Layer 7 IT Security

AWS Engineering

AWS-certified and Government security cleared Solutions Architects and DevOps Engineers design solutions for your unique needs. Supporting clients to build applications using the AWS Well-Architected framework. Solutions are built on operational excellence, security, reliability and performance efficiency. Adopting a strategic and cloud-native approach, drives cost optimisation

Features

• CI/CD pipeline creation (AWS Code Commit, Git)
• Cloud native application development
• Monitoring and audit (e.g. CloudWatch and CloudTrail)
• Security and Compliance (AWS KMS, CloudHSM, Config)
• Database and storage services (AWS RDS, Aurora DB, AWS S3)
• Identity and Access Management (IAM)
• Data Warehouse
• Business Intelligence
• AWS ECS, EKS, containerisation

Benefits

• Improved application scalability, reliability and flexibility
• Technical assurance from our cloud subject matter experts
• Best practice guidance from our cloud experts
• DevOps as a Service
• We will train and support knowledge-share
• Development as a Service
• Flexible support model offering guidance, support and account/service management
• Cost optimisation

£275 to £1,250 a unit a day

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at chris.tait@layer7.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

330819551334712

Contact

Christopher Tait
0191 640 2807
chris.tait@layer7.uk

Planning

• Planning service: Yes
• How the planning service works: We work seamlessly with our clients in multi-disciplinary teams (comprising programme directors, business architects, cloud technical architects, agile digital delivery experts and procurement specialists) to achieve one or more of the following goals: 1) Establish a consistent understanding of the business and technical objectives (and their respective priorities) that underpin the business case for implementing cloud hosting or software services. 2) Confirm the scope of the implementation and any critical dates, such as decommissioning deadlines. 3) Develop a commercial strategy for the programme so that the cloud technologies, services and suppliers may be procured through the appropriate commercial processes. 4) Confirm and establish the delivery methodology and supporting tools that are to be adopted to drive the transformation, such as Scaled Agile Framework (SAFe) or Disciplined Agile Delivery (DAD). 5) Design and implement the governance, management, team organisation, controls and assurance models that are to be used to drive the implementation. 6) Develop a prioritised roadmap for the implementation of the cloud hosting or software services and drive detailed planning activities across the sub-teams and suppliers at relevant intervals (such as programme increments). 7) Drive the implementation process, maintain plans, report progress and resolve issues as required.
• Planning service works with specific services: No

Training

• Training service provided: Yes
• How the training service works: We actively help to coach and train your teams throughout all Layer 7 engagements, through a collaborative, transparent nd safe-space approach. Any member of your organisation may join our collaborative online workspace to work and share their ideas with us. We passionately 'work out loud', utilising the latest technology and embedding a co-creative approach within the team.; ; We typically utilise a phased workload approach with our digital partners (clients), reducing our team size as we upskill and knowledge transfer to members of your team. Helping you improve your understanding of any given service, its problem, and its solution, and how to be a digital leader, to inspire a digital culture, and promote strategies within in your organisation.
• Training is tied to specific services: No

Setup and migration

• Setup or migration service available: Yes
• How the setup or migration service works: Working seamlessly with our clients in multi-disciplinary teams comprising programme directors, business architects, cloud technical architects, agile digital delivery experts and procurement specialists to establish a consistent understanding of the business and technical objectives and their respective priorities that underpin the business case for implementing cloud hosting or software services. Confirming the scope of the implementation and any critical dates, such as decommissioning deadlines. Developing a commercial strategy for the programme for cloud technologies, services and suppliers. Establish the delivery methodology and supporting tools that are to be adopted to drive the transformation, e.g. Scaled Agile Framework (SAFe) or Disciplined Agile Delivery (DAD). Design and implement the governance, management, team organisation, controls and assurance models that are to be used to drive the implementation. Generating a roadmap for the implementation of the cloud hosting or software services to drive detailed planning activities across the sub-teams and suppliers at relevant intervals (such as programme increments). Maximise the implementation process, maintain plans, report progress and resolve issues as required.
• Setup or migration service is for specific cloud services: Yes
• List of supported services:
  • AWS
  • Azure
  • Google
  • On Premise
  • Vendor Agnostic

