Stone Technologies Limited trading as Converge Technology Solutions

Stone Infrastructure as a Service

Stone Cloud Networking - powered by Cisco - provides organisations with a fully managed, feature rich infrastructure service for your wired, wireless, security, surveillance and MDM needs. Our 100% cloud based service allow for faster deployment, simplified administration and financial consistency, wrapped into a pay as you use service.

Features

• Centralised control for all of your estate
• High Capacity 802.11ax with Automatic RF Optimization
• Application Visibility & Control
• Flexible Stacking
• Enterprise Security and Advanced Malware Protection
• Layer 7 Visibility and Layer 3 Scalability
• Identity-Based Firewall with Intrusion Prevention
• Auto VPN
• Guest and BYoD Management
• Person detection and analytics

Benefits

• 100% cloud managed for faster deployment and simplified administration
• High performance wireless in dense, demanding environments
• Identify and prioritise which critical applications are being used
• Simultaneously configure thousands of ports across switches, regardless of location
• Protect the wired network from both external and internal threats
• Build large, resilient networks using dynamic routing protocols
• Automatically assigns the right policies for each class of users
• Protects critical network resources from security threats and vulnerabilities
• Securely connects branch locations

£20 a unit a month

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@stonecomputers.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

411241059139562

Contact

Antony Mellor
08448 22 11 22
tenders@stonecomputers.co.uk

Service scope

• Service constraints: N/A
• System requirements: Internet connectivity to the site

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Support response times; ; 24 x 7 SLA - Automated Acknowledgement immediate - Target resolution within 4 business hours
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: Web chat
• Web chat support availability: 24 hours, 7 days a week
• Web chat support accessibility standard: WCAG 2.1 A
• Web chat accessibility testing: We have a formal contract with the UK's largest charity providing IT support and services for families raising disabled or seriously ill children and young people, therefore our people and processes support those that have assistive technology needs.
• Onsite support: Yes, at extra cost
• Support levels: Support; Telephone call answered within 30 seconds (90%) with emails and web requests acknowledged within 1 business hour (90%).; Pro-active monitoring and alerting of Cloud infrastructure; ; Response; Service call logged on Stone Helpdesk. Call transferred to Specialist Support Engineer for immediate response, or if this is not available the customer will receive a call by the Specialist Support Engineer within 60 minutes of the call being logged (90%).
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Stone provide a full managed service so that establishments do not need to manage any day-to-day activities on the network. For IT Administrators we provide:; - Onsite training during the implementation process; - Online training through the use of webinars; - Handover documentation with all detail to support your solution
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: There is no requirement to extract data from the system as only management data flows through the Meraki cloud. ; No user traffic passes through Meraki's datacenters, therefore the establishments data would stay on the local network.
• End-of-contract process: There are no further costs for off boarding the service at the end of the 24 month term

Using the service

• Web browser interface: Yes
• Using the web interface: Stone provides a range of services from complete delegated and devolved control through to a managed service provision. All aspects of set up, configuration and support are access via the single pane of glass web interface.; ; The level of autonomy can be completely tailor to customer requirements at the point of order.
• Web interface accessibility standard: None or don’t know
• How the web interface is accessible: The Stone Cloud Managed Networking web interface is accessible on a responsive website design, allowing access from any web enabled device. Some older browser versions are not supported.
• Web interface accessibility testing: N/A
• API: Yes
• What users can and can't do using the API: The Stone Managed Networking Service provides an API interface for the set up, management and configuration of certain areas of the network.; ; The interface also allows for location based analytics information (CMX) that can be interrogated for trilateration of wifi enabled devices.
• API automation tools: Other
• Other API automation tools: REST
• API documentation: Yes
• API documentation formats:
  • HTML
  • PDF
• Command line interface: No

Scaling

• Scaling available: No
• Independence of resources: Stones Managed Networking Service has built in load balancing and replication. User load is managed through a range of technologies that ensure demand is managed and optimised.
• Usage notifications: No

Analytics

• Infrastructure or application metrics: Yes
• Metrics types:
  • Network
  • Number of active instances
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: Cisco Meraki

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • European Economic Area (EEA)
  • Other locations
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: ‘IT Health Check’ performed by a Tigerscheme qualified provider or a CREST-approved service provider
• Protecting data at rest: Physical access control, complying with SSAE-16 / ISAE 3402
• Data sanitisation process: No
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Backup and recovery

• Backup and recovery: No

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Stone Managed Networking Services guarantee a 99.99% uptime. This excludes local network outages, or those outages where the cause is out of the reasonable control of Stone Computers.; ; Compensation is not paid in monetary terms but in the extension of the service provided. This takes the form of credits for contract or support extensions.
• Approach to resilience: This information is available upon request.
• Outage reporting: Outages are reported through the following mechanisms:; - Telephone call to designated primary contact.; - API; - Email alerts to designated contacts.; - Dashboard.

