SPECIALIST NETWORK OPERATIONS LIMITED

Managed Security Operations Center (SecOps)

SNO’s Managed SecOps service provides 24x7 security monitoring, threat detection, investigation and response across network, endpoint, identity, cloud and application layers. Combining automation, intelligence-driven analytics and expert analyst oversight, it delivers centralized visibility, rapid incident containment and improved security posture without the need for an in-house SOC.

Features

• 24x7 security monitoring across network, endpoint, identity, cloud, applications.
• Real-time threat detection using intelligence-driven analytics and automated correlation.
• Automated response actions based on predefined and custom playbooks.
• Analyst-validated alerts to reduce false positives and prioritize incidents.
• Centralized incident management with full logging and audit trail.
• Integration with existing security tools, SIEMs, and cloud platforms.
• Post-incident root cause analysis for high-impact events.
• Continuous tuning of detection logic based on emerging threats.
• Secure configuration and change management for all monitored controls.
• SLA-driven performance monitoring with reporting and executive summaries.

Benefits

• Quickly detect and respond to threats across complex environments.
• Reduce business disruption through rapid containment and remediation actions.
• Improve security posture with expert guidance and operational oversight.
• Maintain compliance with auditable processes and governance frameworks.
• Gain centralized visibility across endpoints, networks, and cloud platforms.
• Prioritize high-risk incidents and minimize false positive workload.
• Ensure continuous operations with resilient monitoring and automated responses.
• Leverage threat intelligence to stay ahead of emerging attacks.
• Enhance operational efficiency without maintaining an in-house SOC.
• Access detailed reporting for informed decision-making and risk reduction.

• Education pricing available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@sno.cloud. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

392361703047099

Contact

Russell Bristow
07970319563
sales@sno.cloud

About your service

• Service categories:

  Systems Infrastructure Software

  Security

  • Security analytics
• Multi cloud support: Yes

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: SNO’s Managed SecOps service integrates with existing network, endpoint, identity, cloud and security platforms to enhance visibility, detection and response. While it extends the capabilities of these systems, it can also operate independently, providing full 24x7 monitoring, incident management, automated response and expert analyst oversight without relying on other services.
• Cloud deployment model: Hybrid cloud
• Service constraints: SNO’s Managed SecOps service requires connectivity to monitored environments and compatible security controls for full functionality. Some integrations may require additional configuration or licensing from the customer’s existing platforms. Planned maintenance is communicated in advance to minimize disruption. While the service supports multi-cloud, hybrid and distributed environments, extremely bespoke or unsupported systems may need separate scoping. Access to security telemetry, logs and administrative permissions is required for effective monitoring, detection and automated response. Core 24x7 service availability remains unaffected during maintenance windows, with any service-impacting changes coordinated with the customer.
• System requirements:
  • Access to network, endpoint, identity, cloud telemetry and logs.
  • Access to network, endpoint, identity, cloud telemetry and logs.
  • Administrative or read-only access to monitored systems and platforms.
  • Required software agents installed on endpoints and servers.
  • Integration with SIEM, logging, or ticketing platforms where available.
  • Internet or secure network connectivity for cloud-based analytics.
  • Supported operating systems on endpoints and servers for monitoring.
  • Appropriate licensing for existing security and cloud platforms.
  • Configuration permissions to allow automated containment and response actions.
  • User accounts for Service Desk access and incident communications.