Quality assurance and performance testing

• Quality assurance and performance testing service: Yes
• How the quality assurance and performance testing works: We provide quality assurance and performance testing using a Service Design approach to understand your business needs, and to align your business, creating an innovative service.; ; Through user research and usability testing, Layer 7 systematically measure, compare, monitor and feedback user insights to ensure the service is ‘fit for purpose’. User research through iterative design of qualitative and quantitative research methods will be used to reveal business behaviours, user needs, pain-points and key requirements.; ; We’ll establish and manage an appropriate level of testing the quality and capabilities of the service in line with delivery plans, validation and verification of systems against user and business requirements. Through service design research, insights and use of design- driven methodologies and co-creating alongside the business, we’ll design, test and build robust services that users need. ; ; Iterative design and usability testing is an integral part of the ongoing process, which will help you achieve long-term, lasting, business transformation.

Security testing

• Security services: Yes
• Security services type:
  • Security strategy
  • Security risk management
  • Security design
  • Cyber security consultancy
  • Security testing
  • Security audit services
• Certified security testers: Yes
• Security testing certifications:
  • CHECK
  • CREST
  • Tigerscheme

Ongoing support

• Ongoing support service: No

Service scope

• Service constraints: There are no major constraints to the services we provide.

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: We are able provide on-site and remote support to meet each individual client's circumstances and requirements. The scope of any support services and their associated costs are documented in the agreed call-off arrangements.; ; There is a nominated engagement manager who acts as the day-to-day point of contact for each client engagement and an engagement partner who provides oversight for our services and, as necessary, acts as a point of escalation.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.1 AAA
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Support levels: We are able provide on-site and remote support to meet each individual client's circumstances and requirements. The scope of any support services and their associated costs are documented in the agreed call-off arrangements.; ; There is a nominated engagement manager who acts as the day-to-day point of contact for each client engagement and an engagement partner who provides oversight for our services and, as necessary, acts as a point of escalation.

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Developed Vetting (DV)

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: Atlas Certification
• ISO/IEC 27001 accreditation date: 18/03/2024
• What the ISO/IEC 27001 doesn’t cover: All service elements covered under ISO27001 scope
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  Layer 7 are fully committed to fighting climate change. As a business we have a published Carbon Reduction Plan and are looking beyond our emissions with our Net Zero Programme where we are looking to achieve Net Zero by 2026 and become certified carbon neutral. Within Layer 7 we have an environmental and climate change continuous education programme for all staff and seek to evangelise positive climate change through our supply chain. Through our third party supply chain climate change incentive programme we reward our partners who are certified net zero.

  Covid-19 recovery

  As part of Layer 7 Covid-19 recovery plans at the beginning of all contracts we create a create socioeconomic impact assessment to define the sociodemographic profile of the local area, identify impacted communities and develop positive solutions to enhance local skills and create opportunities for local supply chain partners. A delivery framework is subsequently generated to maximise social value outcomes, determine employment opportunities and skills planning. To aid local community recovery we seek to identify and source wherever possible products and services from within the local community. Layer 7 has a fully flexible working policy such that our staff may work fully remote, fully office based or a hybrid approach which is fully their choosing dependent upon current circumstances and mental wellbeing. Through a variety of tools and technology we ensure our Layer 7 Team stays connected and constantly communicating with each other, so no individual feels isolated. Our Layer 7 wellbeing programme aims to support our staff incorporating both mental and physical wellbeing as we emerge from COVID and beyond. Through our Mental Health Leaders and healthy lifestyle support plans, Layer 7 is seeking to support its staff and reduce the demand on health and care services. We also share and promote details of local and national mental health campaigns for staff to be made aware of what support is available We have extended our flexible working model to our supply chain, such that we work collaboratively together to assist our suppliers to deliver their services and products to us leveraging new innovative ways to facilitate their recovery. As part of our ISO 9001 accreditation, we monitor the training requirements of our staff to ensure that individuals have the necessary competence to meet the needs of our clients, the business and our quality management system.

