Cloud Security Services
As a premier technology provider renowned for excellence in Cloud, Cybersecurity, and Software delivery, we deliver a suite of tailored cloud capabilities. Our services empower clients with robust, secure, and scalable cloud solutions, aligned with their business goals to foster growth and drive innovation.
Features
- Provision cloud environments with security enabled across full vertical stack.
- Secure software development lifecycle with cloud security services.
- Access to trusted partner network for industry standard penetration testing.
- Well-architected reference architectures with security built in from ground up.
- Zero Trust Architecture solutions based on industry security frameworks.
- Authentication, authorisation, administration, security auditing and reporting solutions
- SSO, MFA, Identity Governance and Administration solutions.
Benefits
- Alignment with industry security frameworks (e.g. NIST).
- Alignment with ISO27001 international information security management.
- Alignment with ISO27002 international information security controls implementation.
- Protect reputation and brand with state of art cloud security.
- Prevent unauthorised access via IAM and Zero Trust Architecture.
- Minimise application and data cyber attack surface area.
- Satisfy compliance regulations and enterprise security directives.
- Protect critical apps from fraud and cyber attacks.
- Detect, investigate, and respond to threats faster.
Pricing
£100 a unit
- Education pricing available
Service documents
Request an accessible format
Framework
G-Cloud 14
Service ID
2 1 7 7 8 2 2 9 0 8 6 2 5 6 0
Contact
Raytheon Systems Limited
Sharon Tedford
Telephone: 07769287208
Email: sharon.tedford@raytheon.co.uk
Planning
- Planning service
- Yes
- How the planning service works
-
We use our Analyse, Prepare, Migration & Optimise methodology to help our clients plan how they will implement cloud hosting and services.
Analysis is focused on collaboration with your experts to complete a preliminary assessment to identify cloud hosting and services functional and non-functional requirements. We identify the driver(s) for the cloud adoption, understand the context and identify success criteria. We evaluate current systems to capture any compliance implications and identify any business change or skills gaps.
Preparation focuses on Agile delivery and de-risking. We will select and agree cloud services, design patterns for implementation and integration, and choose cloud management tools, trading off performance and cost. We consider a variety of cloud deployment and service models and select the most appropriate model which satisfies the functional and non-functional requirements.
Implementation (Migration) is executing the delivery cycles to implement the cloud hosting and services. As each feature is deployed, it can be monitored, verified, assured, and made live to users before the next feature, giving confidence to users and decision-makers.
Optimisation ensures that the culture of continuous improvement is embedded into your organisation and that cloud hosting and services are delivering optimal business value, and capturing lessons learnt. - Planning service works with specific services
- No
Training
- Training service provided
- Yes
- How the training service works
- Our experts assess what help, support and training users require to start using any identified service. We work closely with our customers to agree a training plan that ensures that they are ready to start using the service. The training plan may incorporate the following: (1) availability and access to online user support documentation and resources, (2) cloud induction training for system administrators which provides the skills to run cloud services, (3) cloud standard training in the core system for power users and standard users which covers system administration, security and cloud service monitoring/managing, (4) cloud specialist training for advanced training for system champions which will involve accredited courses from leading cloud providers, (5) cloud training packages which are tailored package of training for specific business requirements for system administrators, business managers, and end users.
- Training is tied to specific services
- No
Setup and migration
- Setup or migration service available
- Yes
- How the setup or migration service works
-
We use our Analyse, Prepare, Migrate & Optimise methodology to identify the most appropriate cloud migration.
Analysis is focused on collaboration with your experts to complete a preliminary assessment to identify migration treatments for each application. We identify the driver(s) for the migration, understand the context and identify success criteria. We evaluate current systems to capture any compliance implications and identify any business change or skills gaps.