User support

• Email or online ticketing support: Yes
• Support response times: We respond to support questions within 1 business hour during standard business hours, Monday to Friday. Outside of business hours and at weekends, responses are typically provided within 4 hours for standard requests. Critical or high-severity issues are monitored 24/7 and receive an initial response within 30 minutes, including weekends and public holidays.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 AA
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: We provide tiered support levels designed to meet different operational and business requirements.; ; Standard Support is included in the service price and provides 24x7x365 monitoring, incident detection, alerting and response via email and ticketing. It includes access to our Security Operations Centre (SOC) and defined SLAs for incident acknowledgement and resolution.; ; Enhanced Support is available at an additional cost and includes faster response SLAs, 24x7 phone support, priority incident handling and expanded reporting. Customers are assigned a named Technical Account Manager (TAM) who acts as the primary point of contact for service reviews, operational guidance and escalation management.; ; Premium Support is offered at an additional cost and provides dedicated engineering engagement, proactive threat hunting, custom playbooks, regular security posture reviews and optional onsite support. Premium customers receive direct access to a named Cloud Support Engineer and senior security specialists.; ; Pricing for enhanced and premium support tiers is based on service scope, environment size and SLA requirements and is agreed contractually.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: SNO’s Managed SecOps service provides a structured onboarding process to ensure customers can quickly and effectively start using the service. Onboarding begins with a service kickoff where the Service Delivery Manager (SDM) reviews the customer environment, requirements and objectives. Customers are guided through integration of security telemetry, cloud platforms, endpoints and identity systems, ensuring proper configuration for monitoring and alerts.; ; We provide comprehensive user documentation covering portal access, dashboards, incident management, alert interpretation and reporting. Online training sessions are offered for security teams and administrators, demonstrating key workflows such as incident review, response procedures and API integration. For customers requiring additional support, onsite training can be arranged to walk teams through the portal, alerts and operational processes.; ; Additionally, SNO provides guided testing and validation during onboarding to confirm proper alerting, incident logging and automated response actions. Customers are introduced to reporting features, SLA metrics and escalation processes, ensuring clarity on operational expectations. Throughout onboarding, the SDM acts as the primary contact, answering questions, coordinating setup and providing best-practice guidance.; ; This combination of documentation, training and hands-on support ensures customers are fully prepared to leverage the service immediately, minimizing risk and accelerating operational readiness.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: At the end of a contract, SNO ensures customers can securely extract all relevant data from the Managed SecOps service. This includes incident records, alerts, dashboards, reports, security telemetry and configuration data collected during the service period. Data extraction is coordinated through the Service Delivery Manager, who works with the customer to define the scope, format and delivery method of the data.; ; Data can be exported in common, interoperable formats such as CSV, PDF, or JSON for reporting, auditing or migration purposes. For API-accessible data, customers can use the service API to retrieve historical incidents, performance metrics and operational logs.; ; SNO provides guidance and support throughout the extraction process, ensuring that data integrity and completeness are maintained. Once data extraction is complete, any remaining customer data within SNO systems is securely deleted in accordance with data retention policies, compliance requirements and best-practice security standards.; ; This approach ensures a smooth transition at contract end, allows continued operational analysis or compliance auditing and maintains the confidentiality and security of customer data throughout the process.
