Direct Award Public Sector Frameworks

Jisc Network Equipment Framework

What is it?

The scope of the agreement covers the supply and support of a broad range of wired and Wi-Fi network equipment including:

• Devices with firewall capabilities
• Low-end customer premises equipment (CPE)
• Mid-range enterprise and high-end, carrier-class type equipment supporting 100 Gigabit Ethernet and above.

It also covers converged network adapters, interface modules, transceivers, access points, voice over internet protocol (VoIP) products and associated ancillary goods and services including software, cabling and installation.

Lots which we are on:

• Lot 7 Palo Alto Networks “Top Ranked Supplier”: Next-Generation Firewalls (hardware, virtual appliances), Cloud Security: Private and Public, Advanced Endpoint Security, and Secure Remote Access.
• Lot 8 Proofpoint: Advanced Email Security – Inbound, Outbound and Cloud
• Lot 8 Alcatel-Lucent: Wired and Wi-Fi Networking
• Lot 8 Infoblox: Next-Generation Security, Reliability and Automation of DNS, DHCP and IPAM (DDI)
• Lot 8: Efficient IP

Who can purchase through this?

It is open to higher education institutions, further education and specialist colleges and research council establishments in the UK. It can also be used by any other organisations connected to the Janet Network, including local authorities, regional broadband consortia, or other bodies whose core purpose is the support or advancement of further or higher education or of research.

Jisc Vulnerability Assessment Service and Tools Supply Framework

What is it?

With a choice of lots and suppliers, the framework allows you to engage a service provider to do the work for you and deliver a report and guidance. Alternatively, you can buy the tooling you need to run your own scans.

This framework is broken down into eight lots to offer the sector full access to the valuable tools and assessment service.

• Lot 1 – Vulnerability assessment service: provides automated, security vulnerability assessments of your IT assets, including reporting and guidance on remediation actions
• Lot 2–8 – Access to market-leading vulnerability assessment tools: Provides an easy path to procure tools for you to conduct your own vulnerability scans

Lots which we are on:

• Lot 1: Vulnerability Assessment Service – A managed service providing the requested vulnerability scan, results and associated report.
• Lot 8: Greenbone – The supply and support of other vulnerability assessment and scanning solutions

Who can purchase through this?

Access to the framework is freely available to members of Jisc and/or those providing or supporting education, research or culture, such as:

• All higher and further education institutions
• All laboratories and other establishments of the Research Councils
• The funding bodies for research, higher and further education across the UK
• Local government authorities that provide broadband ICT services to schools, or commission these services from third parties
• Regional Broadband Consortia (RBCs) and any other vehicles created by local government authorities in England to aggregate the provision of broadband ICT services to schools
• The equivalent bodies in Scotland, Wales and Northern Ireland providing broadband ICT services to schools
• Individual schools, whether under local government control or with other governance
• Individual or groups of libraries or museums, whether under local government control or with other governance
• Other bodies whose core purpose is the support or advancement of education or research

NHS SBS Digital Workplace Solutions Framework

What is it?

This framework enables public sector organisations* to purchase market leading solutions and services without the need for a procurement exercise (i.e. tender, mini-competition etc). The framework body undertook a formal tender process for each of the available technology and service categories so that only reputable suppliers and manufacturers can be used on these frameworks.

KHIPU are on the following technology and service categories:

• Palo Alto Networks – Cyber security solutions to secure the network, endpoint and cloud
• HPE Aruba Networks – Network, Wi-Fi, RADIUS, NAC and Cloud Management (ESP)
• HPE Hybrid IT – Cloud computing, storage and virtual environments: Servers, storage and laptops
• Infoblox – Resilient, central and secure DNS, DHCP and IPAM (DDI)
• Fortinet FortiNAC – Network visibility and access control, cyber security solutions
• Greenbone – Vulnerability information assessment and management
• Ordr – Manage network connected systems
• Proofpoint – inbound/outbound email security, outbound data loss prevention, cloud security
• Alcatel-Lucent – Solutions to deliver mission critical clinical applications on any device securely
• Exabeam – Next generation Security Information and Event Management (SIE
• Rubrik – Cloud Data Management and Enterprise Backup Software
• Simulated phishing and cyber security awareness training – reduce the risk of being breached by a phishing attack
• KARMA™ – 24x7x365 proactive monitoring and alerting of networks and systems
• Konnect™ – Managed RADIUS services for Wi-Fi uptime and authentication
• DeDrone – Drone Detection and alerting solution
• Picus – Next-Generation Penetration “Security Control Validation” Solutions and Services
• Netscout Systems (UK) Limited – DDOS Cyber Security Solutions and Services

Who can purchase through this?

Any of the following Approved Organisations, and any of their successors can buy directly from KHIPU without a tender or procurement process.

1. NHS bodies;
2. Ambulance services;
3. Councils, including county councils, district councils, county borough councils, community councils, London borough councils, unitary councils, metropolitan councils, parish councils;
4. Educational bodies or establishments including state schools (nursery schools, primary schools, middle or high schools, secondary schools, special schools), academies, colleges, Pupil Referral Unit (PRU), further education colleges and universities;
5. Police forces;
6. Fire and rescue services;
7. Ministerial government departments;
8. Non ministerial government departments;
9. Executive agencies of government;
10. Non-Departmental Public Bodies (NDPBs), including advisory NDPBs, executive NDPBs, and tribunal NDPBs;
11. Assembly Sponsored Public Bodies (ASPBs);
12. Maritime and coastguard agency services;
13. Hospices;
14. National Parks;
15. Housing associations, including registered social landlords;
16. Third sector and charities;
17. Citizens advice bodies;
18. Public corporations;
19. Public financial bodies or institutions;
20. Public pension funds;
21. Central banks; and
22. Civil service bodies, including public sector buying organisations
23. Channel Islands Public Sector bodies
24. Isle of Man Government Health and Public Services

HEAnet Simulated Phishing

What is it?

The framework is with KHIPU for simulated phishing and associated awareness training framework is a key service that addresses the first and last layer of defense in any organisation – the users.

What is Available Through This?

The framework includes the following services:

• Simulated Phishing Services: Customer-tailored phishing scenarios to identify the ‘risk factor’ and how vulnerable the organisation is to phishing attacks.
• Infrastructure: Are email accounts and systems, as well as the perimeter security (e.g. spam and web filtering, firewalls etc) configured correctly or capable of protecting against a phishing attack?
• Users: How many open phishing emails, click on URL links and share information via phishing websites? How many download attachments from unknown senders?
• Processes: How do users / IT helpdesk departments etc react to phishing emails?
• Devices: What operating systems, web browsers and plug-ins are being used – are they authorised or vulnerable?

Associated User Awareness and Training Services to raise awareness of cyber-attacks delivered via phishing emails, spam, social engineering attempts etc, to help prevent both the individual and organisation from being successfully attacked.

• Awareness training customer portals: What is phishing, facts, statistics, how to identify, what to do, quizzes, training videos and interactive material
  Classroom training – Cyber security awareness: That covers all key areas on cyber security and phishing including
• Cybersecurity 101, phishing: what is it, the facts and threats to your personal and work life, detection and avoidance, supported by cybersecurity awareness quizzes. The agenda has been designed for staff, both with and without extensive knowledge of IT.

Risk Assessment and Phishing Prevention Report created after each activity, highlighting the risk, all findings including comparisons from previous simulated phishing and training exercises (to measure the success), with recommendations for training, infrastructure configurations and solutions for on-going protection and prevention.

Who can purchase through this?

This is a single supplier Jisc framework available to HEAnet, its member institutions and consumers of its services.