Skip to main content
Digital Marketplace

Beta Help us improve the Digital Marketplace - send your feedback

WAVENET LIMITED

Workspace Recovery & Continuity Cyber Workspace Recovery

Workspace Recovery & Continuity Cyber Workspace Recovery can provide you with a fresh, untouched and uninfected environment from network through to desktop and servers with physical and logical segregation away from your infected infrastructure.

Features

  • FlexPlace (for work area recovery)
  • FlexData (for data availability)
  • FlexConnect (for connectivity and communication)
  • Work together in any combination to deliver a safe environment
  • Available across the UK
  • Accessible within hours for incidents, meetings or peak requirements
  • Can be dedicated if required
  • BYOD/VDI all supported
  • Cyber recovery is enhanced with our Isolated Recovery Environment

Benefits

  • Provides alternative work space with short lead times
  • Keep your business running while an investigation is under way
  • Access to all relevant and associated technical equipment you need
  • Ability to continue delivering support and communications during a breach
  • Additional service for customers who take data protection services
  • Integrates with all our UC and CC solutions
  • Use of the space for ad-hoc requirements is available
  • Isolated Recovery Environment for forensic analysis

Pricing

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at publicsector@wavenet.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

3 8 0 6 4 3 1 2 3 7 9 9 7 0 5

Contact

WAVENET LIMITED Paddy Sheridan-Ruddy
Telephone: 07714737991
Email: publicsector@wavenet.co.uk

About your service

Service categories

IaaS

IaaS Compute

Virtualised x86

  • General purpose

Service scope

Service constraints
Appropriate connectivity from customer site into our Data Centres must be in place
System requirements
  • 1 Mb (or higher) internet connection
  • Microsoft Windows, Red Hat Linux or Android
  • Microsoft Internet Explorer 7 or Android
Cloud deployment model
  • Public cloud
  • Private cloud

User support

Email or online ticketing support
Yes, at extra cost
Support response times
Support levels Priority Response Update Frequency Resolution Time Description Priority 1 All incidents categorised as security incidents are treat as P1 Within 15 minutes Every 30 minutes unless otherwise agreed with customer In accordance with the availability within a service line, as defined in service credits With a target resolution of 2 hours Cloud specific: critical business impact, such as all users are unable to function within a service line Priority 2 Within 15 minutes Every 2 hours Within 4 hours Cloud Specific: high business impacts, such as all users at single site unable to function within a service line
User can manage status and priority of support tickets
No
Phone support
Yes
Phone support availability
24 hours, 7 days a week
Web chat support
No
Onsite support
Yes, at extra cost
Support levels
Support levels Our SLA for non-emergency support requests is as follows: Working hours (09:00 – 17:30) Activity Response time Resolution time Acknowledge receipt of request 2 Hours N/A Response from assigned resource 4 Hours N/A Escalation to specialist 8 Hours N/A
==============
This doesn’t include Invocations which are 24/7 where applicable.
Support available to third parties
No

Onboarding and offboarding

Getting started
On boarding activities are discussed at the start of a project. We have an extensive set of professional services available to help a smooth transition to cloud environments.
Service documentation
Yes
Documentation formats
PDF
End-of-contract data extraction
Customers will be able to extract any customer data from the servers and are not limited to the type of data that can be extracted. The type of data that can be extracted includes any customer generated content, metadata, structure and configuration data. There are several available tools that allow customer data to be extracted from VMware environments, these include free to use tools. Wavenet does not charge for data extraction, however some data extraction tools may need to be purchased if the current tools do not meet the standards required by the customer. Wavenet is happy to provide assistance when a customer needs assistance with data extraction/migration to another supplier. This will be charged at our standard daily consultancy rate. Individual files generated in the virtual environment can be extracted in the same format as they were created. A VMware OVF, VMDK or ISO image file is also available to extract from the environment. Wavenet will purge and destroy all customer data from any computers, storage devices and storage media at the end of the contractual period in line with ISO 27001 standards.
End-of-contract process
Off-boarding from the Wavenet infrastructure will follow the appropriately documented process. This will involve the extraction and removal of the customer data and customer-specific information from the Wavenet platforms. Data extraction at contract termination Customers will be able to extract any customer data from the servers and are not limited to the type of data that can be extracted. The type of data that can be extracted includes any customer generated content, metadata, structure and configuration data. There are several available tools that allow customer data to be extracted from VMware environments, these include free to use tools. Wavenet does not charge for data extraction, however some data extraction tools may need to be purchased if the current tools do not meet the standards required by the customer. Data formats Individual files generated in the virtual environment can be extracted in the same format as they were created. A VMware OVF, VMDK or ISO image file is also available to extract from the environment. Purging and destroying customer data Wavenet will purge and destroy all customer data from any computers, storage devices and storage media at the end of the contractual period in line with ISO 27001 standards.
Documentation accessibility standard
WCAG 2.2 A

