DEFENCE DATASEC LTD

Cloud Security Architect service

Defence DataSec Cloud Security Architect Service provides security architecture design guidance for proposed cloud deployments&recommendations for security architecture improvements to existing implementations.Our Cloud Security Architect service provides professional,knowledgeable,skilled and experienced Cloud Security Architect(s) will work with your business to reduce the risk&enhance the security of your network and/or systems architecture.

Features

• Service and infrastructure Security Architecture design and assurance
• Security Architecture applied to public cloud
• Security Architect support to organiastion migrating services to the cloud
• Physical, Logical and Security audit of existing cloud architectures
• Cloud security architects which enable and inform risk-based decisions
• Technical security control framework specification and documentation
• Aligning cloud security architecture with business strategies and objectives
• Technical design of systems and services, ensuring quality and security
• Architecture assurance to NCSC & industry good practice
• Security Policy and standards production/review

Benefits

• Reduces ongoing threats to your organisation
• Protection from adware, ransomware and social engineering schemes
• Prevention from and correction of Cyber attack
• Enhances Risk Mitigation
• Delivers an understanding of interdependencies across the organisation’s cyber estate
• Enables more accurate and informed risk-based decision making
• Increases system and information confidentiality, integrity and availability
• Improves the organisations cloud security architecture and posture
• Working with your staff to raise skills in your organisation
• Detailed reporting from government experienced consultants

£400 to £1,400 a unit a day

• Education pricing available

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@defencedatasec.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

240844468092388

Contact

Mohamed Amri
07772866727
info@defencedatasec.co.uk

Planning

• Planning service: Yes
• How the planning service works: Defence DataSec Data management service planning will ensure the process of acquiring, storing, organising, and maintaining created and collected data. We also ensure data management planning will set up business applications to provide analytical information to help drive strategic planning by end-users. Our experts will provide you with guidance on how to prepare your data which includes: Data Profiling, Data Cleansing, Data mining, Data manipulation and enhancement, and Data aggregation to Simplify your data management process of collecting.; ; We follow Information Governance and Security Policies which are the process flows and baseline documents to help your organisation align to best practices in terms of Data Security and legal requirements such as the Data Protection Act and GDPR.
• Planning service works with specific services: Yes
• Hosting or software services the planning service works with:
  • AWS Cloud hosting services and Well Architecture Framework review
  • Azure Cloud hosting services, architecture and best practice review
  • Google Cloud hosting services, architecture and best practice review
  • OCI Cloud hosting services, architecture and best practice review
  • MuleSoft Cloud hosting services, architecture and best practice review
  • Qlik and dynamic yield Cloud hosting architecture and best practice
  • Okta Cloud Security services, architecture and best practice review
  • Oracle Fusion Cloud hosting services, architecture and best practice review
  • Workday Cloud Cloud hosting services, architecture and best practice review
  • ZScaler Cloud Security services, architecture and best practice review

Training

• Training service provided: Yes
• How the training service works: Defence DataSec can provide knowledge transfer at all stages of the cloud transition process. By working closely with your in-house technical teams, we’ll help ensure they are equipped with the necessary skills via our tried-and-trusted combination of shadowing our experts during implementation and formal knowledge transfer and training sessions. A training approach will be agreed during the planning phase and may include any or all of the below:- • Train the trainer • Classroom based sessions for super users • Online guided training • Pre-recorded show and tell videos • Inbuilt system guides and help tips • Knowledge base • Knowledge transfer of the HLD’s (High Level Design), • Knowledge transfer of the LLD (Low Level Design), • Knowledge transfer of the Infrastructure and Network Diagrams.
• Training is tied to specific services: Yes
• Services the training service works with:
  • Cloud strategy assessment and design
  • Cloud architecture definition, assessment, design and delivery
  • Cloud technical governance and operating model
  • Architecture capability assessment and development
  • Executive and business leader/owner cloud awareness and education
  • Legacy environment cost review savings identification to fund cloud migration
  • Cloud migration planning and delivery

