SERVICE DEFINITION G-CLOUD 7 SECURE FILE TRANSFER DIODE. Classification: Open

(1)

Classification: Open

SERVICE DEFINITION

G-CLOUD 7

(2)

Classification: Open ii

Lot 4 - Specialist Cloud Services

Service Definition: Secure File Transfer Diode, Issue: 1.2

Copyright: MDS Technologies Ltd 2015 © MDS Technologies Ltd 2015.

Other than for the sole purpose of evaluating this Response, no part of this material may be reproduced or transmitted in any form, or by any means, electronic, mechanical, photocopied, recorded or otherwise or stored in any retrieval system of any nature without the written permission of MDS Technologies Ltd.

MDS Technologies Ltd, 2 Methuen Park, Chippenham, Wiltshire, SN14 0GX Telephone: 01225 816220, Fax: 01225 816281

WHY MDS?

 Bespoke cloud solutions that fit your business needs

 Trusted provider of agile, scalable and assured digital services

 Full range of cloud hosting and enablement solutions

 Security Cleared (SC) operational support staff

 Honest providers of services, support and practical advice

 24/7 support through our ITIL-aligned Service Desk

 A privately owned, UK sovereign company

 We are an SME - agile with minimal bureaucracy

 Providing infrastructure services to the Public Sector for over 12 years

 Certified against ISO 27001, ISO 9001, ISO14001 and Cyber Essentials Plus

 We listen to our customers, we understand, we deliver

PROFESSIONAL, PERSONALISED SOLUTIONS

SUMMARY OF SERVICE FEATURES

 Secure cross domain information sharing with customers, suppliers and partners

 Deal with less trusted organisations without compromising your sensitive data

 Malware protection and data loss prevention reduces information security risk

 Transformation technology protects against many zero day attacks

 Ensured one-way information transfer

 Enhanced security operations for remediation and response to attack/compromise

 Enhanced defence for your critical systems and sensitive information

 Demonstrable compliance with policy, standards and legislation

 Simple integration with existing capabilities improves efficiency

 Users held to account for their information sharing actions

PRODUCT OVERVIEW

MDS can provide a File Transfer Diode Service which enables information exchange to be controlled when data is moved between security domains. The service simplifies the ability to ensure files are safely transferred whilst limiting the risk of data inappropriately flowing back in the opposite direction. The service is available to protect a range of one-way file transfer use cases. The service can be tailored to meet a customer’s specific file sharing needs and the associated security accreditation requirements in accordance with its security risk appetite. This puts the customer in control of what its staff can share and with whom they can share it, maintaining the necessary log data to hold users to account for their decisions.

The service also provides a range of optional utilities which facilitate automatic and manually

controlled file sharing through the service. This minimises integration activities and ensures consistent application of an organisation’s information sharing policy.

(4)

The core service covers the following scope:

 Provision of a Deep-Secure Minerva Diode licence for the period of the service

 Deployment of the software on customer or third party service infrastructure

 Integration of the Diode with High and Low side infrastructure

 Configuration of a standard templated Diode policy for permitted information exchanges

 Service test to ensure correct configuration and integration

 24/7 Service DeskDiode software patch provision

 Diode software update provision

The following additional service options may be chosen:

 Configuration of a tailored Diode policy for permitted information exchanges which meets the organisations specific information exchange needs

 Deployment of file sharing applications and/or utilities software on High and Low side customer or third party service infrastructure

 Integration of file sharing applications and/or utilities software on High and Low side customer or third party service infrastructure

 Configuration of file sharing applications and/or utilities software

 File sharing applications and/or utilities software patch provision

 File sharing applications and/or utilities software update provision

 Diode policy, application and utility configuration and management training

 Day-to-day Diode administration tasks MDS is a reseller of this Deep Secure service.

