For you to gain maximum benefit from your engagement with Nine23, we will work together to first understand what you currently have in place and what problems you need to address. We can work remotely, if required, independently or in collaboration with your team.
Our team of experts will help you develop a cyber security strategy or review your existing strategy with you to review its maturity, fit with emerging industry trends and overarching business model to ensure that it is aligned with broader business goals.
Through conducting a strategic threat assessment and risk assessment of your underlying processes and technologies, our team will help you to define risk appetite and tolerance statements. To influence the future development of your security capability and to provide tangible evidence to support any required investment decision-making.
Security teams can often have a myriad of partners, services and tools to manage, integrate and utilise as part of their role. Our team specialises in helping map these capabilities and identify potential areas of duplication and any key gaps so that tooling can be rationalised. Reducing the total cost of ownership for the security team whilst driving up capability through better use of a rationalised, integrated and optimised in line with your team’s processes.
Implementing your cyber strategy and maturity improvement programme can be challenging with numerous competing activities and priorities vying for investment and delivery. Our expert team use their experience and insight into your residual risk, current maturity challenges and strategic goals to define a strategic roadmap and logical sequence to the implementation strands which will help you realise value quickly and ensure delivery can occur at pace in line with organisational objectives.
Achieving ISO implementation (and certification, where appropriate) can help drive maturity and repeatability into your processes and operations. It can also give confidence to both your customers and your suppliers on the seriousness with which quality, security and risk are treated within your organisation and acting as a differentiator within your peer organisations.
Our team have experience of a number of ISO standards from identification, through planning and implementation and on to certification where desired. Our ISO Strategy service will help identify those standards that are a good fit for your organisation and help determine whether a posture of “alignment” or formal certification are best placed to meet your business objectives.
Nine23 project managers will work with you to understand how you work, and how you wish to work. Using PRINCE2 methodology we interpret these requirements into practical IT solutions, implemented by skilled professionals.
Our project team coordinates both the internal and external resources required and liaises with you to ensure the scope and direction of each project is on schedule.
Our professional service team delivers the outcomes you need through high quality, reliable IT solutions. Our consultants, architects and project managers have the depth of experience and knowledge across technologies required to understand requirements and deliver the solution and services to meet them.
We understand that every customer’s project is unique. That’s why we go to great lengths to ensure that we plan and scope each project, irrespective of size, to determine the desired business outcomes and project milestones.
Nine23 plan, design and, if required, implement secure (OFFICIAL-SENSITIVE to SECRET) enterprise projects:
- High-security remote access to government networks (PSN/FN4G/PNN/PND/HSCN/LECN/LEDS/PSNfP).
- Impartial, vendor neutral advice prioritises user needs and outcomes in new-build, tech refresh/update or information assurance programmes.
- Cloud support professional services to Nine23 accredited Platform FLEX solutions.
- IT cost optimisation
- Licence optimisation
Digital transformation is, in our view, the ability to integrate digital technology into your operations and, critically, to enable end users. The way people use technology today has undergone a very substantial change over the last decade and that pace of change is ever continuing.
The end user should be put first in every digital transformation project.
“I need a Cyber Security Strategy”
Design, Develop and Deliver
Implementation of new tooling can be challenging as teams familiarise themselves with products and integrating them with existing solutions. Acting in a hybrid capacity, our team of experienced security and infrastructure engineers will work with your team to deploy and optimise your selected tooling and that you are able to assess if it is realising the benefits anticipated and is working effectively within your environment.
Supply chains are becoming more complex, accelerated by the adoption of Cloud and SaaS platforms and outsourcing of niche business services. Cyber threats continue to target supply chains as a potential avenue to attack organisations or to fraudulently extract funds from them. This is true for your organisation and its suppliers, but also the customers and partners that you work with, where many organisations now find themselves as both potentially the target and the facilitator of such attacks.
Our team will help model your supply chain and understand the risk it poses to your business operations from a criticality, business continuity and reputational damage perspective. We can then propose an audit and assurance regime across these suppliers, proportionate to the risk posed as a combination of technical monitoring and formal audit activities. If desired we can also undertake some of these audit activities leaving your own teams to audit our activities in an “audit the auditor” model designed to increase confidence across the supply chain.
Demands on security teams continue to grow with additional technologies and services being introduced and API driven services delivering steadily increasing transaction volumes to be inspected and protected. To prevent these increases turning into an ever-increasing need for additional resource, which can be challenging to fund, recruit and retain, teams increasingly turn to aspects of automation to automate the administrative overhead and tasks with low value-add to the organisation, allowing valuable security team members to focus on increasing value and taking proactive measures such as threat hunting, engaging with engineering teams to secure systems during development and improving processes and awareness across the business.
Our team brings their years of experience in this field to help identify the best candidate processes and systems for elements of automation to ease pressure on your teams. We also focus on helping implement new automation approaches at reasonable cost and focused on maximising value from your existing investment, rather than driving expensive standalone automation projects.
Our team have years of experience in defining what policies are required to best reduce risk across an organisation and can help in defining these, tailored to the needs of your organisation. We don’t introduce a swathe of generic, templated documents but address fundamental risks and challenges within your organisation based on your risk posture, industry sector and your broader strategic goals, incentivising positive behaviours across your workforce, partners and customers.
