INSIGHTS T/A ISX4 LTD

Cloud Installation and In-life Management

ISx4 specialises in taking clients on their end-to-end cloud journey. From determining the platform, installation, configuration to hosting and support on Azure, AWS or GCP as appropriate. Additionally we can deploy systems like Posit, IBM WatsonX, SAS, Anaconda etc to your cloud and provide ongoing support.

Features

• Fully customised to client requirements
• Full functionality of AWS, Azure or GCP
• Runs on a dedicated instance
• ISx4 is system agnostic - all are considered
• Low-code/No-code
• Flexible service and billing options
• Further deployment of Posit, IBM, SAS, Anaconda etc
• Full security set up per buyer's requirements
• Handover and training

Benefits

• Utilises only global cloud providers
• Solutions are scalable to meet demand
• Reduced costs with options and flexible packages
• Flexibility to align solutions to your requirements
• Security levels to meet your minimum standards

£20,000.00 to £100,000.00 an instance

• Education pricing available

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at kielty.hughes@isx4.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

317401491907033

Contact

Kielty Hughes
07771327751
kielty.hughes@isx4.com

Service scope

• Service constraints: None - full flexibility to tailor solutions
• System requirements: System deployments will require user licences

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Various support options available.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Yes, at an extra cost
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: WCAG 2.1 AAA
• Web chat accessibility testing: Standard Watson, Azure or AWS functionality
• Onsite support: Yes, at extra cost
• Support levels: High Complexity Models - In-life management includes system health checks and advanced support including proactive and reactive in the total cost. ; Medium Complexity Models - In-life management includes system health checks and advanced support including proactive and reactive in the total cost with less frequency and at a lower cost.; Low Complexity Models - In-life management includes periodic system health checks and basic support included in the total cost.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: User documentation is provided as well as the standard information available for Azure, AWS or GCP. Initial instruction is carried out to ensure that functionality is as expected and users understand the procedures.
• Service documentation: Yes
• Documentation formats:
  • ODF
  • PDF
• End-of-contract data extraction: Users own the data and have full access to, and control over it at all times. Migration of the data is managed by the users.
• End-of-contract process: Content will be made available for a period of time for retreival subject to licence constraints.

Using the service

• Web browser interface: Yes
• Using the web interface: All interface capabilities are per the standard processes for Azure, AWS or GCP. Users have the option of performing administrative functions directly, or by utilising our support function.
• Web interface accessibility standard: WCAG 2.1 AA or EN 301 549
• Web interface accessibility testing: All interface capabilities are per the standard processes for Azure, AWS or GCP.
• API: Yes
• What users can and can't do using the API: API connectivity can be configured to meet the individual client needs and integration requirements
• API automation tools:
  • Ansible
  • Chef
  • OpenStack
  • SaltStack
  • Terraform
  • Puppet
  • Other
• Other API automation tools:
  • This can be flexible dependent upon client needs
  • Azure native
  • AWS native
  • GCP Native
  • IBM Native
• API documentation: Yes
• API documentation formats:
  • Open API (also known as Swagger)
  • HTML
  • ODF
  • PDF
• Command line interface: Yes
• Command line interface compatibility:
  • Linux or Unix
  • Windows
• Using the command line interface: Again this is configurable dependent upon the client needs

Scaling

• Scaling available: Yes
• Scaling type:
  • Automatic
  • Manual
• Independence of resources: Dedicated instance for each user
• Usage notifications: Yes
• Usage reporting: Email

Analytics

• Infrastructure or application metrics: Yes
• Metrics types:
  • CPU
  • Disk
  • HTTP request and response status
  • Memory
  • Network
  • Number of active instances
• Reporting types:
  • API access
  • Regular reports

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: Posit, Anaconda, IBM, SAS, MS Azure, AWS, Google GCP

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: In-house
• Protecting data at rest: Other
• Other data at rest protection approach: All data remains on buyer's network, or a dedicated instance for the buyer on Azure, AWS or GCP. ISx4 does not operate data centres, networks or physical hardware.
• Data sanitisation process: No
• Equipment disposal approach: In-house destruction process

Backup and recovery

• Backup and recovery: Yes
• What’s backed up: Backup to meet your requirements
• Backup controls: Full flexibility built into the solutions
• Datacentre setup: Multiple datacentres with disaster recovery
• Scheduling backups: Users contact the support team to schedule backups
• Backup recovery: Users contact the support team

Data-in-transit protection

• Data protection between buyer and supplier networks: Other
• Other protection between networks: All data remains on buyer's network, or a dedicated instance for the buyer on Azure, AWS or GCP. ISx4 does not operate data centres or networks.
• Data protection within supplier network: Other
• Other protection within supplier network: All data remains on buyer's network, or a dedicated instance for the buyer on Azure, AWS or GCP. ISx4 does not operate data centres or networks.