• End-of-contract process: At the end of the contract, SNO coordinates a structured contract closeout with the customer. This includes finalizing all active incidents, delivering outstanding reports and providing end-of-service data extraction of alerts, incidents, configurations and telemetry in agreed formats. Customers retain full ownership of extracted data for compliance, auditing or operational continuity.; ; The contract price includes: continuous 24x7 monitoring, threat detection, incident management, automated and analyst-led response, access to the service portal, reporting, SLA management and standard end-of-contract data extraction. It also covers handover support, guidance for system decommissioning and any agreed knowledge transfer sessions.; ; Additional costs may apply for optional services, including: extended onsite training at contract end, custom data migration or integration beyond standard formats, extended access to historical logs beyond retention policies or tailored post-contract consultancy and support.; ; SNO ensures a smooth transition, maintaining service integrity, operational continuity and data security throughout the end-of-contract process. Customers receive clarity on deliverables, obligations and optional services, providing a seamless conclusion or renewal pathway.
• Documentation accessibility standard: WCAG 2.2 AA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: SNO’s Managed SecOps service portal is fully accessible on mobile devices via modern browsers, providing users with secure access to incident dashboards, alerts and reports. While the core functionality remains the same as desktop, the interface is optimized for smaller screens, enabling quick incident review, status updates and notifications on the move. Advanced configuration, bulk data analysis and detailed reporting are best performed on desktop devices, but critical monitoring, alert validation and real-time response oversight can be managed effectively from smartphones or tablets, ensuring security operations continuity anytime, anywhere.
• Service interface: Yes
• User support accessibility: WCAG 2.2 AA
• Description of service interface: SNO’s Managed SecOps service provides a secure, web-based portal for customers to view security alerts, incident dashboards, reporting and operational metrics. The interface allows users to log incidents, track remediation actions, access automated reports and communicate with the service desk. It is designed to be intuitive, role-based and responsive, ensuring that security teams, managers and executives can efficiently access critical information across desktop and mobile devices. Navigation, search and filtering functionality enable rapid access to actionable insights while maintaining full audit and traceability capabilities.
• Accessibility standards: WCAG 2.2 AA
• Accessibility testing: The service interface has undergone testing with screen readers and keyboard-only navigation to ensure accessibility for users with visual impairments or mobility limitations. Key interface elements, including dashboards, alerts and report views, were validated for compatibility with common assistive technologies. Interactive components such as incident logging forms, filters and navigation menus were tested to ensure proper focus, logical tab order and descriptive labels. Feedback from accessibility testing informed adjustments to contrast, color coding and semantic HTML usage, improving usability for all users. Ongoing testing is performed during updates to maintain accessibility compliance and accommodate evolving assistive technology standards.
• API: Yes
• What users can and can't do using the API: SNO’s Managed SecOps service provides a RESTful API that allows customers to integrate the service with existing security, logging, and ticketing platforms. Through the API, users can retrieve security alerts, incidents and reports, create and update incident records, and access operational metrics. Customers can configure notification settings and integration points, but changes to core detection rules, automated response playbooks, or system-level configurations are restricted to ensure service integrity and compliance. Users can automate workflows, query historical incident data and extract insights for internal reporting.
• API documentation: Yes
• API documentation formats: Open API (also known as Swagger)
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: SNO’s Managed SecOps service allows customers to customise the service to align with their specific security policies, risk profiles and operational requirements. ; Buyers can customise:; 1.) Detection use cases: Customers can request new or modified security detection rules based on their environment or emerging threats.; 2.) Response playbooks: Incident response workflows can be adapted to match organisational processes and escalation procedures.; 3.) Alerting and reporting: Users can configure notifications, reporting frequency, dashboard views and metrics to focus on relevant security events.; 4.) Integration points: APIs and connectors can be customised to work with customer-specific SIEMs, ticketing systems and cloud platforms.; ; Customisation is typically requested through the Service Delivery Manager or Technical Account Manager, who coordinate changes with SNO security analysts and engineers. Some customisations, such as modifying detection rules or response automation are implemented by SNO staff to maintain operational integrity, compliance and auditability.; ; This approach ensures the service remains robust, consistent and secure, while allowing customers to tailor monitoring, alerting and reporting to their unique business requirements and security objectives.

