NORTHROP GRUMMAN UK LIMITED

Secure Cloud Transformation Service

Northrop Grumman's Secure Cloud Transformation Service helps organisations to explore, modernise and optimise their Cloud Operations. We offer Cloud Migration, Cloud Application Modernisation, Secure by Design Landing Zone Operations, Data Engineering, Data Science (AI/ML) and more; delivered by cross functional teams underpinned by Agile Software Development and DevSecOps best practice.

Features

• DEVELOP MISSION READY CLOUD APPLICATIONS: Spanning the entire system lifecycle
• MANAGE CLOUD OPERATIONS: Support customer Cloud solutions through cross-functional teams
• SECURE BY DESIGN LANDING ZONE OPERATIONS: Embedding Zero-Trust (ZTA/ZTN) methodologies
• AGILE SOFTWARE DEVELOPMENT: Agile teams, Data Architects, Engineers, AI/ML experts
• DevSecOps: Capability development and delivery through secure pipelines
• SUPPORTING THE CREATION OF STRATEGIC SYSTEM ROADMAPS: Promoting stakeholder buy-in
• PROJECT PLANNING AND DELIVERY: Assisting requirements elaboration for successful delivery
• DATA ENGINEERING & ANALYTICS: Maximise insight and value from data
• COMPLIANCE AND REGULATION: Ensure data is secured and GDPR compliant
• CLOUD COST MANAGEMENT AND OPTIMIZATION: Improve Value for Money

Benefits

• Improve mission agility through consistent, repeatable, efficient and effective tooling.
• Leverage automation and AI/ML, to free up valuable development resource.
• Improve data security with role-based access and encryption of data.
• Uncover new mission insights with analysis of multiple data sources.
• Insight and understanding of future cloud costs and budgeting.
• Improve data processing combining Centralised, Edge, Fog and Streaming technologies.
• AI/ML to identify previously unknown relationships, patterns and anti-patterns.
• Combine Business, Mission Needs and Ways of Working considerations
• Experienced Partner whose core competency is enabling critical government missions.

£548.55 a unit

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at proposals@uk.ngc.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

369987473380903

Contact

GCloud Business Development Team
+44 020 7930 4173
proposals@uk.ngc.com

Planning

• Planning service: Yes
• How the planning service works: DISCOVER: NG use tools and processes developed through lessons learnt from delivering multiple transformation programmes. Working with your key stakeholders we gain an understanding of your existing applications, data, mission requirements, and how you intend to use your systems. ; ; MISSION ALIGNMENT: We create a shared vision of how to best meet your organisation’s strategic and tactical objectives. Cross-function teams discover and develop means of delivering increased value that drive your mission forward. ; ; ASSESS: Information collected during discovery guides assessments of applications and environments. The use of processes, surveys, checklists, and tools presents a comprehensive picture of applications with respect to their transfer-ability, changeability, resilience, performance, and security. This phase also includes prioritising near-term actions to address application quality, security, and performance issues, enabling better informed, data-driven decisions regarding the their future state.; ; DEFINE: We use road-maps, application readiness assessments, and hosting cost models to determine the proper disposition and prioritisation of assets. This phase enables you to exploit innovation, capitalise on previously unknown opportunities, and de-conflict issues arising from making decisions to retire, retain, re-host, revise, re-architect, rebuild, or replace applications. Joint solution design reviews obtain agreement on the future state architectures and plans which drive adoption of future-state decisions.
• Planning service works with specific services: No

Training

• Training service provided: Yes
• How the training service works: Training can be provided for any mission application developed and maintain by Northrop Grumman. Training may be provided in the form of classroom based learning delivered in person or via video conferencing and self-help web pages.
• Training is tied to specific services: Yes
• Services the training service works with: Products developed by Northrop Grumman, hosted on Amazon AWS

Setup and migration

• Setup or migration service available: Yes
• How the setup or migration service works: NG’s Application Migration Pathway provides a methodology for successfully migrating, operating and managing applications within a Cloud environment. Each candidate from the roadmap passes through the Migration Pathway;; ; SOLUTION MODEL: Reassesses the recommended solution / Solution Architecture / Identify and employ reusable common service. Outcome - Recommend solutions. ; ; VIABILITY ASSESSMENT AND PLANNING: Risk evaluation / Capacity manage / Return on investment (ROI) / Security assessment. Outcome - Understanding of Risk, Security and Cost.; ; PROOF OF CONCEPT: Detailed reference architecture and design for proof of concept (POC) / POC set up / Implement & Test POC / Re-evaluate and update risk and ROI. Outcome - Functional Prototype for Testing and Evaluation. ; ; PRE-MIGRATION SET-UP: Update and refine reference architecture and design / Establish service level agreements / Resource provisioning / Development and test environment set-up / Exit strategy and business continuity plan / Training. Outcome - Preparation of resources. ; ; MIGRATION OF DATA / SOFTWARE MIGRATION: Resource provisioning / Integration / Testing, validation and quality assurance / Certification & Accreditation / Deployment. Outcome - Cloud based capabilities active. ; ; POST MIGRATION: Resource utilisation monitoring and management / Security and compliance monitoring / Service level agreements. Outcome - Efficient and effective Cloud Operations.
• Setup or migration service is for specific cloud services: Yes
• List of supported services:
  • Amazon Web Services (AWS)
  • Microsoft Azure

