Public Cloud Microsoft Azure offered by Vodafone (OFFICIAL)

Service scope

Service constraints: Please view detailed Service Definition.
System requirements: Refer to Azure catalogue for system requirements on specific products

User support

Email or online ticketing support: Email or online ticketing
Support response times: The standard response time is one hour with support available on a 24/7 basis. The Support Incident Escalation is available to be utilised for critical issues and whenever needed to resolve the issue speedily.
User can manage status and priority of support tickets: No
Phone support: Yes
Phone support availability: 24 hours, 7 days a week
Web chat support: No
Onsite support: Yes, at extra cost
Support levels: Vodafone will provide you with support for Microsoft Azure. Our Hosting Solutions Support team provides a 24x365 Service Desk and Incident Management team. Support will be provided in English. The Vodafone operational model for support is ITIL based. If you think there is a fault or problem with your public cloud environment, you are able to raise a fault via your usual Vodafone support route. Vodafone teams may contact the customer to work on the resolution of the fault. Customers must ensure that the correct contact details are submitted with their request. Vodafone’s support model for Microsoft Azure will triage issues into Microsoft if Vodafone is unable to resolve the issue. More details : Service Definition Support section.
Support available to third parties: No

Onboarding and offboarding

Getting started: Onboarding guidance is provided as part of the service. When the Azure service is ready the customer will be provided with the following: I. Service Terms – contains Vodafone and Microsoft Azure T&Cs II. Service Descriptions – a guide to cover all customer information inc. Azure products, support, global infrastructure etc. III : Cloud Ready website - Document area for all relevant information pack
Service documentation: Yes
Documentation formats: PDF
End-of-contract data extraction: From the application that uses Azure or through the Admin GUI. Vodafone may also be able to help you minimise the impact of off-boarding through our professional service capability.
End-of-contract process: Customer must remove all of their data from the Platform notify Vodafone that they wish to terminate the Service. Vodafone will notify Customer of the date that the Service and any remaining data will be removed. It is Customer’s sole responsibility to remove their data from the Platform and Vodafone shall have no liability whatsoever for any of Customers data that remains on the Platform once Customer has notified Vodafone that Customer wishes to terminate the Service.

Using the service

Web browser interface: Yes
Using the web interface: The Microsoft Azure public cloud provides a self-service web portal (Azure Resource Manager also known as ARM) and application programming interfaces (Azure Resource Management REST API) for the provision and management of Azure services. Both the API and web portal are available over the public Internet to Vodafone and our customers. Please note that the Azure classic portal is not provided as part of this product. https://docs.microsoft.com/en-us/azure/azure-resource-manager/
Web interface accessibility standard: WCAG 2.1 AAA
Web interface accessibility testing: It is accessible anywhere through an internet connection over HTTPs and end to end security can be assured by using Vodafone's secure networks.
API: Yes
What users can and can't do using the API: The Microsoft Azure public cloud provides a self-service web portal (Azure Resource Manager also known as ARM) and application programming interfaces (Azure Resource Management REST API) for the provision and management of Azure services. Both the API and web portal are available over the public Internet to Vodafone and our customers. Please note that the Azure classic portal is not provided as part of this product. https://docs.microsoft.com/en-us/azure/azure-resource-manager/
API automation tools: Ansible

Chef

Puppet
API documentation: Yes
API documentation formats: HTML
Command line interface: Yes
Command line interface compatibility: Windows

MacOS

Other
Using the command line interface: Please visit; https://docs.microsoft.com/en-us/cli/azure/?view=azure-cli-latest

Scaling

Scaling available: Yes
Scaling type: Automatic
Independence of resources: Azure has more global regions than any other cloud provider – offering the scale needed to bring apps closer to users around the world, preserving data residency and offering comprehensive compliance and resiliency options for customers.
Usage notifications: Yes
Usage reporting: Other
Other usage reporting: Calls?

Analytics

Infrastructure or application metrics: Yes
Metrics types: Other
Other metrics: Broad set of global compute, storage, database analytics

Machine Learning and IoT
Reporting types: Real-time dashboards

Resellers

Supplier type: Reseller providing extra support
Organisation whose services are being resold: Organisation whose services are being resold Microsoft

Staff security

Staff security clearance: Conforms to BS7858:2019
Government security clearance: Up to Security Clearance (SC)

Asset protection

Knowledge of data storage and processing locations: Yes
Data storage and processing locations: United Kingdom