Using the service

Web browser interface
No
API
No
Command line interface
No

Scaling

Independence of resources
Our customers are logically separated on the platforms, at compute, network and storage levels with minimum and maximum resource guarantees throughout, which ensures each customer cannot exceed their allotted allocation without prior change notifications in to our Operations & Engineering teams.
Usage notifications
No

Analytics

Infrastructure or application metrics
No

Resellers

Supplier type
Not a reseller

Staff security

Staff security clearance
Conforms to BS7858:2019
Government security clearance
Developed Vetting (DV)

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
United Kingdom
User control over data storage and processing locations
No
Datacentre security standards
Supplier-defined controls
Penetration testing frequency
At least once a year
Penetration testing approach
‘IT Health Check’ performed by a CHECK service provider
Protecting data at rest
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Encryption of all physical media
Data sanitisation process
Yes
Equipment disposal approach
A third-party destruction service
Data sanitisation type
Deleted data can’t be directly accessed / Cryptographic Erasure

Backup and recovery

Backup and recovery
No

Data-in-transit protection

Data protection between buyer and supplier networks
TLS (version 1.2 or above)
Data protection within supplier network
  • TLS (version 1.2 or above)
  • Other
Other protection within supplier network
DDoS in the Wavenet core network

Availability and resilience

Guaranteed availability
Service availability service level Service availability achieved within any month shall be calculated monthly as follows: (Total online hours of availability – service downtime) x 100% Total online hours of availability The service availability calculation above will exclude any time which occurred as a result of events outside the control of Wavenet. In the event the service availability service level of 99.9% is not achieved when measured over a monthly period, the following service credits shall apply. System availability achieved Applicable service credit 99.9% to 100% 0% of the monthly charge for the affected service line 99% to 99.89% 5% of the monthly charge for the affected service line 98% to 98.9% 10% of the monthly charge for
Approach to resilience
Wavenet operates its own 100Gb low-latency Core network and resilient MPLS network, with all data centres on-net Wavenet’s Internet feeds into the data centres are delivered over our resilient core 10Gb MPLS network into peering points at other partner Points Of Presence (POPs). Where applicable all customer data stored by Wavenet is resilient across 3 DC sites.
Outage reporting
Email and SNMP

Identity and authentication

User authentication needed
Yes
User authentication
  • Dedicated link (for example VPN)
  • Username or password
  • Other
Other user authentication
Wavenet will implement where possible solutions to align with the customers own security requirements.
Access restrictions in management interfaces and support channels
Where access to customer infrastructure is required, Wavenet will use four-eyes authentication t and change control with the customer to ensure security is auditted and monitored. For remote access requirements for support services, Wavenet can provide two-factor authenticated remote access via the internet to administer the server infrastructure using SSL-VPN access.
Access restriction testing frequency
At least once a year
Management access authentication
  • Multi-Factor Authentication (MFA)
  • Dedicated link (for example VPN)
  • Username or password
Devices users manage the service through
Dedicated device over multiple services or networks

Audit information for users

Access to user activity audit information
Users contact the support team to get audit information
How long user audit data is stored for
At least 12 months
Access to supplier activity audit information
Users contact the support team to get audit information
How long supplier audit data is stored for
At least 12 months
How long system logs are stored for
At least 12 months

Security governance

Named board-level person responsible for service security
Yes
Security governance certified
Yes
Security governance standards
ISO/IEC 27001
Information security policies and processes
Through the establishment of a comprehensive security framework, Wavenet shall demonstrate a commitment to protect all assets that support the delivery of business objectives and address all legal, regulatory and contractual obligations. The following ISO27001 Group clause & objectives are referenced within this document: Clause 5, & Control objectives: A6, A9, A11, A13.2, and A14 Data Protection Policy Site Security Policy CCTV Policy.

Operational security

Configuration and change management standard
Supplier-defined controls
Configuration and change management approach
Wavenet's ITIL v3 aligned service management tool meets ISO 27001 guidelines, governing core ITIL processes including, but not limited to, incident, problem, change, release, configuration, service level management and service catalogue functions
Vulnerability management type
Supplier-defined controls
Vulnerability management approach
Vulnerability scanning is included in the Wavenet security framework, to help monitor the effectiveness of existing security controls and identify any weaknesses. The IT security Manager in consultation with Head of Compliance shall coordinate vulnerability scanning activities including;
identifying the scope of testing and monitoring manufacturer and vendor sites for information updates regarding vulnerabilities.
Should the vulnerabilities be assessed as not posing an immediate threat to operations, security patches or code fixes shall be subject to change control requirements ( testing etc.) prior to deployment. Wavenet support record activities in a service management ticket for tracking and audit purposes
Protective monitoring type
Supplier-defined controls
Protective monitoring approach
Monitoring of our platforms is done from our segregated and ISO27001 compliant management platforms, we protect the platform itself and its perimeter edge with Wavenet owned and operated solutions, not in any way tied to logical customer implementations within these platforms. Each customer as part of any service has our standard security and monitoring products deployed with pre-agreed alert classifications and thresholds set as part of our typical managed service. Potential compromises are identified in our centralised monitoring solution, with accompanying detailed information of the platform and customer which auto generates an incident in our ticketing systems.
Incident management type
Supplier-defined controls
Incident management approach
Predefined processes are in place for common events Users can report incidents via the web portal or email in the event of an incident Wavenet will issue customer updates as per the agreed frequency on the progress of a resolution or workaround. This may include initiating and leading conference calls, bridges or meetings. Create MI reports where required, validating content is customer appropriate. Issue to service delivery management. Publish the MI report to the customer as defined by the customer SLA.
Post-quantum cryptography secure
No