Preparation focuses on de-risking, using data captured above and relative priority to inform it, we will select and agree migration treatment, cloud services, design patterns for integration and choose tools, trading off performance and cost. We consider dual run periods with legacy systems and consider simplifying legacy applications using APIs. We consider labelling, integration dependencies, risks and can conduct training.
Migration is executing the migration in vertical “slices” to focus on continuous value being realised. As each slice is deployed, it can be monitored, verified, assured, and made live to users before the next slice, giving confidence to users and decision-makers.
Optimisation ensures that the culture of continuous improvement is embedded into your organisation, continuously reviewing if the scaling factors are meeting your needs, that legacy applications are decommissioned, and capturing lessons learnt. - Setup or migration service is for specific cloud services
- No
Quality assurance and performance testing
- Quality assurance and performance testing service
- Yes
- How the quality assurance and performance testing works
- Our cloud security engineering teams design and implement comprehensive security controls leveraging native cloud capabilities, security monitoring, threat response, and optimisation services. With continuous security assessments, we ensure that the security strategies we design evolve in line with the client's cloud adoption, making security a first class pillar from the outset of the project.
Security testing
- Security services
- Yes
- Security services type
-
- Security strategy
- Security design
- Cyber security consultancy
Ongoing support
- Ongoing support service
- Yes
- Types of service supported
- Hosting or software provided by your organisation
- How the support service works
- We support cloud hosting and services by utilising cloud native monitoring solutions to gain visibility into the performance, availability, and health of applications and cloud infrastructure. This enables us to take advantage of out-of-the-box metric collection dashboards for cloud services and it also allows us to easily support hybrid and multicloud environments. Cloud metrics, events, and metadata are displayed on custom dashboards that allow us to identify issues and uncover patterns. SLO monitoring allows us to be alerted when an SLO violation occurs. Utilising in-built cloud native monitoring solutions gives us an single-glass-pane integrated service for metrics, uptime monitoring, dashboards, and alerts which helps reduce RTO. We help our clients to leverage SRE best practices and principles to improve system reliability.
Service scope
- Service constraints
- We can offer our clients deep expertise in two of three main cloud providers: AWS and Azure. We can offer limited expertise and support in Google Cloud Platform.
User support
- Email or online ticketing support
- Email or online ticketing
- Support response times
- This would be bespoke per Buyer requirements.
- User can manage status and priority of support tickets
- Yes
- Online ticketing support accessibility
- WCAG 2.1 AAA
- Phone support
- Yes
- Phone support availability
- 9 to 5 (UK time), Monday to Friday
- Web chat support
- No
- Support levels
-
We offer four levels of support ranging from core working hours (9am to 5pm Monday to Friday excluding English public holidays). Our service response are tailored to each specific engagement and typically depend on the severity of the incident and are as follows:
a) Severity Level 1 (Critical) - 1 hour to respond, 1 day to resolve.
b) Severity Level 2 (Severe) - 1 hour to respond, 3 days to resolve.
c) Severity Level 3 (Disruptive) - 2 hours to respond, reasonable 5 days to resolve.
d) Severity Level 4 (Minor) - 2 hours to respond, reasonable efforts to resolve.
Resellers
- Supplier type
- Not a reseller
Staff security
- Staff security clearance
- Other security clearance
- Government security clearance
- Up to Developed Vetting (DV)
Standards and certifications
- ISO/IEC 27001 certification
- Yes
- Who accredited the ISO/IEC 27001
- BSI
- ISO/IEC 27001 accreditation date
- 24/03/2024
- What the ISO/IEC 27001 doesn’t cover
- Our ISO/IEC 27001 accredits the NSC Information Security Management System (ISMS) and although we work within our customers ISMS the scope of the accreditation doesn’t cover this.
- ISO 28000:2007 certification
- No
- CSA STAR certification
- No
- PCI certification
- No
- Cyber essentials
- Yes
- Cyber essentials plus
- Yes
- Other security certifications
- Yes
- Any other security certifications
- MoD accredited networks
Social Value
- Social Value
-
Social Value
- Fighting climate change
- Covid-19 recovery
- Tackling economic inequality
- Equal opportunity
- Wellbeing
Fighting climate change
Raytheon UK are currently creating a company-wide net zero strategy encompassing our full scope 3 emissions.