  Tackling economic inequality

  Social purpose is embedded into Layer 7. From creating new businesses and new employment opportunities, to improving education and training, Layer 7 is committed to tackling economic inequality root and branch. Our vision is to help reduce the unequal distribution of income and opportunity between different groups in society. Layer 7 is committed to working with small, diverse, high-quality suppliers. We have a Layer 7 Supplier Diversity function which endeavours, on a good-faith effort basis, to work with and develop small, minority, and women-owned businesses. Our team is always looking for small and diverse suppliers that can deliver creative, high-quality products and services. Ultimately, our goal is to diversify our supplier base by encouraging small and diverse suppliers to compete for business. Layer 7 is committed to supporting ex-forces personnel and their families. We are a signatory of the Armed Forces Covenant, a commitment to the people who have served the nation through military service. The covenant helps members of the armed forces community have the same access to services and employment opportunities as anyone else. As a SME we are committed to leveraging and forming new relationships with emerging fellow micros and SMEs. Where we don’t have the vertical expertise in house, we will seek to identify and source wherever possible from a start-up, micro or SME. As part of our commitment to developing and providing opportunities for the next generation of cyber defenders, Layer 7 has started the process of becoming a NCSC CyberFirst employer to engage young people and provide them with valuable paid experience.

  Equal opportunity

  We are dedicated to encouraging a supportive and inclusive culture amongst the whole workforce and strive to promote diversity and eliminate discrimination. Our aim is to ensure that all employees and job applicants are given equal opportunity and that our organisation is representative of all sections of society. Each employee will be respected and valued and able to give their best as a result. Layer 7 is a Disability Confident employer and are on a roadmap to achieving Level 3 - Disability Confident Leader. through our recruitment processes we strive to remove any potential subconscious bias by utilising anonymisation processes prior to any applicant cv sifting and engage external independent specialist observers as part of our entire interview processes. Through our Employee Continuous Development Plans, all staff follow a training and skill enhancement plan which is available to all and develops new skills, leading to industry recognised qualifications. Each plan is tailored to the individual. We ensure our workforce is representative of the communities served as part of each awarded contract and identify work opportunities for disadvantaged people. In tackling modern slavery we publish a slavery and human trafficking statement which demonstrates the steps we are taking to prevent modern slavery. Our supply chain assurance process and supplier code of conduct formally detail how we expect our suppliers to operate to avoid labour exploitation and include clauses on modern slavery in our / their contracts. We monitor our supply chains regularly evaluating our direct and indirect suppliers. We perform a human rights impact assessment on any potential new engagement, identifying high-risk areas where modern slavery could exist We train our staff on how they can report their concerns and whistle blow on modern slavery

  Wellbeing

  Layer 7is committed to continuing to create a workplace culture that promotes and supports the health and wellbeing of all staff. Colleagues have access to our Employee Assistance Programme, where free, confidential help can be sought if needed. We aim to support and the health and wellbeing of our people, both physically and mentally, to enable them to be the best possible version of themselves. Wellbeing at Layer 7 is split into three areas, Physical, Mental, and Social. Within the ‘physical’ space, we aim to raise awareness of the importance of physical activity for managing stress and maintaining mental wellbeing. Within the ‘mental’ space, we provide a safe, non-judgemental environment for our colleagues to ensure that everyone feels happy and engaged both inside and outside of work. We also have trained Layer 7 Mental Health First Aiders who are on hand to support our colleagues. Within the ‘social’ space, we have a dedicated team who ensure that we stay connected as a firm. We run many initiatives and events to raise awareness and promote wellness. Recent events have included Stress Awareness Month, Mental Health Awareness Week, and World Mental Health Day, amongst others

Pricing

• Price: £275 to £1,250 a unit a day
• Discount for educational organisations: No

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at chris.tait@layer7.uk. Tell them what format you need. It will help if you say what assistive technology you use.