NAK Consulting Services Ltd

Visual Studio Enterprise

A Visual Studio Enterprise subscription

Features

• Integrated Development Environment

Benefits

• Pay-as-you-Go Licence

£197.97 to £247.46 a user a month

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at richard.howes@nak.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

304922157583038

Contact

Richard Howes
08450 230 286
richard.howes@nak.co.uk

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: As present in Visual Studio Live Share and similar services provided by Microsoft
• System requirements: PC

User support

• Email or online ticketing support: No
• Phone support: No
• Web chat support: No
• Onsite support: No
• Support levels: Sold on a licence-only basis, with no bundled support
• Support available to third parties: No

Onboarding and offboarding

• Getting started: Provide or assign licence to users
• Service documentation: No
• End-of-contract data extraction: Not applicable
• End-of-contract process: NAK will cease providing licence to users and they will have to source a licence from an alternative provider or stop using the service

Using the service

• Web browser interface: No
• Application to install: Yes
• Compatible operating systems: Windows
• Designed for use on mobile devices: No
• Service interface: No
• User support accessibility: None or don’t know
• API: No
• Customisation available: No

Scaling

• Independence of resources: Azure DevOps Services manages the underlying infrastructure and handles servicing user demand, including separating demand from different groups of users

Analytics

• Service usage metrics: No

Resellers

• Supplier type: Reseller (no extras)
• Organisation whose services are being resold: Microsoft

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: Never
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v3.0
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Physical access control, complying with another standard
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: Yes
• Data sanitisation type: Deleted data can’t be directly accessed
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Not applicable
• Data export formats: Other
• Data import formats: Other

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: Available is as per underlying Azure DevOps Services SLAs
• Approach to resilience: Resilience is per support provided by underlying Azure DevOps Services options and capabilities
• Outage reporting: Azure DevOps Services provides a public dashboard tracking any service outages

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
• Access restrictions in management interfaces and support channels: NAK utilises a multi-tenant ITSM toolset, this ensures all customer data is kept separately within it's own tenant. Individual buyer users are validated during the onboarding process.
• Access restriction testing frequency: At least every 6 months
• Management access authentication: 2-factor authentication

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: QAS International
• ISO/IEC 27001 accreditation date: 27/01/2024
• What the ISO/IEC 27001 doesn’t cover: NAK's lab environment
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Below is the list of processes and policies we follow. NAK go through an annual surveillance audit and at least 3 annual internal audits of the various components. All identified non-compliances are reported to NAK's Information Security Management Committee. ; ; Information Security Policy; Access Control Policy; Acceptable Use of Assets Policy; Business Continuity Procedure; Change Management Procedure; Communications Policy; Cryptographic Controls Policy; Human Resource Security Policy; Information Classification Policy; Information Security Incident Management Procedure; Mobile Device Policy; Operating Procedures for IT Management; Password Security Policy; Secure System Engineering Principles Policy; Supplier Security Policy; Server Maintenance Procedure; Determining the Scope of the ISMS Policy; Performance Evaluation Procedure; Planning to Achieve security Objectives; Risk Assessment Procedure; Document, Records & Data Control; Internal Audit Procedure; Management Review; Control of Nonconforming Product; Multi-Factor Authentication Policy

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: NAK manage a Configuration Management Database through our ITSM toolset. NAK's Change Management process is run and managed through our ITSM toolset.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: We assess vulnerabilities on their CVE score. CVE vulnerabilities of 8+ will be remediated within 14 days, providing a patch is available. NAK receives alerts from key vendors of any vulnerabilities and we also scan vendor security updates.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Compromises are picked up through Microsoft Defender and Deep Instinct. Once identified, the compromise would be handled as part of NAK's standard Incident Management process
• Incident management type: Supplier-defined controls
• Incident management approach: NAK run a standard ITIL Incident/Major Incident process. Users are able to report incidents via telephone, e-mail or portal. For Major Incidents, NAK will provide a root cause analysis report detailing a timeline of events, the cause of the incident and any remedial actions.

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  Tackling economic inequality

  Tackling economic inequality

  Buyers who procure Visual Studio licences/subscriptions support the economic growth of NAK Consulting Services as an SME, resulting in the creation of new jobs and distribution of new skills.

Pricing

• Price: £197.97 to £247.46 a user a month
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at richard.howes@nak.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.