As part of our strategy, we hope to implement further measures such as:
• Proposed future energy initiatives to be reviewed and embedded as part of the Plan Do Check Act cycle of continuous improvement.
• Undertake a cultural transformation of environmental, carbon and Net Zero awareness and training, including stakeholder engagement and communications.
• Engagement with Raytheon UK’s supply chain partners to ascertain carbon emissions and potential carbon reduction initiatives.
Within our premises we implement Green walls, and by providing Hybrid working there is a limit on travelling, with car miles saved as a result of green transport programme. Carbon emissions have been reduced due to energy efficiency measures on site.
Raytheon UK has a carbon reduction plan to achieve Net Zero in Scopes 1 & 2 by 2030 and across our entire Value Chain by 2050. Currently 56% of company vehicles are electric or hybrid and all directly controlled RUK sites procure electricity from 100% renewable energy. We will carbon offset business travel if public/zero emissions transport cannot be used.
Raytheon UK also has an Employee Sustainability Network (ESN); this group share sustainability tips and tricks to help inform the workplace of ways we can all make a difference and arrange volunteering activities such as community litter picks.
Against the emissions categories reported in our Carbon Reduction Plan, we reduced our emissions by 42.8% between 2019 and 2021. These reductions are despite the opening of a new manufacturing site. We are currently updating this with our 2022 values. We regularly undertake energy improvement measures on our sites including LED lighting, increasing charging points for electric vehicles, implementing dual fuel generators, replacing boilers with sustainable heat exchangers and upgrading our buildings.Covid-19 recovery
Throughout the COVID-19 Pandemic, we were agile and responsive to support home working and flexible hours, rapidly rolling out new, appropriately accredited, hardware and software to support secure remote working and effective virtual collaboration.
Employees were supported by a pre-existing network of 32 Mental Health Ambassadors with Mental Health First Aid training.
During the initial COVID-19 lockdown we adjusted our invoicing policy to expedite payments for Small and Medium Enterprises (SMEs) to support their cash-flow, financial security and ensure supply chain resilience. We also set up daily calls to maintain information flow and ensure their employees were safe whilst maintaining critical deliveries.
Raytheon UK proudly invest in the future talent of the UK through our early years career programme. We currently employ 172 ‘earn and learn’ roles and have an annual graduate recruitment programme, in 2022 we recruited 27 new graduates through our graduate recruitment scheme, as well as many others through independent recruitment. We actively engage our graduates and apprentices on our social value programme ‘Forward Steps’, encouraging them to give something back to our communities, whilst supporting their own CPD.
Raytheon Cyber Academies x 3 per year - designed to support careers transition for veterans and current servicepeople, teaching valuable Cyber Security skills, employability and team building. All entrants who successfully pass, offered telephone interview / recruitment support with Raytheon.
Raytheon UK currently has the potential to offer 10,000 days of volunteer service annually, in the UK. We will allocate a defined number of volunteer hours to support both grassroots level community and national level initiatives through this contract. Volunteering is an integral part of protecting the health and wellbeing of our workforce, whilst simultaneously giving back to our communities.Tackling economic inequality
In 2019, RTN UK participated in the first Women in Cyber Academy (WCA) set up by DCMS to help women retrain and build careers in cyber; as the sole sponsor for the first cohort, we took all participants into roles within our business. To address the wider cyber talent gap, we delivered a hands-on Cyber Academy to two UK Universities and developed a cyber security apprenticeship programme aiming to certify 280 Apprentices over four years.