Secure development

Approach to secure software development best practice
Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Separation between users

Virtualisation technology used to keep applications and users sharing the same infrastructure apart
Yes
Who implements virtualisation
Supplier
Virtualisation technologies used
Other
Other virtualisation technology used
Hyper-V, VMWare, KVM, Nutanix AHV, Platform9, CIVO
How shared infrastructure is kept separate
Organisations that share the same physical equipment are separated by VLAN's. Different environments cannot communicate with each other

Energy efficiency

Energy-efficient datacentres
Yes
Description of energy efficient datacentres
We leverage Power Purchase Agreements (PPAs) and purchase energy attribute certificates (EACs) to increase our renewable energy coverage.

Pricing

Discount for educational organisations
No
Free trial available
No

Discount

Provide your minimum discount applicable to your baseline prices
1.5%

Formula for calculating price of your services

Formula for calculating price of your services

Which of the core deployment models you intend to offer

  • Public Cloud
  • Private Cloud

Public Cloud - Formula for calculating price of your services

Total Cost
The Total Cost for a buyer's call off requirement in a Public Cloud Deployment
=
Baseline Pricing
Baseline pricing can be found on the Microsoft Azure calculator
Baseline Pricing - Web link
https://azure.microsoft.com/en-gb/pricing/
-
Minimum Discounting
1.5%
+
Onboarding Activity
Onboarding costs may vary based on your specific requirements, please confirm with suppliers during the clarification process
+
Additional sources of cost
Additional sources of cost from the supplied baseline pricing may include Wavenet supplied elements such as: support, managed services, and bespoke requirements
-
Additional sources of cost reduction
Some services may offer discounts and cost reductions based on sector, or for agreeing to a multi-year contract.

Private Cloud - Formula for calculating price of your services

Total Cost
The Total Cost for a buyer's call off requirement in a Private Cloud Deployment
=
Baseline Pricing
Baseline pricing for our Private cloud deployments can be found in our G-Cloud service offerings.
-
Minimum Discounting
1.5%
+
Onboarding Activity
Onboarding costs may vary based on your specific requirements, please confirm with suppliers during the clarification process
+
Additional sources of cost
Additional sources of cost that may affects deployments include fluctuations in vendor pricing or exchange rates.
Other factors include situations where expectations for level of utilisation, capacity or storage have been specified, and these have then been exceeded by the customer.
-
Additional sources of cost reduction
Some services may offer discounts and cost reductions based on sector, or for agreeing to a multi-year contract.

Mandatory certifications

Mandatory certifications

Are you are bidding to offer IaaS and/or PaaS as a reseller or are you in sole control of the infrastructure

Reseller

Cloud service suppliers you intend to resell with evidence

Organisation 1

Organisation name

Microsoft

Website address/upload for organisation

Upload

Upload

Provided

Organisation 2

Organisation name

Hewlett Packard Enterprise

Website address/upload for organisation

Website address

Website address

https://partnerconnect.hpe.com/partner/wavenet-gb121801474

Organisation 3

Organisation name

Asanti Datacentres Ltd

Website address/upload for organisation

Website address

Website address

https://asanti.com/partners/

ISO 9001 certification

Provided

ISO 27001 certification

Provided

ISO 20000-1 certification

Provided

Are you reliant on the Cloud Service Provider for some accreditations

Yes

Cyber Essentials

Do you have a Cyber Essentials Plus certificate?
Yes
Cyber Essentials Plus certificate Number
6cc5c85d-03f1-446c-9e9d-7338dfb9f0ce

Non-mandatory Standards and certifications

ISO 28000:2022 certification
No
Quality management systems (QMS)
Yes
CSA STAR certification
No
PCI certification
No
Other security certifications
No

Social value

Section B - Commitment for Future: Delivery

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New apprenticeships on the contract workforce in the relevant area that meet the criteria set out in MAC 1b

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Delivery of apprenticeships, supported internships and T Level industry placement opportunities (Level 2, 3 and 4+) in relation to the contract

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Plans for positive actions with community groups.

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at publicsector@wavenet.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.