European Economic Area (EEA)
User control over data storage and processing locations: No
Datacentre security standards: Managed by a third party
Penetration testing frequency: Less than once a year
Penetration testing approach: Another external penetration testing organisation
Protecting data at rest: Other
Other data at rest protection approach: In Azure, organizations can encrypt data at rest without the risk or cost of a custom key management solution. Organizations have the option of letting Azure completely manage Encryption at Rest. Additionally, organizations have various options to closely manage encryption or encryption keys. See: See: https://docs.microsoft.com/en-us/azure/security/azure-security-encryption-atrest With regards to Billing, Provisioning and other customer metadata, it is understood that most of this data is not encrypted at rest.
Data sanitisation process: Yes
Data sanitisation type: Deleted data can’t be directly accessed
Equipment disposal approach: A third-party destruction service

Backup and recovery

Backup and recovery: Yes
What’s backed up: Replaces your existing on-premises or off-site backup solution

Azure Backup offers multiple components that you download and deploy

Back up data to a Recovery Services vault in Azure
Backup controls: Backup applications need to be purchased by Azure portal. No Operational Support System (OSS) tooling is deployed (monitoring, backup, patch management and anti-malware).
Datacentre setup: Multiple datacentres with disaster recovery
Scheduling backups: Users schedule backups through a web interface
Backup recovery: Users can recover backups themselves, for example through a web interface

Users contact the support team

Data-in-transit protection

Data protection between buyer and supplier networks: Private network or public sector network

IPsec or TLS VPN gateway

Other
Other protection between networks: Azure networking supports the following secure remote access scenarios: -Connect individual workstations to a virtual network (Point-to-site VPN) -Connect your on-premises network to a virtual network with a VPN (site-to-site VPN ) -Connect your on-premises network to a virtual network with a dedicated WAN link -Connect virtual networks to each other (IPSEC tunnel) For all details see: https://docs.microsoft.com/en-us/azure/security/security-network-overview
Data protection within supplier network: Other
Other protection within supplier network: An Azure virtual network provides a secure, logical network that's isolated from other virtual networks and supports many security controls that you use on your premises networks For all details see: https://docs.microsoft.com/en-us/azure/security/security-network-overview

Availability and resilience

Guaranteed availability: Refer to Azure availability SLAs from here : https://azure.microsoft.com/en-gb/support/legal/sla/
Approach to resilience: Azure has more global regions than any other cloud provider – offering the scale needed to bring apps closer to users around the world, preserving data residency and offering comprehensive compliance and resiliency options for customers. An Azure Region is a set of data centres deployed within a latency-defined perimeter and connected through a dedicated regional low-latency network. With more global regions than any other cloud provider, Azure gives customers the flexibility to deploy apps where they need to. Azure is generally available in 42 regions around the world, with plans announced for 12 additional regions. Availability Zones are physically separate locations within an Azure region. Each Availability Zone is made up of one or more data centres equipped with independent power, cooling and networking. Availability Zones allow customers to run mission-critical apps with high availability and low-latency replication. See https://azure.microsoft.com/en-gb/global-infrastructure/regions/ for more information.
Outage reporting: As part of the service offering you have access to Azure Service Health that provides personalised guidance and support when issues in Azure services affect you. It can notify you, help you understand the impact of issues and keep you updated as the issue is resolved. It can also help you prepare for planned maintenance and changes that could affect the availability of your resources. Further information on Azure Service Health can be found here: https://azure.microsoft.com/en-gb/features/service-health/

Identity and authentication

User authentication: 2-factor authentication

Dedicated link (for example VPN)

Username or password
Access restrictions in management interfaces and support channels: By default, Vodafone customers have no access to their Azure subscription and the CSP Partner (Vodafone) must grant the customer with access to the directory. The suggested subscription permissions will be using AoBo (Admin on Behalf of). Each Vodafone customer is provisioned each subscription with 1 Global Administrator which will be a separate account from the subscription owner. The customer is provisioned each subscription with 1 subscription owner which will be a separate account from the Azure AD Global administrator.
Access restriction testing frequency: At least once a year
Management access authentication: 2-factor authentication

Dedicated link (for example VPN)

Username or password
Devices users manage the service through: Directly from any device which may also be used for normal business (for example web browsing or viewing external email)

Audit information for users

Access to user activity audit information: Users have access to real-time audit information
How long user audit data is stored for: At least 12 months
Access to supplier activity audit information: Users have access to real-time audit information
How long supplier audit data is stored for: At least 12 months
How long system logs are stored for: At least 12 months

