INSIGHT DIRECT (UK) LTD

Unified File System & Volume Management Optimisation

Expert consulting to streamline, secure, and optimise enterprise host-based file systems and storage volumes for organisations seeking resilient, efficient data infrastructure.

Features

• Comprehensive audit of existing file systems and storage volumes
• Design and implementation of scalable volume management solutions
• Optimisation of file system performance for critical workloads
• Automated monitoring and proactive health checks
• Integration with backup and disaster recovery strategies
• Centralised management dashboards for storage visibility
• Data migration planning and execution with minimal downtime
• Advanced access control and security policy configuration
• Continuous improvement recommendations and roadmaps
• Knowledge transfer and training for IT operational teams

Benefits

• Maximises storage utilisation across diverse environments
• Reduces infrastructure costs through improved efficiency
• Minimises risk of data loss or corruption
• Enhances system performance and responsiveness
• Enables rapid scaling as business needs evolve
• Simplifies ongoing storage administration
• Supports robust compliance and audit readiness
• Accelerates time-to-value for new infrastructure rollouts
• Boosts IT team confidence with expert guidance
• Provides actionable insights for ongoing optimisation

• Education pricing available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at pstenderteam@insight.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

418147566893878

Contact

Public Sector Tender Team
0344 846 3333
pstenderteam@insight.com

About your service

• Service categories:

  Systems Infrastructure Software

  Storage

  Storage infrastructure and device management

  • Host-Based File Systems and Volume Management Software
• Multi cloud support: Yes

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Hybrid cloud
• Service constraints: Requires access to relevant storage infrastructure and IT stakeholders. Some legacy systems may limit feature implementation.
• System requirements:
  • Requires valid software licenses for all deployed applications.
  • Anti-virus solution must be installed on machines.
  • Insight's ServiceNow ITSM preferred and integrated for service requests.
  • Multi-Factor Authentication is mandatory for all system access.
  • Data encryption must be enabled for storage and transmission.
  • Operating systems must be supported: Windows, Linux, macOS.

User support

• Email or online ticketing support: No
• Phone support: No
• Web chat support: No
• Onsite support: No
• Support levels: Our Professional Services, are focused on project delivery rather than ongoing support. Our service is designed to ensure that clients receive dedicated support during the project lifecycle, including consulting, design, deployment, and implementation. We do not operate through a ticketing-style support system; instead, our consultants work closely with clients to achieve project objectives and ensure successful outcomes.
• Support available to third parties: No

Onboarding and offboarding

• Getting started: To help users start using our service, we provide a comprehensive onboarding process that includes both onsite and online training sessions tailored to meet client needs. During the onboarding phase, our expert consultants conduct interactive training sessions, ensuring users are comfortable and proficient with the system. We also offer detailed user documentation that serves as a reference guide, covering all aspects of the service and its functionalities. This documentation is accessible in PDF format, facilitating easy access and offline usage. Additionally, our approach incorporates knowledge transfer principles grounded in Adoption & Change Management, ensuring a smooth transition and empowering users to maximise the value of our service from the outset. Support is readily available during the onboarding process, allowing users to seek clarification and assistance as needed. Our goal is to foster user confidence and competency in utilising our services effectively.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: At the end of the contract, users can extract their data through a structured offboarding process. This process includes the provision of data export tools that allow users to download their data in commonly used formats, ensuring compatibility and ease of access. Insight will coordinate with the users to determine the specific data to be extracted and will provide clear guidelines on the export procedure. Additionally, users will have the option to request assistance from our team during the extraction process to ensure that all necessary data is captured and securely transferred. We prioritise data integrity and confidentiality throughout this process, adhering to our established security protocols and compliance standards. Users will receive confirmation once their data has been successfully extracted, along with any relevant documentation regarding the offboarding process.
• End-of-contract process: At the end of the contract, several activities are included in the price to ensure a smooth transition for the client. This includes a final review meeting to discuss the project outcomes, knowledge transfer sessions, and the provision of documentation summarising the work completed. Additionally, we will assist clients in extracting their data as per the agreed processes, ensuring data integrity and compliance with our security protocols.; ; Any additional costs may arise for extended support beyond the project delivery phase, which would be defined in a separate agreement. Furthermore, if clients require additional training or bespoke documentation beyond what is provided as part of the contract, these services will incur extra charges. Overall, our aim is to facilitate a seamless offboarding experience while clearly delineating what is included in the contract price and what may attract additional costs.
• Documentation accessibility standard: WCAG 2.2 AA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: No
• User support accessibility: None or don’t know
• API: No
• Customisation available: Yes
• Description of customisation: Users can customise our professional services to align with their specific project requirements. Customisation options include tailoring the scope of services, selecting specific modules for deployment, and defining project timelines. Users can communicate their needs directly to our expert consultants during initial consultations, ensuring the services provided are aligned with their organisational goals.; ; Customisation can be facilitated by project stakeholders, such as project managers or IT leads, who engage with our team to discuss their unique challenges and objectives. Our agile and flexible delivery methodology allows for adjustments throughout the project lifecycle, ensuring that the final outcomes meet the users' expectations. ; ; Additionally, users can influence training content and knowledge transfer sessions, allowing them to focus on areas most relevant to their operational needs and staff capabilities. This collaborative approach fosters a more effective implementation and ensures a smoother transition to the new systems or processes.