Quality assurance and performance testing

• Quality assurance and performance testing service: Yes
• How the quality assurance and performance testing works: Northrop Grumman leverages a Software Factory methodology, which is an automated DevSecOps pipeline to provide a consistent and repeatable software development experience; improving quality and security of the final product. We employ professional Mission Assurance personnel to oversee quality in the migration and development process.; ; During development, we provide continuous testing; the process of executing automated tests in the CI/CD pipeline for feedback on the viability of the software build or release. Continuous Testing involves developers, testers, security, and mission owners working together to ensure software is properly tested and vetted before delivery.; ; The use of end-to-end automated testing enables the delivery of higher quality software. Northrop Grumman integrates tools with integrated testing frameworks in our Software Factory methodology to enable the automatic execution of quality and performance tests. Continuous Testing is a key part of a total quality software delivery approach, enabling teams to rapidly deliver and deploy software which best satisfies mission requirements. ; ; Our techniques ensure consistent execution of unit, integration, and regressions test. Testing tools which simulate tens, hundreds or thousands of virtual users interacting with the application or services are applied to assure performance scales appropriately to serve mission needs.

Security testing

• Security services: Yes
• Security services type:
  • Security strategy
  • Security risk management
  • Security design
  • Cyber security consultancy
  • Security incident management
  • Security audit services
  • Other
• Other security services:
  • Cloud Security
  • Export Controlled Cloud Workloads
  • Secure Landing Zone Design
  • Secure Cloud Operations
  • UK Sovereign Cloud Operations

Ongoing support

• Ongoing support service: Yes
• Types of service supported: Hosting or software provided by your organisation
• How the support service works: Northrop Grumman partner with AWS to offer a technical Support Service working within multi-disciplinary DevSecOps Scrum Agile teams to create and run operational capabilities. ; Site Reliability Engineers with specialist practical knowledge and experience of DevSecOps / SRE tools and methods focus on ensuring sustainable improvement of the service through increased automation of testing, deployment and observability covering the NG delivered services and customisations.; NG also work closely with Microsoft and other cloud providers to ensure we provide holistic multi-cloud solutions.

Service scope

• Service constraints: Northrop Grumman is focused on mission enablement and the development and modernisation of mission applications. As our forte is Digital Transformation of organisations in military, intelligence and police, we do not typically transform commercial business applications such as ERP, Payroll, HR, or General IT unless they are part of a larger mission capability.

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: NG will work with your organisation to set initial response and fulfilment times as part of a Service Level Agreement (SLA).
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Web chat
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: None or don’t know
• How the web chat support is accessible: Web chat is tailored to the customer preference. The team can interface with the customer IT Services team or provide a COTS web chat solution to meet the customer needs.
• Web chat accessibility testing: N/a
• Support levels: NG Service Desks are shaped and scaled to fit your organisation providing the point of contact between product developers and users. Our service desk assists throughout the entire product lifecycle to ensure users receive help promptly whether it be handling service requests, post design services, critical incident, change, problem, release and deployment management. ; ; NG provides 1st, 2nd and 3rd line support as a standalone service or working seamlessly with your organisations support teams. Systems are supported by DevSecOps teams with ITIL practice overseen by service managers. Teams utilise automation to increase accuracy and efficiency using monitoring systems to generate support tickets. ; ; DevSecOps Teams document common fixes and workarounds and gradually handover to cost-effective first and second-line customer support teams. Supported systems are recorded in knowledge bases that can be accessed by all levels of support.; ; NG utilises a range of accessible communication solutions including self-help, web chat, ticketing services and phone support dependent on your organisation’s needs. ; Tickets are prioritised within service management tools and are subjected to service level agreements that determine response times. Priorities are handled by a central incident management team who have the ability to escalate and coordinate rapid responses to ensure timely resolution.