We are committed to tackling economic inequality and bringing more talent into our workforce. As a Supplier, we have a responsibility to provide jobs to areas local to our sites and to tackle economic inequality for those who face barriers to employment, such as those who are disabled, neurodiverse, from the care system or veterans. The technology sector faces a skills shortage, particularly within cyber security, full stack development and data science. A contributing factor is the skills pipeline and a generational deficit of individuals engaging in STEM subjects from a young age. Economic inequality perpetuates this, organisations needing to go further to remove barriers for individuals under-represented in the workplace and in technology. Organisations within tech must think laterally and, to develop a resilient talent pipeline, seek out those with complimentary skills and invest in their development. Our strategy is to have the most focused ecosystem developing opportunities and tackling economic inequality within the communities in which we operate, delivering on objectives outlined in our Social Value Model.
We will initially operate in nine UK regions, with the potential to bring people into the sector across the UK. We will reach out within the deprived areas close to where we operate, providing job and training opportunities to deliver a resilient and diverse workforce.Equal opportunity
Raytheon UK (RUK) is invested in Britain and its future potential. We are committed to realising this potential through our Raytheon Forward Steps Programme which is underpinned by three key tenets of the wider Raytheon Social Value Strategy. These are central to developing our long-term commitment as a responsible business, partner with the UK Government and support our local communities. Forward Steps will:
•Promote STEM.
•Help veterans’ careers.
•Support and contribute to the communities we operate in.
Raytheon operate inclusive recruitment practices, working with local groups to empower disabled people to apply for jobs, and understanding how to offer inclusive interviews.
We provide Training to be inclusive leaders and promote Mentorship - encouraging resources to use their 10% time for mentoring across the business.
Our supply chain has the potential to be adversely affected by Modern Slavery and with our Supplier Code of Conduct we outline the standards we hold our suppliers and third-party providers to, which are flowed down in our subcontract Terms and Conditions. Since 2015, RUK has annually published a statement on actions to counter Modern Slavery.
We require our suppliers:
-to establish independent codes of conduct supporting their commitments to Modern Slavery and Human Rights across their operations
-provide their employees with the appropriate training and resources to meet commitments.
-to comply with laws and regulations prohibiting human trafficking, as outlined in our Modern Slavery Statement and Supplier Code of Conduct.
RUK will lead and help the supply chain to implement best practice in Modern Slavery and Human Rights.
Fair Working Conditions - These standards are an extension of the expectations in our Code of Conduct regarding non-discriminatory and inclusive environments, safe and healthy working conditions, fair wages and hours, and the prevention of all forms of child labour, forced labour and human trafficking.Wellbeing
In a rapidly changing employment landscape, committing to improving the Health and Wellbeing of employees has never been more crucial. We operate with this commitment at the heart of every contract we undertake – putting Wellbeing at the centre of our business endeavours. We understand that to be successful, we must commit to taking proactive, considered action to provide opportunities for staff to seek support when they need it, and to create a positive culture of transparency and safety. As an existing supplier to you, we have first-hand experience of the challenges this environment can bring and are committed to learning from this with our approach to the framework. We aspire to be the most focused supplier with regards to the wellbeing of the workforce and understand that to successfully effect positive change, we will need to carefully monitor and address the impact of the framework on staff.
Principles and Measures We Have in Place
RUK treats mental health as critically as any other area of health and safety in work and have numerous wellbeing channels available to help employees deal with mental health issues.
•Annual Mental Health Ambassadors programme – Ambassadors go through a series of training sessions, teaching them how to be Mental Health First Aiders, showing how to listen to our colleagues and signpost appropriate sources of help.
•Seminars – run across sites to educate everyone on potential signs of people struggling and how we can take an active effort in helping us and those around us.
•Employee Assistance Programme – 24-hour confidential access to support for every employee and their family members.
•Wellbeing Blog – source for useful links to articles such as a weekly mental health check-up, webinars, relevant policies, links to internal and external resource groups.
Pricing
- Price
- £100 a unit
- Discount for educational organisations
- Yes