Scaling

• Independence of resources: We guarantee users are not affected by demand from others through the implementation of resource allocation and load balancing techniques. Our infrastructure is designed to dynamically allocate resources based on real-time demand, ensuring consistent performance and availability. Additionally, we monitor system performance 24/7 using advanced analytics and management tools, allowing us to proactively address any potential issues before they impact users. Our commitment to service quality is further supported by our adherence to industry standards and certifications, ensuring a reliable and efficient service delivery at all times.

Analytics

• Service usage metrics: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest: Other
• Other data at rest protection approach: We protect data at rest through multiple layers of security. This includes AES-256 encryption, ensuring that data remains secure even when stored. Additionally, we implement strict access controls, requiring MFA for all personnel access. Our data handling procedures are compliant with Cyber Essentials Plus and ISO standards, which define best practices for data protection. Regular audits and monitoring further enhance our security posture, ensuring that any anomalies are quickly identified and addressed. Comprehensive logging maintains an audit trail for accountability, supporting our commitment to maintaining the integrity and confidentiality of client data.
• Data sanitisation process: Yes
• Equipment disposal approach: A third-party destruction service
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Data Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase
  • Physical Destruction / Hardware containing data is completely destroyed

Data importing and exporting

• Data export approach: Users can request their data through our GDPR compliant process
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • CSV format for spreadsheets or database
  • JSON format for web applications
  • XML format for data interchange
  • PDF format for document sharing
  • YAML format for configuration files
  • TXT format for plain text files
  • XLSX format for Microsoft Excel
  • HTML format for web pages
  • DOCX format for Microsoft Word documents
  • SQL format for database imports
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • CSV format for spreadsheets or databases
  • JSON format for web applications
  • XML format for data interchange
  • PDF format for document sharing
  • YAML format for configuration files
  • TXT format for plain text files
  • XLSX format for Microsoft Excel
  • HTML format for web page
  • SQL format for database imports
  • DOCX format for Microsoft Word documents

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • Other
• Other protection between networks: We protect data between the buyer's network and our network through multiple layers of security. We employ TLS 1.2+ encryption for all data in transit, ensuring secure transmission. Additionally, we utilize a VPN gateway to establish a secure and private connection. Multi-factor authentication (MFA) is required for all access, adding an extra layer of security. Our systems are continuously monitored 24/7 with XDR to detect and respond to threats in real-time. Regular third-party penetration testing further validates our security posture, ensuring robust protection for data as it moves between networks.
• Data protection within supplier network:
  • IPsec or TLS VPN gateway
  • Other
• Other protection within supplier network: We implement stringent access controls and monitor all data flows within our network. Data is encrypted in transit using TLS 1.2+ and at rest with AES-256. We enforce multi-factor authentication for all system access and conduct regular third-party penetration tests. Our 24/7 monitoring with XDR ensures any anomalies are swiftly addressed. Additionally, logs are retained for 6-12 months, providing a complete audit trail for compliance and security reviews. Our adherence to Cyber Essentials Plus and ISO certifications further reinforces our commitment to data protection.

