Sopra Steria Ltd

Cloud Readiness Assessment

The Cloud Readiness Assessment Service provides analysis and guidance to facilitate migration planning and execution to the cloud, evaluating infrastructure, applications, and security measures. This ensures optimal cloud adoption aligned with UK government standards and objectives.

Features

• Comprehensive Infrastructure Eval: Assessing current infrastructure for seamless cloud integration
• Application Suitability Analysis: Identifying applications suitable for migration and optimization
• Security Assessment: Evaluating security measures for robust cloud deployment
• Compliance Alignment: Ensuring adherence to UK government regulations and standards
• Cost Analysis: Providing insights into cost implications and optimisation strategies
• Performance Optimisation Recommendations: Streamlining performance for enhanced efficiency
• Risk Mitigation Strategies: Measures to mitigate potential risks during migration
• Vendor Selection Assistance: Select cloud service providers aligned with requirements
• Migration Roadmap Development: Creating a detailed ‘wave’ plan
• Ongoing Support: Offering continued support post-migration for sustained success

Benefits

• Strategic Roadmap - Roadmap for the customer cloud migration journey
• Cost Optimisation - Understand the operational costs for CapEx/OpEx
• Performance Enhancement - Improve the performance of applications and systems
• Scalability and Flexibility - Determine the scalability and flexibility improvements
• Prioritise applications are suitable for migration, retirement, replacement, or re-factor
• Identifies compliance concerns and provides strategies for meeting regulatory requirements
• Vendor agnostic recommendations based on business requirements and goals
• Complete Asset assessment of on-premises estate
• Multiple graphical views of infrastructure and applications
• Simple deployment of the Assessment toolset and ease of use

£455.00 a unit

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at soprasteria-gcloud@soprasteria.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

368843987103381

Contact

Sopra Steria G-Cloud Team
0370 600 4466
soprasteria-gcloud@soprasteria.com

Planning

• Planning service: Yes
• How the planning service works: 1. Initial Client workshops to understand client goals, stockholders, requirements, roadmap strategy, existing infrastructure, and desired outcomes; 2. Scope Definition planning to determine the scope, including assets, applications, and dependencies to be evaluated; 3. Tool selection and deployment planning, Discovery, and Asset Gathering: toolsets are deployed to comprehensively gather data on existing assets, configurations, and dependencies, providing a holistic view of the IT landscape; 4. Migration Planning: Detailed migration plan is devised, outlining the sequence, and understanding the discovery data to group co-dependent application stacks into migration groups or waves; 5. Timeline and Resource Allocation: Plan the assessment timeline and allocate resources, including personnel with the necessary expertise; 6. Communication Protocols: Plan regular update meetings on progress for collaboration between the client and assessment team; 7. Deliverables and Reporting: Outline deliverables, such as assessment reports and recommendations, and establish a reporting structure to provide actionable insights
• Planning service works with specific services: No

Training

• Training service provided: Yes
• How the training service works: Since the Cloud Readiness Assessment service is deployed, set-up and monitored by SSG, very minimal training, if any, is required. That said, the tool deployment is straightforward, and the interpretation of the results is largely self-explanatory. Where needed, a presentation of the service, its constituent parts and description of the multiple view of the data generated can be delivered. Usually, after a period, typically 2 to 3 months, the Cloud Readiness assessment is complete, so it is no longer necessary to continue to licence and run the service.
• Training is tied to specific services: No

Setup and migration

• Setup or migration service available: Yes
• How the setup or migration service works: 1. Tool Deployment, Discovery, and Asset Gathering: Discovery appliance is deployed to comprehensively gather data on existing assets, configurations, and dependencies, providing a holistic view of the IT landscape; 2. Readiness Assessment: Tool set conducts a thorough assessment of infrastructure, applications, and security measures to gauge cloud readiness, identifying optimisation opportunities and potential challenges; 3. Migration Planning: using discovered data, a detailed migration plan is devised, outlining the sequence, resource allocation, and timeline for each migration phase to ensure a structured approach; 4. Phased Migration Execution: Executing the migration plan in phased increments, monitors and optimises the process in real-time, ensuring data integrity, performance, and security throughout; 5. Transition to Live and Service Handover whilst conducting comprehensive testing, validation, and service handover for uninterrupted cloud service utilisation, aligned with UK government standards
• Setup or migration service is for specific cloud services: No