PRODUCT FEATURES

Our File Transfer Diode Service has the following key features:

 One-way information transfer

 A robust security architecture supporting CESG design patterns for cross domain information exchange

 Inclusion of data transformation techniques where content control and validation is required

 Sharing of multiple business information types supported:

 Files

(5)

 SNMP and SYSLOG management information

 Self-defending security architecture

 Suitable for protecting Tier 1, Tier 2 and Tier 3 information

 Fully supports use of Government Security Classifications for information sharing policy

 24/7 Service Desk support

 Named Account Manager

The following options may be purchased:

 File transfer utilities and applications to simplify file transfer capabilities

BUSINESS BENEFITS

 Compliance with HMG Policy, Standards and Legislation

 Secure cross domain information sharing with customers, suppliers and partners

 Deal with less trusted organisations without compromising your sensitive data

 Malware protection and data loss prevention reduces information security risk

 Transformation technology protects against many zero day attacks

 Ensured one-way information transfer

 Enhanced security operations for remediation and response to attack/compromise

 Enhanced defence for your critical systems and sensitive information

 Demonstrable compliance with policy, standards and legislation

 Simple integration with existing capabilities improves efficiency

 Users held to account for their information sharing actions

TECHNICAL FEATURES

The File Transfer Diode Service has the following technical features:

 Protocol Whitelisting:

 HTTP/HTTP(S)

 SFTP

 SYSLOG

 SNMP

 Low-to-High and High-to-Low variants available for one way transfer

(6)

 Integrated data transformation to enhance assurance where file content control is required

 XML schema validation

 Handling of encrypted content to enable controlled flow where required e.g. HTTP(S)

 Information protected in transit between the user and the service infrastructure utilising:

 TLS for HTTP(S)

 SNMP V3 encryption for network management

 Government Security Classification label support for informal (e.g. header, footer, first line of text, XML field) security labels

 Logging is configurable for both successful and unsuccessful attempts to move data across the File Transfer Diode Service

The following technical features are available depending on options purchased:

 File sharing web application

 Automated file sharing utilities

Figure 1: File Transfer Diode Service showing Minerva High-to-Low Option

Figure 2: File Transfer Diode Service showing Minerva Low-to-High Option

EXAMPLE USE CASES

This service supports the following information sharing use cases:

 Assured one-way transfer enforcement:

 Limiting the flow of business information to a single direction only with no risk of data flowing back

High Side Low Side

Proxy Server Proxy Client Decompose Data Verify Structure Diode TX Diode RX Recompose Data Check Policy Minerva H2L Data Source Protected Network Data Destination Connected Network

High Side Low Side

(7)

 Cross domain file transfer:

 Verification of files transferred to ensure policy compliance to include highly assurable data transformation

 Validated XML schema based application information sharing:

 XML schema validation to protect applications and services from malformed or out of range XML content

 File import utilising Personal Exchange (PX) Web Service:

 Holding users to account for what they import or export

 Windows Server Update Services (WSUS) transfer:

 Securing the ability to update Windows platforms within sensitive systems

 Sophos AV signature update transfer:

 Securing the ability to update AV signatures for Sophos AV checkers within sensitive systems

 Controlling software updates:

 Securing the ability to update platforms within sensitive systems with software updates from untrusted domains

 Secure sharing policy compliance enforcement

INFORMATION ASSURANCE

The File Transfer Diode Service is suitable to meet the requirements for all sensitivity levels within the GSC Scheme subject to the considerations of accreditation best practice and specific use case considerations.

Deep-Secure are ISO 27001 aligned for the Secure File Transfer Diode Service and certified to CES/IASME.

The service can be hosted within an assured Cloud platform, which is aligned to the CESG Cloud Security Principles and Pan Government Accredited at IL2 and IL3 (e.g. Skyscape’s Self-managed Cross Domain Solution) or on an appropriately accredited customer platform.

ON BOARDING AND OFF BOARDING PROCESSES

On-boarding

As part of on-boarding we will:

 Deploy the Diode software, and work with your organisation to set up and configure the service

(8)

We offer two methods of on-boarding, based on the service needs:

 A standard templated configuration based on a fixed application in line with the use cases outlined in the preceding section

 An optional tailored configuration of file sharing requirements which meet your specific risk profile

 We work with your organisation to determine your specific cross domain information exchange policy requirements as they differ from the standard templated configuration including any specific associated logging and compliance requirements

All service on-boarding is delivered in line with the Deep-Secure ISO9001 Certified Quality

Management System processes for the implementation of the File Transfer Diode Service product.