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: AWS Advanced Partner

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Developed Vetting (DV)

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: Lloyd’s Register Quality Assurance
• ISO/IEC 27001 accreditation date: Original Approval 07-Apr-2004, Current Certificate 22-Jul-2021
• What the ISO/IEC 27001 doesn’t cover: The NGUKL Statement of Applicability (SoA) defines the information security controls specified in the ISO 27001 standard that are applicable to NGUKL. The NGUKL SoA identifies only two ISO 27001 requirements that are out of scope, as follows:; ISO 27001 Ref. A.14.1.2 ; ISO 27001 Requirement: Securing application services on public networks Information involved in application services passing over public networks shall be protected from fraudulent activity, contract dispute, and unauthorised disclosure and modification. ; Justification: Not Selected. Applications for internal use only, or secure network for client information. Services not available to public.; ISO 27001 Ref.A.14.1.3; ISO 27001 Requirement: Protecting application services transactions Information involved in application service transactions shall be protected to prevent incomplete transmission, mis-routing, unauthorised message alteration, unauthorised disclosure, unauthorised message duplication or replay. ; Justification: Not Selected. Applications for internal use only, or secure network for client information. Services not available to public.
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: Yes
• Any other security certifications:
  • ISO 14001
  • ISO 9001:2015 Quality Management Systems (QMS)
  • ISO/IEC 20000-1:2018 Service Management Systems
  • ISO/IEC 27001:2022 - Information security management
  • ISO 27017 - Cloud Information Security Management System
  • ISO 27018 - Protecting PII in public cloud computing environment

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  Strong leadership in environmental sustainability and climate change is a priority for Northrop Grumman. We are taking meaningful actions to conserve natural resources, reduce emissions and drive toward a climate resilient future by linking environmental performance to executive compensation, committing philanthropic giving to the environment and maintaining a thriving environmentally focussed employee resource group.; Our next generation environmental sustainability goals will help us measure our sustainability progress and successes and include a commitment to Net zero greenhouse gas emissions in operations by 2035; sourcing 50 percent of total electricity from renewable sources by 2030 and setting and achieving pioneering targets in environmental stewardship by 2025.; We are partnering with AWS, a company that shares our commitment to environmental sustainability.; AWS is committed to running their business in the most environmentally friendly way possible and to powering operations with 100% renewable energy by 2025, five years ahead of their original target. In 2020, AWS became the world’s largest corporate purchaser of renewable energy, reaching 65% renewable energy across the business.; There are also environmental benefits inherent to running applications in the cloud. A study by 451 Research found that AWS infrastructure is 3.6 times more energy efficient than the median of surveyed enterprise data centres. More than two thirds of this advantage is attributable to a more energy efficient server population and higher server utilisation. AWS’s scale enables them to achieve higher resource utilisation and energy efficiency than other enterprise data centres. AWS data centres are also more energy efficient than enterprise sites because of comprehensive efficiency programmes that touch every facet of the facilities. For instance, when 451 Research factored in the carbon intensity of consumed electricity and renewable energy purchases (which reduce associated carbon emissions), they found that AWS performs the same task with an 88% lower carbon footprint.

  Covid-19 recovery

  Throughout the pandemic, NG remained focused on delivering for customers, whilst assuring the health and safety of our people.; Recognising the mental health challenges, we held sessions on wellbeing and provided online tools for staff. We promoted our longstanding mental and physical health provisions available to employees, such as our Mental Health First Aid volunteers and the Perks at Work scheme which offers fitness, meditation, and personal development classes.; We encouraged home working in line with government guidance, supported flexible commuting times for key workers and rolled out Cloud Academy digital training to support continued professional development from home for employees. In our Cyber Division, we have taken this time to use the pandemic as a learning opportunity - creating ‘upskilling boot camps’ allowing members to complete online training and reskill to fit our customers changing needs, resulting in successful redeployment of staff to new projects. We have now implemented a long-term hybrid working option, alongside a managed approach to staff returning to office locations, meeting employee, community and customer needs.; We have not furloughed any staff, nor made any redundancies as a result of Covid-19. We continued to recruit, creating new opportunities for individuals out of work due to Covid-19. In total, we have welcomed over 150 new employees since the start of the pandemic in March 2020.; ; We also contributed to the fight against COVID using technological innovation. In March 2020, we ran an innovation challenge to explore how our engineers could create solutions to support the relief effort. NG funded and developed an outbreak visualisation and Integrated Data environment to help decision makers better understand where Covid cases were and improve decision making around allocation of resources. Over the past two years, we empowered employees to innovate, design and manufacture critical technologies to support the pandemic response.