Quality assurance and performance testing

• Quality assurance and performance testing service: Yes
• How the quality assurance and performance testing works: Utilising our experienced in-house capability Sopra Steria is able to provide: ; • Accessibility testing – for users who require assistive technologies; • Application testing – Product integrity via bespoke automated or manual testing. Reporting on investigation results, bugs and issues.; • Data auditing – Data profiling against intended purpose; • Load and performance testing – Infrastructure and applications under realistic loads; • Process auditing – Review process integrity, take-up and applicability; • Software auditing – Specifications and standards requirements and compliance; • System auditing – Validity and suitability testing for IT architecture, configurations, practices and operations; Our proven quality and business management system “iQ” governs everything we do and everything we deliver. iQ is certified to the following standards:; • ISO 9001:2015 (Quality Management); • ISO 20000 (Service Management); • ISO 27001 (Information Security Management); • ISO 22301 (Business Continuity); • ISO 44001 (Collaborative Business Relationship Management); • ISO 14001 (Environment); In addition, we also are certified to Cyber Essentials and Cyber Essentials Plus and fully aligned to these industry best practice frameworks:; • ITIL 2011; • CMMI for Service; • CMMI for Development; • Prince2

Security testing

• Security services: Yes
• Security services type:
  • Security strategy
  • Security risk management
  • Security design
  • Cyber security consultancy
  • Security testing
  • Security incident management
  • Security audit services
  • Other
• Other security services:
  • Security accreditation and compliance support
  • ISO27001 certification audits and compliance support
  • GDPR assessment and compliance support
  • Security architecture support
  • Penetration testing, vulnerability management and scanning
  • Protective monitoring and threat intelligence
  • Above-Secret IT security services
• Certified security testers: Yes
• Security testing certifications:
  • GBEST
  • CHECK
  • CREST

Ongoing support

• Ongoing support service: Yes
• Types of service supported: Hosting or software provided by a third-party organisation
• How the support service works: Support is for the duration that the Cloud Readiness Assessment tools are running and gathering and analysing data. The Portal to which the interface to the data is delivered is in the AWS cloud. Support during the running of the service is provided by SSG and the 3rd Party supplier, for example, Flexera if the tool of choice is Cloudscape.

Service scope

• Service constraints: Some assessment tools may face constraints in discovering legacy or proprietary systems lacking standardised interfaces. It's optimised for major cloud providers like AWS and Azure but may have limited capabilities in hybrid or non-standard environments. Complex networking setups and very large infrastructures may pose challenges. Additionally, security restrictions and scalability limitations can affect its ability to access and analyse certain parts of the infrastructure.

User support

• Email or online ticketing support: No
• Phone support: No
• Web chat support: No
• Support levels: Sopra Steria offers a full range of support and service management options, which can be tailored to meet specific client needs and scaled to match the required level of support depending on the service requirement. Any service requirements and associated solutions would be explored prior to any order.

Resellers

• Supplier type: Reseller providing extra support
• Organisation whose services are being resold: Flexera CloudScape

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Developed Vetting (DV)