Figure 3: Service deployment process

Plan PSO Deployment

Order Acknowledgement  QF17 Form  Sales Order Form

(approved and uploaded to CRM) Tailored Deployment  Statement of Work  Tailored policy specification Customer Review Customer Acceptance  Email  Document Deployment Activities & Test

Completion Document  QF14 Customer Feedback Questionnaire Plan Product Delivery Order 3rd party SW  QF21 Purchase Request  3rd Party SW Licences Allocate SW Licences & Create CD Licence Allocation  QF20 Licence Number Register  QF19 Licence Record  Deployment CD Deliver Product to Customer Delivery Documentation  QF11 Delivery Note  QF25 Certificate of Conformance (optional) Training Dates

 Agreed dates with External Trainer and Customer Perform Training Training Materials  Presentations Training Feedback  QF12 External Training Feedback Form Standard Deployment  Agreed dates with

(9)

Off-boarding

As part of off-boarding we will:

 Provide you with access to the logs held within the service at the point of decommissioning, if required

 Decommission the Deep-Secure Diode software

 Delete all accounts and data

 Recover all licensed software

We will charge a single day at our professional services rates (see Pricing) for off-boarding activities.

PRICE MODEL

Our core File Transfer Diode Service is based on a monthly charge per Diode instance required by the customer. In addition, there is a service on-boarding charge that covers installation, configuration of the standard (templated) Diode policy and testing.

Optional service elements include:

 File sharing utilities based on an on-boarding charge and a monthly charge

 File sharing applications based on an on-boarding charge and a monthly charge per 10 users enabled

 Training based on a charge per course per attendee

Full details of pricing are contained in the service pricing document.

Pricing excludes costs associated with the provision of compute and storage infrastructure required to host the File Transfer Diode Service. This will vary depending on the nature of the information

exchange requirements that are part of a customer’s specific solution.

Pricing excludes day-to-day Diode administration tasks. This can be provided at our professional services rates (see Pricing), or through the MDS Managed Guard Service.

SERVICE MANAGEMENT

The File Transfer Diode Service includes full software maintenance and support for the sustainment of the deployed instances and the associated resources required. This excludes day to day

administration tasks. This can be provided at our professional services rates (see Pricing), or through the MDS Managed Guard service. The support offered is covered under a comprehensive service management pack as detailed in the subsequent sections.

(10)

SERVICE LEVELS

The Deep Secure Service Desk is available: Monday-Friday, 08.30-17.30, local UK time, excluding bank and public holidays.

Support is provided by experienced Deep-Secure technical engineers who are specifically trained to perform in-depth diagnostic and troubleshooting activities in order to resolve product issues as quickly as possible along with carrying out any product execution tasks included within the File Transfer Diode Service.

All Customer interaction details will be recorded and a Case Reference Number (CRN) assigned. Engineers work in small flexible multi-skilled units. This facilitates a team approach to service provision and ensures that more than one engineer is aware and able to discuss and resolve your service requests.

Service Request Categories

The following table sets out the categories that will be assigned to each Service Request.

Table SL1

Category Description

1 Total service failure of (operational) system or failure of a component of a critical process

2 Failure of one or more system functions making use of the system difficult (e.g.

service still running and operational but not to full capacity)

3 Failure of a non-critical function having no significant effect on the system operation (e.g. failure of a sub-component such as a new version of an AV product)

4 Any incident having minimal impact on the system operation, requests for information or requests for enhancements.

Service Levels

The times indicated in table SL2 below are the target times for the Service Provider to respond to or provide a workaround for incidents as set forth in the Agreement.