Standards and certifications

ISO/IEC 27001 certification: Yes
Who accredited the ISO/IEC 27001: LRQA are Vodafones ISO27001:2013 accreditor
ISO/IEC 27001 accreditation date: 01/01/2024
What the ISO/IEC 27001 doesn’t cover: N/A
ISO 28000:2007 certification: No
CSA STAR certification: No
PCI certification: Yes
Who accredited the PCI DSS certification: NCC Group
PCI DSS accreditation date: Various
What the PCI DSS doesn’t cover: Vodafone holds 5 PCI DSS certificates covering: Retail Environment Voice Payments eShop PCI Zone - multi channel payments Functions and process not involved in the processing of payment card data
Cyber essentials: Yes
Cyber essentials plus: Yes
Other security certifications: Yes
Any other security certifications: ISO22301:2015 for all Vodafone UK business units and functions

Security governance

Named board-level person responsible for service security: Yes
Security governance certified: Yes
Security governance standards: ISO/IEC 27001
Information security policies and processes: Vodafone policies align to ISO27002:2013

Operational security

Configuration and change management standard: Supplier-defined controls
Configuration and change management approach: Formal management responsibilities and procedures within Vodafone are in place to ensure satisfactory control of all changes. When changes are made, an audit log containing all relevant information is retained on the Vodafone change management system. Changes to operational systems are only made when there is a valid business reason to do so, such as an increase in the risk to the system.
Vulnerability management type: Undisclosed
Vulnerability management approach: Cloud provider controls. Refer to https://docs.microsoft.com/en-us/azure/security-center/
Protective monitoring type: Undisclosed
Protective monitoring approach: Vodafone has logging and monitoring capabilities in place along with appropriate storage of log data. The monitoring capability and events are managed and stored within the SIEM solution. The SIEM solution has been built in line with GPG13 DETER
Incident management type: Undisclosed
Incident management approach: Incident management processes are in line with ITIL best practice, and integrated with event, problem and change management processes.

Secure development

Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Separation between users

Virtualisation technology used to keep applications and users sharing the same infrastructure apart: Yes
Who implements virtualisation: Third-party
Third-party virtualisation provider: Microsoft
How shared infrastructure is kept separate: Please see our detailed Service Definition document (refer to Azure Shared responsibility model)

Energy efficiency

Energy-efficient datacentres: Yes
Description of energy efficient datacentres: Available upon request.

Social Value

Fighting climate change
Covid-19 recovery
Tackling economic inequality
Equal opportunity
Wellbeing

Fighting climate change

Fighting climate change
We believe that urgent and sustained action is required to address the climate emergency. Business success should not come at a cost to the environment, and we are committed to ensure the greening of all our activities. We also see a key role for our digital networks and technologies in helping to address climate change. Digitalisation is key to saving energy, using natural resources more efficiently and creating a circular economy.
Our carbon reduction targets support those introduced in 2019 when the UK Government amended the Climate Change Act 2008 by introducing a target of at least a 100% reduction of greenhouse gas emissions in the UK by 2050. Vodafone’s own target, validated by the Science Based Target initiative, is to achieve net zero by 2040. We produce an annual Carbon Reduction Plan in line with PPN 06/21 which outlines the environmental management measures that will be applied in the performance of our contracts.
The Carbon Reduction Plan is published on our website here: Protecting the Planet | Vodafone UK

Covid-19 recovery

Covid-19 recovery
At Vodafone, we believe that everyone, everywhere should have access to technology. That is why our initiative – everyone.connected – was launched during the pandemic to close the digital divide.
The COVID-19 pandemic has caused a global economic crisis, creating a greater need for focus on inclusion and equality. As a technology brand, we are determined to support those who need it most – students, jobseekers, small businesses, remote communities and the elderly. This is because we know that being connected creates endless opportunities; from remote working, to education and staying in touch.
We will keep doing all we can to make sure nobody is left behind – because when people are connected, equal opportunities are created and the future is brighter.
The programme has continued post-COVID and we are now committed to helping 4 million UK people and businesses cross the digital divide by the end of 2025. Details on our programme and our on-going commitments
can be found here: everyone connected | Tackle the digital divide | Vodafone UK

Tackling economic inequality

Tackling economic inequality
Vodafone is committed to tackling economic inequality by helping to create new businesses, jobs, and skills.   Since forming in Newbury, Berkshire in 1982, we have purchased products and services globally to innovate and achieve business growth.
Today, Vodafone works with over 9,000 suppliers. We’re strong advocates of the ‘one company, local roots’ concept. By creating opportunities for new businesses and supporting supply chain resilience, we enable our suppliers to recruit and grow. In turn, our partners maintain their own diverse supply chains of smaller, local partners, technology start-ups and market specialists.
We encourage small and medium sized enterprises in our own supply chain, e.g. by offering them positive scoring in our RFQ process (which has a 20% weighting for sustainability responses) if they commit to introducing policies that align with Vodafone’s purpose. In this way, we aim to drive positive change in the supply chain.