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: DNV Business Assurance
• ISO/IEC 27001 accreditation date: Date of last re-certification: 01 December 2023
• What the ISO/IEC 27001 doesn’t cover: N/A
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  Sopra Steria has committed to becoming Net Zero by 2028 and has been ranked in the top 1% of companies globally by CDP placing us on the A-list for our work tackling climate change over the past 5 years. ; ; Our work has a direct positive impact on our client’s services, for example through lower emissions, reduced waste, and more sustainable supply chains. ; ; Additional environmental benefits: We also provide contract-specific sustainability programmes for clients, which are designed & deployed by our team of Sustainability Consultants. During procurement, these experts will develop a sustainability programme based on a clients objectives, the material impacts, and opportunities within the service. ; ; We have experience in… ; • Undertaking service environmental impact assessments ; • Measuring energy consumption, and emissions generated, required to deliver a particular service (e.g., office use, business travel, use of technology and supply chain); • Evaluating the sustainability of technology products (e.g., GGICT, Energy Star, as well as product and service foot printing) ; • Making business case-backed recommendations, implementation roadmaps for improvements ; • Delivering improvement programmes ; • Reporting performance, using recognised reporting standards, accounting methods ; ; Influencing staff, suppliers, customers and communities: regarding our staff, we feature sustainability in our employee communications, and offer all employees paid volunteering time which can be used to support sustainability activities, such as beach cleans and climate hackathons.

  Covid-19 recovery

  Employment, re-training and other opportunities: In the high-growth Digital sector, Sopra Steria is continually developing the skills of our workforce, including via upskilling and reskilling initiatives, e.g. via a new Career Coach, or by extending our apprenticeship programme.Through our ‘Tech for Good’ programme, and the various Social Value programmes we design and deliver for our customers, we focus on jobs and skills for disadvantaged and under-represented groups, including those disproportionately affected by Covid. ; ; People and communities: Our ‘Tech for Good’ programme is designed to provide people, small businesses and VCSEs with skills they need to thrive and is focused on those from disadvantaged or under-represented communities. Since the beginning of the pandemic, we have transitioned to a hybrid-virtual programme to ensure continued accessibility. For example, we worked with ELATT, a digital skills charity, to create hybrid learning, ensuring those who were shielding or otherwise unable to access classroom learning, as well as those who most needed to be in a classroom to support their learning, could still participate. ; ; Organisations and businesses: In the first year of the pandemic, we ran free training courses for charities and SME’s – offering Microsoft Teams training and modules on cyber security and resilience. We continue to offer pro-bono consulting for charities to help them use technology to better serve their communities. ; ; Physical and mental health needs: Since the pandemic, we have put in place measures to prevent and manage risks to employee wellbeing – including the wellbeing of contracted staff – together with appropriate training and individual support, and initiatives to raise awareness of mental health issues at work. We have also trained ca. 60 Mental Health First Aiders. ; ; Workplace conditions: All our office locations have strict Covid safety protocols, with considerations for cleaning, ventilation, and occupancy.

  Tackling economic inequality

  1) New businesses, jobs, and skills ; ; Entrepreneurship and SMEs: Sopra Steria adheres to the Prompt Payment Code. SMEs provide us with innovative and agile solutions and deliver 50% of our work. ; ; Barriers to employment: We provide education, skills training, employment opportunities, such as mentoring, for those facing barriers to employment. ; ; Skills shortages: We address the digital skills gap inside and outside of our business through in-work and community learning opportunities. ; ; Educational attainment: We offer a number of skills development programmes, including apprenticeships. ; ; Influence: Staff are encouraged to use paid volunteer time to support our community innovation, entrepreneurship and employability initiatives. ; ; Suppliers must comply with our Supplier Code of Conduct, which requires workforce skills development. ; ; Our customer social value programmes include business competitions and work experience placements. ; ; We work with community organisations such as Villiers Park and Career Ready to deliver business, jobs, and skills programmes. ; ; 2) Supply chain resilience and capacity ; ; Diverse supply chain: We work to improve supplier diversity by: ; • Making it easier to do business with us ; • Measuring current supply chain diversity ; • Creating new VCSE partnerships ; ; Innovation & new methods: Through horizon-scanning, and supplier & industry collaboration, we support development of new technologies that improve public services, like our ethical data-driven approaches to serving vulnerable citizens. ; ; Collaboration: We have obtained the ISO44001 Collaborative Business certification. ; ; Cyber security: We are certified to Cyber Essentials Plus and ISO27001 standards. We require our suppliers to have resilient information security processes, and flow down necessary cyber standards. ; ; Influence: Staff undertake cyber security training, and participate in our innovation processes.; ; Suppliers are engaged through our Collaborative Business approach and must adhere to strict security requirements. ; ; We share knowledge with customers via our social value programmes, continual service improvement, industry engagements. ; ; We participate in community resilience, innovation forums such as techUK.