Setup and migration

• Setup or migration service available: Yes
• How the setup or migration service works: Defence DataSec will carry out series of meetings, workshops with stakeholders and system owners, technical and business discussion to define the scope of work and deliver the projects in following steps. 1 - Strategy Development Developing principles and plans for the future of cloud use in the business. Output Examples: Conceptual architecture, Cloud principles, Data regulation planning. 2-Discovery Looking into the existing IT estate in the business and identifying opportunities. Output Examples: Systems catalogue, Cloud cost estimates, Benefit estimates 3 - Design Creating the blueprints for cloud systems and detailed plans for migration to cloud. Output Examples: Systems architecture, Migration plans, Detailed costs, Detailed benefits. 4 - Solutions Defence DataSec products used to migrate and manage systems in the cloud Output Examples: Defence DataSec cloud control & Backup. 5 - Implementation Building solutions based on cloud components and moving business systems to the cloud Output Examples: AWS IaaS build & configuration, Testing strategy & execution, Defect tracking & resolution. 6 - Management Operating solutions in the cloud to agreed service levels and operating scope Output Examples: Planned service management, Unplanned incident resolution, Help desk & troubleshooting. 7 - Warranty We will provide warranty for 3 days from go live.
• Setup or migration service is for specific cloud services: Yes
• List of supported services:
  • Cloud Provisioning and Configuration
  • Migration for Oracle Apps to IaaS and PaaS
  • Zero Downtime Cloud Migrations for Oracle, SQL, Mongo Database
  • Legacy to cloud migration (lift & shift)
  • Legacy to cloud migration (a live migration using CloudEndure)
  • Cloud to Cloud migration
  • Design to agreed operational budget constraints
  • Design for connectivity into cloud
  • Tools-based technical discovery for migration planning

Quality assurance and performance testing

• Quality assurance and performance testing service: Yes
• How the quality assurance and performance testing works: Defence DataSec can provide knowledge transfer at all stages of the cloud transition process. By working closely with your in-house technical teams, we’ll help ensure they are equipped with the necessary skills via our tried-and-trusted combination of shadowing our experts during implementation and formal knowledge transfer and training sessions. A training approach will be agreed during the planning phase and may include any or all of the below:- • Train the trainer • Classroom based sessions for super users • Online guided training • Pre-recorded show and tell videos • Inbuilt system guides and help tips • Knowledge base • Knowledge transfer of the HLD’s (High Level Design), • Knowledge transfer of the LLD (Low Level Design), • Knowledge transfer of the Infrastructure and Network Diagrams.

Security testing

• Security services: Yes
• Security services type:
  • Security strategy
  • Security risk management
  • Security design
  • Cyber security consultancy
  • Security testing
  • Security incident management
  • Security audit services
• Certified security testers: Yes
• Security testing certifications: Cyber Scheme

Ongoing support

• Ongoing support service: No

Service scope

• Service constraints: Our Normal Service hours are 9.00 hours to 17.00 hours, anything outside of this hours or weekend work should be agreed with the Clients with additional cost as per SFIA. All Client’s project travels are chargeable based on the agreed terms and conditions.

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Within a Day
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Support levels: We provide dedicated support during the project. It is typically available during working hours (Monday to Friday). Extended support can be provided with agreement.

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Developed Vetting (DV)

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: Yes
• Any other security certifications:
  • ICO - Data Protection
  • GDPR

Social Value

• Fighting climate change:

  Fighting climate change

  Defence DataSec is continuously encourage our employees to cycle to work instead of driving which reduce greenhouse gas emissions. For longer distances, we encourage our team to take a train or bus or carshare whenever possible. We have implemented hybrid working and cycle to work scheme. Our entire IT infrastructure has been hosted in the cloud. This help to reduce carbon emission. We have recycled policy for coffee cups and plastic bottles. All our small initiations are supporting to fight the climate change. We live in a shared world. Defence DataSec is doing its part to fighting climate change.
• Covid-19 recovery:

  Covid-19 recovery

  Defence DataSec bring the same passion and commitment to our communities and society as we do to our clients and the work, we deliver every day. We are providing insights and guidance to small businesses searching for ways to cope with the operational stress generated by COVID-19. We are running weekly session for well-being for our staff and one to one session as well. Our teams organised the donation and delivery of hundreds of thousands of personal protection and medical equipment pieces. Defence DataSec has donated and had delivered thousands of meals to the places and people that needed them. We are committed to supporting various food back supplies, contribute to charity fundraising for serving the vulnerable and less privileged ones in our society. We believe that today's young generation is the future of our economic stability. Hence it is essential to bring them up to speed by developing modern skills and knowledge by fostering their future through apprenticeship programs. We are glad to declare our strategic plan to introduce a range of degree apprenticeship programs to support our government's economic recovery.
• Tackling economic inequality:

  Tackling economic inequality

  We believe that today's young generation is the future of our economic stability. Hence it is essential to bring them up to speed by developing modern skills and knowledge by fostering their future through apprenticeship programs. Defence DataSec is committed to tackling economic inequality from the root level. We are glad to declare our strategic plan to introduce a range of degree apprenticeship programs to lower the unequal distribution of income and opportunity between different diversity/groups in our society and to support our government's economic recovery.
• Equal opportunity:

  Equal opportunity

  About 48 % of the Defence DataSec workforce is Black, Asian, and other Minorities. Also, about 40% of our employees are women. We are an equal opportunity employer, and we understand and experience the benefits of having a diverse workforce. The first benefit is diverse viewpoints. Because of our different backgrounds we all have different experiences, skills, lifestyles, and beliefs that we use when formulating strategies and decisions. Because of this each of us tends to look at problems through a different set of lenses. A variety of diverse people working together to solve a problem result in a more holistic view which ultimately results in higher performance. Diversity has also been shown to result in innovation. As a diverse and inclusive workplace, we make everyone, regardless of who they are or what they do, feel equally involved in and supported in all areas of the workplace. Since we understand the importance and benefits of a diverse workforce, we conduct diversity training for our employees every year. As a result, we have reduced employee turnover costs by reducing internal disputes and grievances, have increased productivity and revenues. We have improved accessibility to new and diverse customer markets too. Defence DataSec has incorporated diversity into company policies and practices. We are open to developing or amending workplace policies to be more inclusive and diversity-friendly, from hiring practices to performance reviews, promotions, and benefits. We provide special high-valued internships (and training) and provide the CPD and support them to get certified so that they will be able to advance more quickly in key roles within the organisation.
• Wellbeing:

  Wellbeing

  Our strength and most valuable assets are our consultants/experts/resources/staff. Therefore, we always look after them and their loved ones. We help them to enhance their knowledge and career/professional development with training and support to get certified. We have experienced over the years that our staff stays with us in long terms as we take good care of them, and they are very happy to work with us long term. We hold weekly stand-up meetings (All our consultants in different projects join) to share knowledge and experiences, solve problems (if any) etc. We have a mental health champion, who joins in our weekly stand-up to give some tips and advice. Also, we conduct monthly mental health sessions with our mental health champion and that has been very useful, especially during the lockdown time as well as when returning to work after lockdowns. Lockdowns have affected different people in different ways, and it is only normal to feel uncertain. Many people feel confused, worried, and apprehensive about going back to the workplace. All our line managers regularly hold meetings with their team members and that allow all members to express themselves to their immediate superior, not only the work-related issues but also their personal issues (if any). We have created an atmosphere, for every staff to communicate freely in writing or oral. Also, regularly we get feedback from them to know the mental conditions of each of them and escalate if there are any issues. We use questionnaires and interviews for this close monitoring. Furthermore, we get 360 degrees feedback (self-evaluation, evaluation from supervisors, from clients, from suppliers etc.) on each employee to measure their performance, twice a year as well as at the end of any project. Our annual medical tests also help us to measure the mental conditions of our-staff.

Pricing

• Price: £400 to £1,400 a unit a day
• Discount for educational organisations: Yes

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@defencedatasec.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.