Scaling

• Independence of resources: SNO’s Managed SecOps service ensures resource independence through a combination of dedicated processing, scalable cloud infrastructure and multi-tenant isolation controls. Security analytics, monitoring and incident workflows are segregated per customer to prevent cross-impact. Alerting, dashboards and automated responses operate within isolated environments, so high demand or activity from other customers does not affect performance. Capacity is continuously monitored and scaled to maintain consistent detection, response and reporting performance. Service-level agreements guarantee that each customer receives the agreed availability, response times and operational reliability, regardless of the activity or load from other users of the service.

Analytics

• Service usage metrics: Yes
• Metrics types: SNO’s Managed SecOps service provides metrics on incident detection and resolution times, analyst response times, alert volumes, containment actions, SLA adherence and operational performance trends. These metrics help customers monitor service effectiveness, identify recurring issues and support compliance and reporting requirements.
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: Yes
• FOCUS resource tagging: Yes

Resellers

• Supplier type: Reseller providing extra support
• Organisation whose services are being resold: Fortinet's Managed SecOps service

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: ‘IT Health Check’ performed by a CREST-approved service provider
• Protecting data at rest: Encryption of all physical media
• Data sanitisation process: Yes
• Equipment disposal approach: A third-party destruction service
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase

Data importing and exporting

• Data export approach: Users can export their data through the SNO service portal or API, depending on their preference and data type. This includes incident records, alerts, dashboards, reports and security telemetry. Exports are available in standard formats such as CSV, PDF or JSON. The Service Delivery Manager supports customers during extraction to ensure completeness and accuracy. Data can also be extracted in bulk via API for integration with internal systems. All exported data maintains security, integrity and auditability and any remaining data in SNO systems is securely deleted following agreed retention and compliance policies.
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Other
• Other protection within supplier network: Within SNO’s Managed SecOps environment, data is protected through role-based access control (RBAC), segregation of duties and least-privilege principles, ensuring only authorised personnel can access sensitive information. Security telemetry, logs and alerts are stored in encrypted repositories with strict versioning and audit trails. Network segmentation isolates monitoring, analytics and operational components to prevent lateral movement. Regular vulnerability assessments, configuration validation and continuous monitoring ensure system integrity. All administrative actions, configuration changes and automated responses are logged and reviewed, maintaining full traceability, compliance readiness and protection against accidental or malicious internal access.

