MLL TELECOM LTD.

Cloud Managed LAN and Wi-Fi

MLL’s Secure Cloud Managed LAN and Wi-Fi service provides a fully managed, cloud-based networking capability for organisations using enterprise LAN switching and wireless platforms. The service supports the procurement, installation, operation, monitoring, and ongoing management of network infrastructure through cloud management platforms managed by MLL Telecom with 24/7/365 support.

Features

• Cloud-based management providing visibility and control of wired/wireless networks
• Zero-touch deployment of devices and configuration policies
• Machine-Learning derived insights and comprehensive visual dashboards
• Real-time and historical network performance monitoring and optimisation
• Highly Available networking platform with 99.95% Uptime SLA
• Rapid feature and fix availability, operating in continuous delivery mode
• Single pane of glass management
• Flexible licensing aligned to device type and operational requirements

Benefits

• Unified management of LAN switching and wireless infrastructure
• Secure access controls for management platforms using role-based permissions
• Scalable architecture supporting multi-site and distributed environments
• Automated onboarding and provisioning of network devices using zero-touch deployment
• Remove complexity with clear actionable insights
• Automate and simplify guest onboarding and management
• Role-based access control ensuring management access is restricted and auditable
• Policy-based network access controls enabling consistent security enforcement

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at gcloud@mlltelecom.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

354478432998521

Contact

Ellie Coome
01628 495 400
gcloud@mlltelecom.com

About your service

• Service categories:

  Systems Infrastructure Software

  Network

  Network infrastructure software

  • Software-defined networking (SDN)

  Network management

  • Network operations management (NOM)
• Multi cloud support: Yes

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Private cloud
• Service constraints: Managed devices must have internet access and applicable firewall rules to allow connectivity to the Cloud Management platform.
• System requirements: Internet connectivity

User support

• Email or online ticketing support: Yes
• Support response times: Within 1 hour
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: Yes
• Support levels: MLL's support for this service is 24x7x365 and includes on-site support where required. The service includes access to MLL technical and commercial support.
• Support available to third parties: No

Onboarding and offboarding

• Getting started: MLL and Buyer agree service outcomes and post support sales support. This will include user acceptance testing, training, provision of support documentation and access to MLL's support services.
• Service documentation: Yes
• Documentation formats:
  • ODF
  • PDF
  • Other
• Other documentation formats: Microsoft Word
• End-of-contract data extraction: No user data is stored by MLL as part of this service. At the end of the service MLL will provide the customer with IP addresses, assets information and other service metrics as part of an agreed exit plan.
• End-of-contract process: MLL will work with the Buyer to ensure a smooth exit from the contract. An exit plan is prepared and agreed with the Buyer and costs associated with MLL exit services are clearly defined and agreed in advance.
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: Documentation can be made available electronically via a service portal and through email.

Using the service

• Web browser interface: No
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: No
• User support accessibility: None or don’t know
• API: No
• Customisation available: No

Scaling

• Independence of resources: Guaranteed logical separation which allows customers to grow their capacity incrementally. MLL monitors and manages the service 24x7x365 including capacity to ensure thresholds are not exceeded.

Analytics

• Service usage metrics: Yes
• Metrics types: Incident reporting and service resolution management.
• Reporting types:
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: Fortinet and HPe Aruba

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CHECK service provider
• Protecting data at rest:
  • Physical access control, complying with another standard
  • Encryption of all physical media
• Data sanitisation process: Yes
• Equipment disposal approach: A third-party destruction service
• Data sanitisation type:
  • Explicit overwriting of storage before reallocation / Secure Erase
  • Physical Destruction / Hardware containing data is completely destroyed

Data importing and exporting

• Data export approach: By service request to MLL.
• Data export formats:
  • CSV
  • ODF
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: 99.95%
• Approach to resilience: Available on request.
• Outage reporting: Services are proactively monitored and any detected outage is automatically logged in MLL’s IT Service Management system. Users are advised by email, through the service portal and optionally by phone when an outage occurs.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Dedicated link (for example VPN)
  • Username or password
• Access restrictions in management interfaces and support channels: Role based access control (RBAC) is used.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Limited access network (for example PSN)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: MLL maintains an information security management system (ISMS) that is certified to meet the requirements of the ISO 27001:2013 standard, as well as, PSN Service Provider (PSNSP) certification and Cyber Essentials Plus certification. A risk management process based on ISO27005:2011/BS7799-3:2017 underpins the MLL ISMS.; Information policies and procedures are managed by our Senior Risk Information officer (SIRO). All policies and procedures are audited as part of an internal audit plan to ensure compliance.; Security incidents are managed through to resolution using a Major Incident Management procedure, regular hourly updates, escalation and a major incident report on resolution.
• Software Security Code of Practice: No