  Equal opportunity

  Sopra Steria’s vision is to create an inclusive culture that embraces difference as a source of creativity, innovation, and competitive advantage. Our Equality, Diversity & Inclusion (EDI) strategy, overseen by a dedicated EDI Manager, applies to contract workforces. ; ; 1) Disability employment gap ; Representation: We are a Disability Confident Committed Employer. Our partnership with Vercida helps us improve diversity through recruitment. ; ; Skills development: All employees are given access to on-and-off-the-job development. We also have initiatives such as our Disability Network, and also our partnership with Business Disability Forum which supports disabled employees in their skills development. ; ; Staff, suppliers, customers and communities: ; Staff - all employees can join our Disability Network. Our Disability Steering Group has employee representation and executive-level sponsorship. ; Suppliers - our Supplier Code of Conduct requires all suppliers to maintain high standards of EDI in their workforces. ; Customers - we regularly work with clients to improve accessibility in digital services. Example, we are providing insight to a client on the effects of digital transformation on accessibility. ; Communities - we work with community representatives in the design and delivery of our disability work.; ; 2) Workforce inequality ; Identify and tackle inequality: We have a range of initiatives to identify, tackle inequality in our workforce, e.g.: ; • Diversity data dashboards help us understand EDI indicators and inform our programmes. ; • Employee inclusion networks give employees in under-represented groups a voice in our EDI strategy. ; • We are working to recruit more people from under-represented groups. ; ; In-work progression: We offer opportunities for people from under-represented groups, such as our Female and Black and Ethnic Minority Employee mentoring programmes. ; ; Modern Slavery: as signatories to the UN Global Compact, we actively work to prevent human trafficking through pre-employment checks and transparent recruitment practices. Our Supplier Code of Conduct includes requirements for demonstrably preventing modern slavery.

  Wellbeing

  Sopra Steria is fostering a workplace where our people are actively supported to be healthy & well, and can talk openly about their mental health. ; ; 1) Improve health and wellbeing: Our company-wide health and wellbeing programme is for all our employees, including contracted staff, and includes…; • Work-life balance policy providing flexible and remote working options ; • Extensive employee assistance programme ; • Range of healthcare benefits ; • Employee Trust, providing financial support in times of hardship ; • Mental Health First Aiders, now with 60 trained staff ; • Calendar of virtual classes, including fitness, meditation, stress management, nutrition, and resilience ; ; 2) Improve community integration: ; ; Our outcomes-focused, and user-centred approach to Social Value means that in creating programmes for our clients, we engage community representatives by conducting user research and needs analysis. ; ; Health, wellbeing & community integration: influence staff, suppliers, customers, and communities: We engage all stakeholders in our Social Value work on Wellbeing, for example… ; Staff - in addition to the staff support described, we also equip our people to support others’ wellbeing, for example by ensuring people managers have additional wellbeing training and objectives. ; Suppliers - our Supplier Code of Conduct requires all suppliers to support the health and wellbeing of their workforce. ; Customers - our Social Value consulting team designs Social Value programmes tailored to clients’ Social Value priorities, including Health & Wellbeing. For example, we are providing pro-bono consulting to a national mental health charity to help them identify how to use technology to improve outcomes for service users. ; Communities - To play a positive role in all our communities, all employees are given 3 days paid volunteering annually, and we offer matched funding to support charitable fundraising.

Pricing

• Price: £455.00 a unit
• Discount for educational organisations: No

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at soprasteria-gcloud@soprasteria.com. Tell them what format you need. It will help if you say what assistive technology you use.