Availability and resilience

• Guaranteed availability: SNO’s Managed SecOps service is designed for 24x7x365 availability, ensuring continuous monitoring, detection and response across customer environments. Core components, including security analytics, alerting and incident management, are hosted on redundant, resilient infrastructure with failover and disaster recovery capabilities to maintain service continuity even during unexpected events.; ; The service includes formal SLAs covering availability and operational responsiveness. While exact uptime targets are agreed per customer contract, SNO maintains high operational reliability through proactive monitoring, capacity planning and maintenance scheduling outside peak operational hours.; ; If SNO fails to meet agreed availability levels, customers are entitled to service credits or refunds as defined in the SLA. Service credits are calculated based on the duration and impact of downtime relative to agreed service targets.; ; This approach ensures that customers can rely on the service for mission-critical security operations, with clear accountability and remedies if availability objectives are not met. Continuous improvement and regular SLA reporting provide transparency and confidence that the service remains robust, resilient and aligned with operational expectations.
• Approach to resilience: SNO’s Managed SecOps service is designed for high resilience and continuous operation. Key components, including monitoring, analytics, incident management and automated response systems, are hosted on redundant, geographically distributed infrastructure with failover capabilities. Critical systems are replicated across multiple secure data centers to ensure continuity in the event of hardware failure, network outage or site-level disruption.; ; The service employs load balancing, continuous health checks and automated failover to maintain availability and performance. Backups of security telemetry, alerts and configuration data are regularly performed and securely stored, supporting rapid recovery in line with business continuity and disaster recovery (BCDR) principles.; ; Data centers hosting the service comply with recognised security and resilience standards, including physical security, environmental controls and strict access management. Operational procedures are tested regularly to validate resilience and recovery processes.; ; For detailed architectural diagrams and specific resiliency measures, this information is available on request to ensure security and confidentiality.; ; This design ensures that customers’ security operations remain robust, reliable and always-on, minimizing downtime, protecting critical data and supporting uninterrupted threat detection and response.
• Outage reporting: SNO’s Managed SecOps service provides clear and timely outage reporting to ensure customers remain informed about any service disruptions. All incidents affecting availability are logged and tracked through the service management platform, providing transparency and traceability.; ; Customers receive email alerts for any service-impacting events, including the nature of the outage, affected components and estimated resolution times. Updates are provided at intervals aligned with the severity and operational impact of the outage.; ; A secure customer portal provides real-time visibility into ongoing incidents, including monitoring dashboards, status updates and historical outage records. Where applicable, the service also supports API access for automated integration with customer operational or reporting systems, enabling programmatic notifications and monitoring of service health.; ; Post-incident, SNO conducts a root cause analysis (RCA) and shares findings with the customer, along with any mitigation or preventative actions. Monthly and quarterly reports include summaries of outages, response times and SLA adherence to support operational review and compliance reporting.; ; This approach ensures that customers are fully informed, able to manage operational impact and supported with detailed post-incident analysis, maintaining confidence in the resilience and reliability of the Managed SecOps service.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: Access to SNO’s Managed SecOps management interfaces and support channels is strictly controlled using role-based access control (RBAC) and least-privilege principles. Administrative, operational and support roles are segregated, ensuring only authorized personnel can perform sensitive actions. Support interactions, including incident escalation and configuration changes, require authenticated, logged and approved access. All actions are audited and traceable through the service management platform. Multi-factor authentication and identity federation further protect access, preventing unauthorized use and ensuring that users can only access the systems, data and functions appropriate to their role.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users receive audit information on a regular basis
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards:
  • CSA CSM version 4.0
  • ISO/IEC 27001
• Information security policies and processes: SNO follows a comprehensive set of information security policies and processes aligned with ISO/IEC 27001 and CSA CCM v4.0 standards. Policies cover access management, device posture enforcement, network and application security, incident response, change management, configuration management, data protection and user onboarding/offboarding.; ; The organisation maintains a structured reporting hierarchy: the Security Officer oversees adherence to policies, while Service Delivery Managers, Technical Account Managers and NOC Team Leads ensure operational compliance. All staff are trained on security policies and responsibilities are clearly defined, with escalation paths for incidents or policy breaches.; ; Compliance is enforced through automated monitoring, periodic audits and regular reviews. Policy adherence is tracked via the Service Management platform, which logs changes, incidents and access events. Deviations or security events trigger investigation, remediation and lessons-learned reviews, ensuring continuous improvement.; ; Formal change management and configuration management processes ensure all modifications to access policies, enforcement rules or system configurations are documented, assessed for risk and approved before implementation.; ; This structured approach ensures policies are consistently applied, security risks are mitigated and access remains secure and auditable, supporting both operational resilience and compliance with government and industry standards.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: SNO tracks all service components, including detection rules, response playbooks and monitored assets, through their full lifecycle using a centralized configuration management system. Changes are formally logged, versioned and approved before implementation. Each change undergoes risk and security impact assessment, including potential effects on monitoring, alerting and incident response. Emergency changes are expedited under controlled procedures, with post-implementation validation to ensure stability. Ongoing audits and reviews maintain configuration integrity, compliance and traceability, ensuring that all modifications enhance service effectiveness without introducing vulnerabilities or operational disruption.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: SNO continuously monitors potential threats to the Managed SecOps service using threat intelligence feeds, industry advisories and security research sources. All vulnerabilities are assessed for severity, relevance and potential impact on service components. Patches and updates are deployed rapidly based on risk prioritization, with critical fixes applied immediately through controlled change management. Non-critical updates follow scheduled maintenance windows. Detection rules, response playbooks and configurations are continuously reviewed and tuned to address emerging threats. Regular vulnerability scans, penetration tests and internal reviews ensure that services remain secure, resilient and compliant with operational security standards.
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: SNO’s Managed SecOps service continuously monitors network, endpoint, identity, cloud and application telemetry to detect anomalies and potential compromises. Events are correlated and validated by analysts to identify genuine threats. When a potential compromise is detected, the service triggers automated containment actions and alerts analysts for investigation. High-severity incidents receive immediate response, typically within 30 minutes, following predefined playbooks. Analysts perform root cause analysis, containment and guided remediation, while maintaining forensic integrity. Ongoing monitoring and post-incident reviews ensure detection logic and response procedures are tuned to reduce dwell time and strengthen security posture.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: SNO’s Managed SecOps service follows predefined incident management processes aligned with common event types and severity levels. Users report incidents through the secure service portal, email or API, ensuring clear logging and traceability. Each incident is assigned to a dedicated Service Delivery Manager or analyst, who oversees investigation, containment and remediation. Customers receive regular situation updates during the incident lifecycle, with post-incident reports summarizing root cause, affected assets, mitigation actions and recommendations. All reports are accessible via the portal, ensuring transparency, audit readiness and continuous improvement of detection and response processes.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: Yes
• Connected networks:
  • Public Services Network (PSN)
  • Joint Academic Network (JANET)
  • Health and Social Care Network (HSCN)