  Tackling economic inequality

  Northrop Grumman is committed to creating new jobs and new skills across the UK, particularly in under-served areas where there is a requirement to grow local opportunities. Through investment in STEM outreach, STEM skills development and through a multi-site, multi-classification retention and recruitment strategy, we directly impact the long-term prosperity of the UK.; We continue to develop and refine our plan, consisting of:; - Ongoing assessment of the skills shortage in the market. NGUK and our resourcing partners undertake regular market analysis, as well as identifying key drivers for potential candidates; - Refine and update our facilities strategy to provide opportunities for growth in parts of the UK requiring investment; - Anticipating our future workforce requirements by examining trend data from our customers; - Identifying deprived geographic and under-represented groups to target via talent leads and monitoring our DE&I data to prioritise initiatives to attract and hire people.; ; NGUK has a well-established Early Careers (EC) programme, comprising apprenticeships, graduate schemes and paid internships. We recruit against aptitude and attitude and have removed the requirement of UCAS (A Levels) and 2:1 degree to ensure we bring through the best talent from any college, school and university. ; ; To bridge the shortfall of Suitably Qualified and Experienced People (SQEP) in the UK in Cloud and Software skills, NGUK are developing innovative approaches to recruitment by proactively engaging with multiple talent pools across the UK, all focussed on bringing outside communities into the industry. We have established mentoring programmes for job seekers through our talent partners to support career changers from deprived locations/under-represented groups looking to join the tech industry.; ; We believe that addressing economic inequality and growing long-lasting supply chain resiliency must be rooted in growing skills. Northrop Grumman continues to work with various educational organisations to deliver meaningful and lasting change.

  Equal opportunity

  NGUK is committed Diversity, Equity and Inclusion (DE&I) to develop a fair and equitable workplace where everyone can be themselves and thrive. Our DE&I strategy is ambitious, practical but critically introspective, so we can set initiatives, measures and goals to tackle inequalities and have a workforce that reflects the communities where we work. ; We take an inclusive approach to recruitment, bringing in best practice from specialist organisations. Building on this experience, we continue to promote inclusion of people with protected characteristics and from disadvantaged communities, continuously evaluating methods to support these groups into employment. Examples initiatives include:; - Using targeted job boards to advertise opportunities, including Stonewall’s Inclusive Employers platform, Association for Black and Ethnic Minority Engineers, Women in Science and Engineering (WISE), Women in Defence, Forces Families Jobs. ; - Partnering with recruitment specialists to evolve non-traditional employment routes, including NIYO Bootcamps, AWS re/Start and WithYouWithMe. ; - Providing ND candidates with alternative options to traditional interviews, such as task-based assessments; At NGUK, we empower people to shape their career journey. To support skills development of under-represented groups, we analyse workforce data and implement initiatives to bridge any gaps in skills and progression. Examples include unconscious bias training for Line and Hiring managers, bespoke skills development programmes such as WiSE (Enterprise Women in Science and Engineering), access to mentors and taking a transparent approach to promotion and lateral moves – with all job opportunities advertised via internal employees’ communications channels. ; NGUK are committed to addressing inequalities in pay, conducting pay equity audits based on protected characteristics and taking remediation actions. Since our first report in 2017, our mean gender pay gap has dropped from 27.3% to 9.2 % in 2023. ; As signatories of the Women in Defence charter, we are committed to reaching the vision of 30% female representation by 2030.

  Wellbeing

  NGUK recognise that the nature of our work and the environment within which we operate can bring unique challenges to the physical and mental wellbeing of our people. ; Irrespective of any legal duty, we are committed to taking a holistic approach to our employees’ wellbeing by providing policies, resources, benefits and support, encompassing all elements of wellbeing, which in NGUK we define to be:; - PHYSICAL: Acknowledging the importance of physical activity, nutrition and sleep, whilst also ensuring safe working conditions; - MIND: Coping effectively with life, accepting and managing emotions positively and dealing with life’s stressors, changes and challenges; - FINANCIAL: being money confident and feeling satisfied with current and future financial situations; - COMMUNITY: developing positive, strong working relationships and feeling a sense of belonging; - FULFILMENT: discovering a sense of purpose, meaning and satisfaction in your role, and; - INTELLECTUAL: opportunities to expand your knowledge, skills and experiences and demonstrating creativity, critical thinking and curiosity.; To measure the effectiveness of our wellbeing programme, we conduct Employee surveys seeking feedback, these are anonymous to encourage honest and open responses. Within projects, we actively measure team health, including mental health reviews, allowing us to quickly make improvements and encourage our people to have open discussions about wellbeing. The outputs are used to form action plans, these are tracked with progress reported to employees during All Hands meetings. ; NGUK have signed the Mental Health at Work Commitment and are implementing the 6 Standards across our business. Examples include providing employees with tailored physical workspaces, including quiet areas and the ability to work from home; tools and products for employees including private healthcare, Employee Assistance Programmes with access to counselling, Mental Health First Aiders and Perks at Work – an online platform offering a range of fitness and financial wellbeing classes.

Pricing

• Price: £548.55 a unit
• Discount for educational organisations: No

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at proposals@uk.ngc.com. Tell them what format you need. It will help if you say what assistive technology you use.