Availability and resilience

• Guaranteed availability: SLAs are determined by the package purchased. T&Cs govern the impact of non-availability and the impact of that on pricing.
• Approach to resilience: Not applicable as there is no ISx4 datacentre.
• Outage reporting: Email alerts

Identity and authentication

• User authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google apps)
  • Username or password
  • Other
• Other user authentication: Authentication methods to meet buyer's requirements
• Access restrictions in management interfaces and support channels: Access restrictions to meet buyer's requirements
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
  • Other
• Description of management access authentication: Management access to meet buyer's requirements
• Devices users manage the service through:
  • Dedicated device on a segregated network (providers own provision)
  • Dedicated device on a government network (for example PSN)
  • Dedicated device over multiple services or networks
  • Any device but through a bastion host (a bastion host is a server that provides access to a private network from an external network such as the internet)
  • Directly from any device which may also be used for normal business (for example web browsing or viewing external email)

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: CDL Group
• ISO/IEC 27001 accreditation date: 12/10/2023
• What the ISO/IEC 27001 doesn’t cover: N/a
• ISO 28000:2007 certification: No
• CSA STAR certification: Yes
• CSA STAR accreditation date: Depends on the system. Azure June 2020
• CSA STAR certification level: Level 3: CSA STAR Certification
• What the CSA STAR doesn’t cover: Depends on the system - Azure, AWS, GCP
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: No
• Security governance approach: Internal controls to report and escalate issues. Monthly review of risk profiles and incident reporting by Exco.
• Information security policies and processes: ISO27001 annual certification. Security policies align to this, reviewed annually and Board approved.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Programme and project management principles applied with oversight by the CEO, COO or other senior manager. Impact assessments are conducted on security, privacy, technology and operational capabilities.
• Vulnerability management type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Vulnerability management approach: All services are provided directly by Azure, AWS or GCP.
• Protective monitoring type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Protective monitoring approach: All services are provided directly by Azure, AWS or GCP.
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: All services are provided directly by Azure, AWS or GCP.

Secure development

• Approach to secure software development best practice: Supplier-defined process

Separation between users

• Virtualisation technology used to keep applications and users sharing the same infrastructure apart: Yes
• Who implements virtualisation: Third-party
• Third-party virtualisation provider: Azure, AWS, GCP
• How shared infrastructure is kept separate: Dedicated instances on Azure, AWS, GCP

Energy efficiency

• Energy-efficient datacentres: Yes
• Description of energy efficient datacentres: N/a - no data centres in operation

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  All ISx4 staff operate remotely. We do not operate an office. Video calls is the main form of communication and travel is kept to an absolute minimum. We do not operate a network or data centre, rather leverage the resources of our partners including AWS, Microsoft etc. Net zero has been achieved.

  Covid-19 recovery

  ISx4 operates remotely so have not been directly impacted by travel restrictions or social distancing. As there has been minimal economic or financial impact to the company, we have been able to continue with hiring staff across all levels. Operating in a high growth industry with specialised staff, we collaborate with local education bodies to provide opportunities for students and graduates to learn about analytics.

  Tackling economic inequality

  Operating in a high growth industry, ISx4 works with the Northern Ireland government and education provides to employ local people and provide extensive training. The nature of the roles are specialised and highly technical so client engagements provide opportunities to acquire further skills and advance careers.

  Equal opportunity

  ISx4 operates equal opportunity hiring. Flexible working arrangements are in place to accommodate personal circumstances. Mentoring and career development support is in place. Modern slavery policy in place.

  Wellbeing

  ISx4 provides flexibility for staff in their working arrangements. Mentoring and guidance is strongly encouraged. Staff work from home and are not required to travel but opportunities are provided for onsite collaboration.

Pricing

• Price: £20,000.00 to £100,000.00 an instance
• Discount for educational organisations: Yes
• Free trial available: No

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at kielty.hughes@isx4.com. Tell them what format you need. It will help if you say what assistive technology you use.