Pricing

• Discount for educational organisations: Yes
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 5%
• Between £500,001 and £1,000,000: 7.5%
• Between £1,000,001 and £2,500,000: 10%
• Between £2,500,001 and £5,000,000: 15%
• Over £5,000,001: 20%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: 3Core2
• ISO/IEC 27001 accreditation date: Thursday 18 July 2024
• What the ISO/IEC 27001 doesn’t cover: Cover SNO Network Operations Centre in the UK only. Does not cover other parts of the business such as Finance, PMO, US NOC, Sales, Business Operations
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: 3Core2
• ISO 9001 accreditation date: Wednesday 18 September 2024
• What the ISO 9001 doesn’t cover: Cover SNO Network Operations Centre in the UK only. Does not cover other parts of the business such as Finance, PMO, US NOC, Sales, Business Operations
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 3acf591d-7c54-4ff6-976e-3754609672c6
• Cyber essentials plus: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials Plus certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials Plus certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Other security certifications: Yes
• Any other security certifications:
  • ISO 14001:2015
  • ISO 20000:2015

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • New apprenticeships on the contract workforce in the relevant area that meet the criteria set out in MAC 1b
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Plans to engage the contract workforce in deciding the most important workplace issues to address
    • Ensuring new workers are informed of their right to join a trade union
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Activities to cascade good practice on fair working conditions throughout the supply chain
    • Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
    • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
    • Plans for an appropriate income replacement policy for staff who are required to spend time away from work to care for a sick dependent or close relative
    • Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Volunteering opportunities for staff
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
    • Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
    • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling
    • How these flow down the supply chain and are monitored Illustrative examples include reporting, site visits, audits, etc.
    • How to ensure business decisions re: price/cost, short lead times, payment timescales do not create modern slavery risks in the supply chain
    • How the supplier will work with NGOs, trade unions or other businesses to address modern slavery risk
    • Means of influencing staff, suppliers, customers, communities and/or any other appropriate stakeholders with respect to modern slavery risks relating to the contract

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering
    • Delivery of apprenticeships, supported internships and T Level industry placement opportunities (Level 2, 3 and 4+) in relation to the contract

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Activities to identify opportunities to open up sub-contracts under the prime contract to a diverse range of businesses, including new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Plans for engaging a diverse range of businesses in engagement activities prior to appointing subcontractors (including activities prior to award of the main contract and during the contract term)
    • Activities that demonstrate a collaborative way to work with a diverse range of businesses as part of the supply chain
    • Advertising of supply chain opportunities openly and to ensure they are accessible to a diverse range of businesses, including advertising all subcontracting opportunities on Contracts Finder
    • Ensuring accessibility to contracting and subcontracting opportunities for disabled business owners and employees
    • Structuring of the supply chain selection process to ensure fairness (e.g. anti-corruption) and encourages participation by a diverse range of businesses, including with regard to new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutual
    • Understanding of local demographics, needs and opportunities for the co-design of the goods, services and works to be delivered under the contract
    • Methods for engaging with different parts of the community (including the education system and charities representing the community) and how communities come together to inform decisions, strategy and projects to leave a positive legacy for future generations
    • Measures to involve local stakeholders and/or users in design (e.g. in the design of services, systems, products or buildings)
    • Plans for positive actions with community groups.
    • Measures for making facilities used in the delivery of the contract available for community groups, education or training
    • Measures to engage users and communities and build relationships to increase community integration build trust and influence how the contract is delivered
    • Plans to respond flexibly and adapt approaches to community engagement and initiatives
    • Support for community-led initiatives relevant to the contract. Illustrative examples: improving transport links; reducing loneliness; helping with English language proficiency; and facilitating social mixing among people with different backgrounds
    • Collaborating with anchor institutions and community groups to make facilities available for education, training or community events

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
    • Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
    • Creation of employment opportunities particularly for those who face barriers to employment, such as prison leavers, care leavers and/or who are located in deprived areas, and for people in industries with known skills shortages or in high growth sectors
    • Delivery of training schemes and programmes to address any identified skills gaps and under-representation in the workforce for the contract (e.g. prison leavers, care leavers, kinship carers, disabled people)
    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort
    • Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Collection of the views and expertise of disabled people and their representative organisations on successfully supporting disabled employees or applicants
    • Inclusive and accessible recruitment practices, and retention-focused activities, including those provided in the Guide for line managers on recruiting, managing and developing people with a disability or health condition
    • Introducing transparency to pay and reward processes
    • Offering a range of quality opportunities with routes of progression if appropriate, e.g. T Level industry placements, students supported into higher level apprenticeships.
    • Working conditions which promote an inclusive working environment and promote retention and progression
    • Other measures to provide equality of opportunity for disabled people and those with health conditions into employment, including becoming a Disability Confident employer and inclusion of supported businesses in the contract supply chain
    • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce
    • Inclusive and accessible development practices, including guidance for line managers on recruiting, managing and developing people with a disability or health condition

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

    • Understanding of the issues affecting the development of new skills by target cohort
    • Understanding of the underlying factors affecting improvements to reduce barriers to entry and training schemes for the target cohort(s) related to the contract workforce
    • Other measures to offer development opportunities for the target cohort(s) in the contract workforce
    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort
    • Understanding of issues relating to entering the contract workforce
    • Creation of outreach activities to create a pipeline of employees for the future contract delivery
    • Content of the outreach activity is designed to suit the target cohort
    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
    • Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion
    • Inclusive and accessible recruitment practices, development practices and retention policies that support-focused activities including those provided in the Guide for line managers on recruiting, managing and developing which support people with a disability or health condition
    • Actions to invest in the physical and mental health and wellbeing of the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@sno.cloud. Tell them what format you need. It will help if you say what assistive technology you use.