Vodafone is committed to tackling economic inequality for disadvantaged groups and areas. We support the UK Government’s ‘Good Work Plan’, the levelling up agenda and the Government’s priorities such as reduced reoffending and increased opportunities for disabled people. We work with leading public service provider, PeoplePlus, to help create opportunities for individuals from lower income households who may face barriers to employment. They are a national UK wide company and extension of the UK Job Centre who aim to deliver skills and training to ensure people can access the right employment and enhance their career prospects.

Vodafone’s work experience strategy addresses the underrepresentation of certain groups across the Technology workforce. We have offered work experience to over 4000 students since 2017 through programmes such as #CodeLikeAGirl and Innovators virtual work experience programme. Both programmes target a proportion of ethnic minority, female, and low social mobility students.

Equal opportunity

Equal opportunity
We are committed to equal opportunities in our workforce. Through our recruitment processes we:
o use gender neutral advertising for vacancies posted, running the advertisements through a gender decoder
o actively ensure diverse shortlists are provided to hiring managers as well as having diverse interview panels to ensure the candidate feels as comfortable as possible throughout the process
o Limit the “criteria/ essential” skills and reduce technical jargon where possible
o Anonymise CVs removing names, pro-nouns and photos
o Remove university education from CVs
o Run training for hiring managers on topics such as inclusive hiring, race and ethnicity, accessibility, discrimination, allyship and gender diversity.
o Run campaigns related to diversity and inclusion with an intersectional approach aimed at increasing brand awareness and perception of Vodafone as a diverse and inclusive employer, as well as job applications.
o Partner with external organisations to help create opportunities to attract greater diversity into our workforce. These include myGWork, a network for LGBTQ+ talent, Black Young Professionals network, and Evenbreak who have a community of 70,000 talent with disabilities.
o We have publicly available Fair Pay Principles that govern our approach to reward.

Vodafone has come together with Ofcom and other organisations to sign Women in Tech, a pledge committing to promote the role of women in technology-based roles in the telecoms sector. We are committed to work together to increase senior representation of women, share best practice and help to drive change in Vodafone and across the industry. Our company goal is 45% women in management roles by 2030.

We have a range of employee networks who advocate for different groups including groups for LGBTQ+, BAME and disabled employees. We are signatories of the Race at Work Charter, Disability Confident Scheme and Hidden Disabilities Sunflower Scheme.

Wellbeing

Wellbeing
Vodafone’s Group Health, Safety and Wellbeing Policy expands on the Code of Conduct, setting out our commitment to establish a robust and durable health, safety and wellbeing culture. This policy is accompanied by detailed standards setting out the specific steps that must be taken to manage our greatest risks.
https://www.vodafone.com/about-vodafone/who-we-are/people-and-culture/workplace-safety/our-approach-to-safety

We have a multi-faceted employee wellbeing programme which covers:
• Physical health, including discounted gym membership, free access to a remote GP and discounted/free health assessments.
• Emotional and mental health. Silvercloud is a digital self-help support platform, endorsed by the National Institution of Health Care Excellence (NICE) as being an effective tool to maintain and improve wellbeing. Employees can access a variety of programmes including: Sleep, stress, resilience, Covid-19, positive body image, mindfulness, money worries.
• Financial wellbeing. We offer a personalised financial education tool.

Our commitments to wellbeing are supported by industry leading HR policies, e.g. our enhanced Maternity/Paternity Policies and a flexible working culture. We run an award-winning ReConnect return to work programme for those who have taken career breaks due to caring responsibilities. Our commitments are recognised externally, and we continue to be ranked as one of the UK’s top 10 ‘Best Workplaces’.

Pricing

Price: £0.01 an instance
Discount for educational organisations: No
Free trial available: No

Public Cloud Microsoft Azure offered by Vodafone (OFFICIAL)

Features

Benefits

Service documents

Framework

Service ID

Contact

Service scope

User support

Onboarding and offboarding

Using the service

Scaling

Analytics

Resellers

Staff security

Asset protection

Backup and recovery

Data-in-transit protection

Availability and resilience

Identity and authentication

Audit information for users

Standards and certifications

Security governance

Operational security

Secure development

Separation between users

Energy efficiency

Pricing

Service documents

Cookies on Digital Marketplace

Public Cloud Microsoft Azure offered by Vodafone (OFFICIAL)

Features

Benefits

Pricing

Service documents

Framework

Service ID

Contact

Service scope

User support

Onboarding and offboarding

Using the service

Scaling

Analytics

Resellers

Staff security

Asset protection

Backup and recovery

Data-in-transit protection

Availability and resilience

Identity and authentication

Audit information for users

Standards and certifications

Security governance

Operational security

Secure development

Separation between users

Energy efficiency

Social Value

Pricing

Service documents