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: MLL has a change management policy within its ISO27001 certified ISMS. All changes are change-controlled. A change advisory board is run weekly. All changes require approval. Customer approval is sought for any changes that may impact customer services. Testing and rollback plans are required for changes.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: MLL has a patch management policy within its ISO27001 certified ISMS.; The target for the application of critical patches is 14 days and 30 for all others.; Vendor notifications are subscribed to and are triaged for service relevance by MLL technical teams. The application of patches is managed via the change management process.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: MLL has an audit logging policy within its ISO27001 certified ISMS.; The underlying platform is monitored by MLL support staff. Security incidents are managed as incidents in the MLL IT service management platform.; Incidents are responded to within 20 minutes and rectified in line with service level agreements.
• Incident management type: Supplier-defined controls
• Incident management approach: MLL has a security incident management policy within its ISO27001 certified ISMS.; Incident leads are nominated to manage any security incidents. A record is kept of all actions and incidents are reviewed for trends by MLL's management review process. Security Incidents are reported through the nominated service delivery manager to a cadence agreed with the Buyer during service establishment.; Buyers can log incidents by telephone, email or through the MLL service portal.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: Yes
• Connected networks:
  • Public Services Network (PSN)
  • Health and Social Care Network (HSCN)

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0.0%
• Between £250,000 and £500,000: 0.25%
• Between £500,001 and £1,000,000: 0.5%
• Between £1,000,001 and £2,500,000: 1.0%
• Between £2,500,001 and £5,000,000: 1.5%
• Over £5,000,001: 2.0%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: United Registrar of Systems (URS)
• ISO/IEC 27001 accreditation date: Sunday 11 May 2025
• What the ISO/IEC 27001 doesn’t cover: 3 technological controls are excluded.; • 8.4 Access to source code; MLL does not undertake any program development activities; ; • 8.11 Data masking; The People Team process special categories of employee personal data , including but not limited to race; ethnic origin; biometric data, health data, sexual orientation, payroll data, Government-issued identifiers (e.g., Social Security Numbers, National IDs) etc.; Only 3 authorised personnel with a legitimate business need in the People Team have role-based access to the secured HR Mailbox and HR Folder that holds all HR related data. HRIS System permissions are set up based upon the job role. Data is encrypted both at rest and in transit using strong encryption algorithms. In transit is TLS1.2 or higher and at rest has AES-256 key encryption. These are sufficient security controls to protect the special category data we manage. Therefore, currently we do not necessitate the implementation of data masking techniques.; ; • 8.28 Secure coding; MLL does not undertake any program development activities
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: United Registrar of Systems (URS)
• ISO 9001 accreditation date: Saturday 10 May 2025
• What the ISO 9001 doesn’t cover: Nothing. The certification applies to all departments, services, activities and information assets of MLL, and the scope includes all the operational processes in relation to determining, administering and maintaining client and business requirements. Inclusive of: -; • Information that is the intellectual property of MLL.; • Personal information relating to employees of MLL.; • Client information held by MLL.; • Sites & equipment used by MLL.; • Personnel, IT systems, manual systems, tools and data.
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 2a416b6d-c321-4871-abe2-795a6a75122b
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: F7c6261b-9bfd-4145-8e63-a088407a153d
• Other security certifications: Yes
• Any other security certifications:
  • Health and Social Care (HSCN) Certificate of Compliance
  • NHS Digital – Data Security and protection Toolkit
  • PSN connectivity service compliance certificate

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • New apprenticeships on the contract workforce in the relevant area that meet the criteria set out in MAC 1b
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Plans to engage the contract workforce in deciding the most important workplace issues to address
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Volunteering opportunities for staff
    • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering
    • Delivery of apprenticeships, supported internships and T Level industry placement opportunities (Level 2, 3 and 4+) in relation to the contract

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Activities that demonstrate a collaborative way to work with a diverse range of businesses as part of the supply chain
    • Measures for making facilities used in the delivery of the contract available for community groups, education or training

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

    • Creation of outreach activities to create a pipeline of employees for the future contract delivery
    • Content of the outreach activity is designed to suit the target cohort

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
    • Actions to invest in the physical and mental health and wellbeing of the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at gcloud@mlltelecom.com. Tell them what format you need. It will help if you say what assistive technology you use.