(11)

Table SL2

Response and Workaround Times

Category Target Response Time Target Workaround Time

1 Less than 1 Working Hour Less than 1 Working Day

2 Less than 1 Working Hour Less than 3 Working Days

3 Less than 1 Working Hour Less than 10 Working Days

4 Less than 1 Working Hour As Appropriate

Escalation

In the event that a Service Request is not provided within the relevant target time indicated in table SL3 above then the following escalation timings shall apply. For the purposes of this agreement, escalation shall mean the customer shall have the right to communicate with that person in relation to the provision of the Service Request. In the event that the identified individual is not available then the Service Provider shall use their reasonable endeavours to provide the customer with an alternate contact person.

Table SL3

Category Service Delivery Manager Product Manager

1 Immediate Notification 1 Working Day

2 2 Working Days 5 Working Days

3 10 Working Days N/A

4 N/A N/A

Security Flaws

In the event that the Service Provider identifies security flaws in the software, the Service Provider shall categorise the security flaw in accordance with table SL4.

Table SL4

Severity Description

(12)

Table SL4

Severity Description

2 Security vulnerability which means the Service Provider Diode fails to block data that should be blocked according to the configured policy (e.g. data type configured to be blocked is allowed to pass).

3 Security vulnerability which means the Diode fails to correctly identify the source or destination of data when applying policy (e.g. identity of originator of a signed message incorrectly identified resulting in loss of accountability).

After categorising any emerging security flaw, the Service Provider shall follow the alerting and remediation process timings of table SL5. Alerting shall be to a customer nominated point of contact, using an agreed customer nominated communication means (e.g. secure email address).

Table SL5

Alerting and Remediation Times

Severity Target Alert Time Target Remediation Time

1 Less than 2 Working Days Less than 2 Working Days

Should we fail to meet SLA terms within the defined timescales we will credit 1 days’ worth of File Transfer Diode Service charge.

ORDERING AND INVOICE PROCESS

Ordering can be carried out using the Framework Agreement Schedule 2 “Order Form”. Invoicing is monthly in arrears.

Payment can be via the following methods: BACS or Cheque.

SERVICE LEAD TIME

We will initiate on-boarding on receipt of a purchase order in line with the Service Deployment Process identified in the On-Boarding section of this Service Definition Document. Timescales for implementation of the service will vary, depending on the size and complexity of the service

(13)

TERMINATION COSTS

We will charge a single day at our professional services rates (see Pricing) for off-boarding activities.

BACKUP/RESTORE AND DISASTER RECOVERY

With the exception of configuration and syslog data the File Transfer Diode Service is stateless. Back-up of configuration and syslog data is a consumer responsibility. If required this can be provided at our professional services rates (see Pricing) or through the MDS Managed Guard service.

DATA RESTORATION/SERVICE MIGRATION

Data restoration is not included in the service. If required this can be provided at our professional services rates (see Pricing) or through the MDS Managed Guard service.

Service migration is not included in the service. If required this can be provided at our professional services rates (see Pricing) or through the MDS Managed Guard service.

CUSTOMER RESPONSIBILITIES

The customer is responsible for:

 Provision of compute and storage infrastructure required to host the File Transfer Diode Service

 Responding to policy conflict alerts raised by the Diode service and considering if the set policy is correctly aligned to the business needs

 Completion of the Sales Order Form in line with the G-Cloud procurement process

 For tailored policy configuration services:

 Approval of the Statement of Work and System Design Document

 Engaging with, and specifying requirements for, the detailed configuration of the information exchange policy and reports that are required

 Providing appropriate and empowered attendees for scoping and review meetings

 The control and management of access and responsibilities for end users

 Ensuring that only appropriate data in line with the GSC Scheme (e.g. OFFICIAL or OFFICIAL-SENSITIVE) is accessible and presented to the platform.

Where the customer chooses not to take up a third party day-to-day management service, or professional services management, they are also responsible for:

 Diode configuration back-up

 Syslog back-up

(14)

TECHNICAL REQUIREMENTS

Appropriately specified host server(s) and client devices where required to include associated licence provision.

RELATED SERVICES

This service may be bought in conjunction with the following other MDS G-Cloud services:  Secure Guard Management

SERVICE DEFINITION G-CLOUD 7 SECURE FILE TRANSFER DIODE. Classification: Open