Fordway Cloud Security Management
Fordway Cloud Security Management assists customers defining in their security requirements and in designing and building security into the provisioning of public, private or hybrid cloud services. Assured by CESG certified architects. Strategic approach to risk management across internal and multi-supplier environments, to assure organisational security and compliance requirements.
Features
- Security Governance Audits aligned to ISO27001 and Gap analysis
- Security compliance assessment for PSN, N3, PCIDSS, regulated industries
- Business Impact Analysis (BIA) and Technical Risk Assessments
- Infrastructure architecture design check against standard industry references
- Penetration testing, vulnerability prevention and reduction measures
- IT Service Continuity (Disaster Recovery) policies, process and procedures
- Security Incident Management measures and IT Health Checks
- Security Information, event Management, event consolidation and presentation
- Security process and operation, Security Policies and governance
- Security Compliance (CESG certified) and Security Strategy development
Benefits
- Ensures compliant and secure cloud services for your organisational needs
- Proactive implementation, policy/risk-based threat response
- Public Cloud suppliers: Microsoft Azure, Amazon Web Services and others
- Comprehensive assessment of security posture, risks and threats
- Collaboration with IT staff to deliver optimal solution
- Provision of ongoing services to administer, support, operate and improve
- Ongoing commitment to achieve continual service improvements
- Assists in gaining key UK security certifications
- Expertise in delivering secure cloud services to existing G-Cloud customers
- Certified to ISO27001 and complies with ISO20000
Pricing
£30 to £150 an instance a month
Service documents
Request an accessible format
Framework
G-Cloud 14
Service ID
1 4 8 8 2 8 0 6 5 5 2 5 3 9 6
Contact
FORDWAY SOLUTIONS LIMITED
Richard Blanford
Telephone: 01483 528200
Email: tenders@fordway.com
Planning
- Planning service
- Yes
- How the planning service works
- Fordway have standard engagement documentation and migration templates which will be utilised within their project planning.
- Planning service works with specific services
- Yes
- Hosting or software services the planning service works with
-
- IaaS/PaaS
- VDI/DaaS
- Microsoft 365 Suite (F1, E3, E5)
- Microsoft Azure
- Fordway IT as a Service
- Fordway Connectivity and Access Service
- Amazon Web Services
- Google Cloud Platform
Training
- Training service provided
- Yes
- How the training service works
- The training service is tailored to the buyer and dependent on the service provided
- Training is tied to specific services
- Yes
- Services the training service works with
-
- IaaS/PaaS
- VDI/DaaS
- Fordway IT as a Service
- Fordway Application and Service Availability Monitoring
- Microsoft 365, Office 365, Dynamics 365
- Microsoft Azure
- Amazon Web Services
- Fordway Security Management as a Service
- Fordway Cloud Connectivity Service
Setup and migration
- Setup or migration service available
- Yes
- How the setup or migration service works
- Fordway have standard documents and templates to support customers on their security requirements in the cloud with independent advice and recommendations.
- Setup or migration service is for specific cloud services
- Yes
- List of supported services
-
- IaaS/PaaS
- VDI/DaaS
- Microsoft 365, Office 365, Dynamics 365
- Microsoft Azure
- Amazon Web Services
- Fordway IT as a Service
- Fordway Cloud Connectivity and Access
- Fordway Application and Service Availability Monitoring
- Fordway PSN Gateway Service
Quality assurance and performance testing
- Quality assurance and performance testing service
- Yes
- How the quality assurance and performance testing works
- Fordway have standard quality assurance and performance testing documentation and templates which will be tailored in line with the service design.
Security testing
- Security services
- Yes
- Security services type
-
- Security strategy
- Security risk management
- Security design
- Cyber security consultancy
- Security testing
- Security incident management
- Security audit services
- Other
- Other security services
-
- 24 x 7 Security Monitoring and Event Analysis
- PSNA approved security hosting and design
- List N (Nuclear) Certified organisation and facilities
- Security incident response, containment and remediation
- Virtual CISO service
- Continual Security Service Improvement
- Microsoft 365 Security and Compliance
- Microsoft Azure Security and Compliance
- AWS Security Centre management
- Certified security testers
- Yes
- Security testing certifications
-
- CHECK
- CREST
- Tigerscheme
- Cyber Scheme
Ongoing support
- Ongoing support service
- Yes
- Types of service supported
-
- Buyer hosting or software
- Hosting or software provided by your organisation
- Hosting or software provided by a third-party organisation
- How the support service works
-
Fordway have a wide rage of hosting, software and support services which include:
IaaS, PaaS, DaaS,
Fordway Cloud Identity Management,
Fordway Architecture Management,
Fordway Service Integration and Management (SIAM),
Fordway Service Management,
Fordway Cloud Security Service,
Fordway Azure IaaS Operations and Management,
Fordway Azure SQL DB Management,
Fordway Azure Virtual Desktop Management,
Fordway Backup and Service Continuity,
Fordway Managed Print Service
Fordway MS365 Enterprise Desktop Management,
Fordway Patch Management as a Service
Service scope
- Service constraints
- None
User support
- Email or online ticketing support
- Email or online ticketing
- Support response times
-
Priority 1 incident 24 x 7, 15 minute response.
Priority 2 incident 24 x 7, 1 hour response Priority 3 incident 12 x 5, 4 hour response. - User can manage status and priority of support tickets
- Yes
- Online ticketing support accessibility
- None or don’t know
- Phone support
- Yes
- Phone support availability
- 24 hours, 7 days a week
- Web chat support
- Web chat
- Web chat support availability
- 24 hours, 7 days a week
- Web chat support accessibility standard
- WCAG 2.1 A
- Web chat accessibility testing
- Supports all assistive technologies included with or supported by MS Teams
- Support levels
-
Defined according to SLA required.
P1 - major service impact
P2 - significant service impact
P3 - individual users impacted
P4 - no user impact/information
Technical Account management available, service cost dependent on scope of requirements
Resellers
- Supplier type
- Not a reseller
Staff security
- Staff security clearance
- Conforms to BS7858:2019
- Government security clearance
- Up to Security Clearance (SC)
Standards and certifications
- ISO/IEC 27001 certification
- Yes
- Who accredited the ISO/IEC 27001
- ISOQAR
- ISO/IEC 27001 accreditation date
- 14/03/2022 (recertification) original certification March 2008
- What the ISO/IEC 27001 doesn’t cover
- ISO27001/27017/27018 Scope of certification available on request
- ISO 28000:2007 certification
- No
- CSA STAR certification
- No
- PCI certification
- No
- Cyber essentials
- Yes
- Cyber essentials plus
- Yes
- Other security certifications
- Yes
- Any other security certifications
-
- List N (Nuclear Industry)
- PSN Code of Connection and Compliance
- PAS555
- NHS IGSoC
- ISO27017
- ISO27018
- GCloud Assured
Social Value
- Social Value
-
Social Value
Fighting climate changeFighting climate change
Using Cloud offers considerable efficiency and consumption savings compared to running in house, on premises and hosted environments
Pricing
- Price
- £30 to £150 an instance a month
- Discount for educational organisations
- No