Identity and authentication

• User authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Username or password
• Access restrictions in management interfaces and support channels: User and administrative access is entirely configurable to customer requirements. The Stone Managed Networking Services web interface provides complete tailoring of the solution to individual needs. Access is restricted by TLS encrypted username and password pair. 2FA is a recommended and additional layer of security above this.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Limited access network (for example PSN)
  • Username or password
• Devices users manage the service through:
  • Dedicated device on a segregated network (providers own provision)
  • Dedicated device on a government network (for example PSN)
  • Dedicated device over multiple services or networks
  • Directly from any device which may also be used for normal business (for example web browsing or viewing external email)

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: NQA
• ISO/IEC 27001 accreditation date: 11/05/2019
• What the ISO/IEC 27001 doesn’t cover: N/a
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: Yes
• Who accredited the PCI DSS certification: SecurityMETRICS
• PCI DSS accreditation date: 07/03/2019
• What the PCI DSS doesn’t cover: N/a
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Stone have a comprehensive security policy and process that adheres to ISO270001 requirements and supports Stone's ISO90001 quality management system. ; ; Detail of this policy is available upon request for customers and potential customers.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Stone Managed Network Services implements a secure and stable change management process. ; ; For services and configuration, Stone adhere to industry best practice and ITIL v3.0 service management guidelines. Project controls are a tailored form of PRINCE2 methodology that ensures continuity of service and a focus on the security impacts of potential changes.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Stone Cloud Managed Networking service runs in adherence to the Cisco Meraki vulnerability management process. Further details are available upon request.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Stone's protective monitoring policy encompasses pro-active alerts, regular manual and automated reviews and immediate response commitments. Further details of this policy are available upon request.
• Incident management type: Supplier-defined controls
• Incident management approach: Stone's incident management policy confirms to ISO27035. Reporting from both users and from Stone is available through a range of different mechanisms. More detail is included within the response to the support section of this offering.

Secure development

• Approach to secure software development best practice: Supplier-defined process

Separation between users

• Virtualisation technology used to keep applications and users sharing the same infrastructure apart: No

Energy efficiency

• Energy-efficient datacentres: Yes
• Description of energy efficient datacentres: Cisco Meraki is committed to data protection, privacy, security, and compliance with applicable regulatory frameworks in the US and abroad. The Meraki cloud-based architecture is designed from the ground up with data protection, privacy, and security in mind.; ; Full details can be found - https://meraki.cisco.com/trust#privacy

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Equal opportunity

  Fighting climate change

  Effective stewardship of the environment. At Stone, nothing goes to waste. We are committed to protecting our planet and reducing the impact the IT industry has on the environment. We deliver this by: • Stone’s zero to landfill pledge. Certification in-line with the Defra waste hierarchy and audited by Valpak, Stone delivers the assurance of external audit to the zero to landfill pledge, ensuring redundant IT equipment is never needlessly treated as waste. • One of the best tools to limit temperatures from rising above 1.5o is tree planting. Stone plants a tree for every £1,000 worth of boost points collected, with 500 trees planted since 2020 in partnership with the National Forest. Most recently, Stone has partnered with Ecologi, to plants tree in areas where they will make the most impact. • The multi-award-winning Stone 360 app encourages technology users to reduce carbon footprints by responsibly recycling redundant technology whilst earning rebates. Rebates can be used as: o Cash rebates o Charity donations to any charity o Donations to Stone charities o Boosting the value of the rebate by 20% when spend on Stone products or services. • Once devices are sanitised of data and refurbished, they are made available to communities at highly competitive pricing. This reduces the carbon footprint for schools, charities, and social enterprises whilst supporting IT supply chain challenges. Stone also makes charitable donations of refurbished technology. Through the IT Schools Africa programme, Stone has donated almost 4,000 devices to help bridge the digital divide, and support global circular IT provision. • Alignment to the United Nations Sustainable Development Goal (SDG) 12 - responsible consumption and production. Stone is committed to the efficient use of natural resources, using sustainable options and by setting a series of policy-aligned internal goals and measurables to track progress.

  Equal opportunity

  Stone understands the value of ensuring good representation of disabled people in the workforce, and in skills development both within the workforce and that of the community it serves. The following represents two examples of value from the services Stone delivers: • Increasing representation of disabled people in the workforce: As a Disability Confident employer, Stone commits to recruit, retain, and develop disabled people to serve your organisation. Contracting a supplier displaying the Disability Confident badge will also show disabled people that you recognise their value, supporting you in recruiting and retaining disabled people. Stone commits to providing: o Inclusive and accessible recruitment o Accessible communication of vacancies o Interviews to disabled people o Reasonable workplace adjustments o Support for existing employees • Supporting families of disabled or seriously ill children to have the same opportunities, as other families: By selecting Stone you will directly contribute towards a 12-year partnership with the Family Fund. Family Fund is the UK’s largest charity providing grants for families raising disabled or seriously ill children and young people under 21. Stone provides a comprehensive range of technologies and related support for the families via phone and online portal, highlighting products available and providing easy-to‐digest information, written with the families in mind and free from technical jargon) and via a text and messaging service. “Stone have been integral to us fulfilling our technology grants effectively and with unwavering customer service. The partnership enables us to provide a wide range of digital equipment across multiple platforms, the majority with assistive technology, which help support the needs of those with disabilities. Stone have proven themselves to be flexible and adaptable to change as we have grown, and the needs of the families we support have evolved, displaying strong values and commitment to our partnership and our cause."

Pricing

• Price: £20 a unit a month
• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Stone can provide free or trial instances subject to our terms and conditions and upon the customer completing a webinar or otherwise appropriate form of qualification.

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@stonecomputers.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.