If you are in a regulated and compliant industry sector, then your expenditure and technology choices are highly scrutinised. Providing due diligence around technology selections can be challenging to conduct objectively and the need to trial multiple products in the same category can stretch the limited resource within your teams. In response to this, our Tooling Selection service will conduct a formal product evaluation of 3-5 products in the selected category in support of your strategic objectives.
This service encompasses identifying suitable products that align with your organisational scale, sector and objectives; identification of assessment criteria and use cases; engagement with vendors to conduct a desk-based evaluation of technical, non-functional and commercial criteria; technical trial / Proof of Value (where considered necessary) and formal evaluation and recommendation report. All of this can be conducted in line with Treasury Green Book business cases, GDS Spend Controls or equivalent governance regime to give you confidence that you can evidence the need and value of your selected tools.
General provision cloud services are able to meet the majority of business computing needs in numerous sectors. For those organisations that have a requirement to work at a higher security classification, especially where this is a minority of their workloads and so may not merit internal provision, more specialised services can be required. Platform FLEX is a secure, UK sovereign private cloud able to meet requirements for workloads above OFFICIAL-SENSITIVE to SECRET in a flexible, consumption-based model with connectivity to high assurance community networks where required.
ISO 270001, NIST Cyber Security Framework (CSF)
In support of maturing your security capability the adoption of one or more industry standards may be suitable. These can help provide common communication frameworks with your partners and suppliers and also provide customers with assurance of the standards and processes in place to aid in responding to incidents where they occur. Our team have experience in defining implementation plans and then delivering these standards into operation with numerous clients. If adoption of one of these standards is part of your strategy then we can help accelerate the planning and adoption of those standards.
We host our migration services in the UK to ensure data sovereignty on Platform FLEX, our highly accredited (ISO 9001, 27001, ISO/IEC 20000) secure cloud delivering solutions at highly classified levels of cyber security (OFFICIAL-SENSITIVE to SECRET).
- Cloud Migration
Nine23’s migration service can move or enhance your existing solution and utilise the scale, performance and potential cost benefits of cloud computing. Whether you just need some help in designing or planning the move, or if you need help moving or re-engineering for the cloud – we can help.
The Public Sector is undergoing a fundamental shift in the way that it connects to services across all organisations, and embarking on a journey away from legacy PSN services. Nine23 can help you on that journey and help you migrate your existing PSN services to a new, user-centric cloud-first solution and be a part of your ongoing digital transformation.
The Law Enforcement Community Network (LECN) is a new network overlay entering service by the end of 2021, designed and built by the Home Office to replace PSNfP. If you are currently using PSNfP it would be worth considering your options to move onto this new service. Nine23’s UK data centre services are due to have LECN connectivity.
Needing to transfer your mobile devices from one provider to another? This can be time consuming and costly, let alone the sheer logistics of potentially re-deploying vast numbers of devices. Nine23’s hosted migration service can simplify this whole process with minimal user interaction, leaving you to focus on what’s more important – your end-users.
“We need help to model our supply chain”
Managed Services
Through our strategic partner e2e-assure we can deliver a fully managed SOC service to augment your internal team in an industry-leading hybrid model, focused on reducing your costs, manage your risk and maximise the return on your existing technology investments. In concert with our other services we can deliver this as part of a unified agreement with full cost transparency.
If your internal team are struggling to deal with the scale of your estate then outsourcing a core element of volume-generating activity can be a good way to ease this pressure. Outsourcing the detection and mitigation of security events across your endpoints (laptops, mobile phones, servers etc.) can be a good way to ease this burden as they typically drive the highest alert volumes in the environment.
This can free your team up to focus on improving the core infrastructure and services within your organisation and to conduct audit and assurance activities, where risk is typically less easily understood and managed.
Cyber security at its heart is about the management of risk to your organisation’s ability to conduct its core business. In the regulated and compliant sector, this can be an extensive array of complex and nuanced risks. To help ease that burden we offer a risk management incentivised service model. We can jointly agree risks on your risk register that take on the ongoing management of, working with your internal teams, suppliers and partners to take the steps to reduce that risk to acceptable levels and then manage it within the appetite of the organisation on an ongoing basis.
This allows you to focus on a smaller schedule of risks or other business transformation activities, confident that risk continues to be effectively managed. Whilst you cannot outsource risk and its impacts, you can outsource its effective management. Your risk is our concern, and we measure our effectiveness on our ability to help deliver material reductions in your risk profile and management overhead.
- Coming soon
Why Choose Nine23 for CSaaS Solutions?
End-User Focused
Today’s end-user expects to operate at work in the same way they do at home – consumer simplicity with enterprise security. We passionately believe that the end-user should be at the heart of everything we do, empowered to use technology securely and by delivering outcomes for your needs.
Trusted & Proven Experts
We are a highly competent and trusted IT solutions company with a team of talented and experienced individuals. We have proven this through multiple service deliveries of user-focused, nationally accredited solutions in complex environments and by enabling high profile clients.
Security
We have consistently achieved the highest levels of accreditation (ISO 9001, 27001, ISO/IEC 20000-1, ISO 14001) from national bodies to provide confidence that the systems we develop can be used at highly classified levels of cyber security (OFFICIAL-SENSITIVE to SECRET).
UK Data Sovereignty
If your organisation requires the processing of UK personal data, Nine23 owned enterprise infrastructure, Platform FLEX is located in secure UK hosting locations with connectivity to government & corporate networks and internet connected organisations using proven secure access solutions to ensure your data is protected.
Refreshingly Honest
We will build a relationship with you based on being completely honest.