Availability and resilience

• Guaranteed availability: Not applicable
• Approach to resilience: Not applicable
• Outage reporting: Not applicable

Identity and authentication

• User authentication needed: Yes
• User authentication: Multi-Factor Authentication (MFA)
• Access restrictions in management interfaces and support channels: Not Applicable
• Access restriction testing frequency: At least every 6 months
• Management access authentication: Multi-Factor Authentication (MFA)

Audit information for users

• Access to user activity audit information: You control when users can access audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: You control when users can access audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards:
  • ISO/IEC 27001
  • Other
• Other security governance standards: We comply with the Cyber Essentials Plus standard, ISO 9001, ISO 27001, ISO 20000, and ISO 14001. Additionally, we follow PCI-DSS requirements and maintain regular audits and third-party penetration testing to ensure adherence to best practices in security and governance across all our professional services.
• Information security policies and processes: We adhere to a robust set of information security policies and processes aligned with ISO 27001 and Cyber Essentials Plus standards. Our governance framework encompasses comprehensive risk assessments, continuous monitoring, and incident response protocols. A designated board-level officer oversees security, ensuring accountability and policy compliance.; ; Our reporting structure includes regular security audits and third-party penetration tests, which are conducted annually to evaluate our security posture and identify areas for improvement. All staff undergo Baseline Personnel Security Standard vetting, and we enforce strict access controls, including multi-factor authentication (MFA) for system access.; ; We maintain detailed logs for 6-12 months, ensuring complete audit trails for all activities. Incident notifications are dispatched within 24-48 hours to facilitate prompt response and resolution. By implementing these policies and processes, we ensure the highest standards of security are upheld throughout our professional services delivery.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: Our configuration and change management processes ensure that all service components are tracked through their lifecycle via a comprehensive change control system. Each change request is logged and assessed for potential security impact, involving risk assessments that consider possible vulnerabilities and compliance implications. We maintain detailed documentation of all configurations, enabling traceability and accountability. Changes are implemented following a structured approval process, ensuring that all stakeholders are informed and that security protocols are upheld throughout the process. Post-implementation reviews are conducted to verify that changes do not compromise system integrity or security.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: We assess potential threats through continuous monitoring and analysis of security alerts, vulnerability assessments, and threat intelligence feeds from reputable sources. Patches are deployed within 24 hours of identifying critical vulnerabilities to ensure minimal exposure. We source information on potential threats from industry-leading threat intelligence providers, cybersecurity forums, and government advisories, thereby maintaining a proactive stance on emerging threats. This robust vulnerability management process ensures our services remain secure and resilient against evolving cyber threats.
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: We employ a multi-layered approach to protective monitoring, identifying potential compromises through continuous 24/7 monitoring with Extended Detection and Response (XDR) tools, along with comprehensive log analysis. Upon detecting a potential compromise, our incident response team initiates predefined protocols, including containment and investigation, within a maximum of 24 hours. We aim to respond to all reported incidents within 24-48 hours, ensuring timely communication with stakeholders and rigorous follow-up actions to mitigate risks effectively. Our commitment to maintaining security integrity is reinforced by regular third-party penetration testing and adherence to industry standards.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: We have pre-defined processes for common events, enabling efficient incident management. Users can report incidents via our ITSM platform, which is integrated with ServiceNow, allowing for streamlined communication and tracking. Incident reports are generated automatically and provided to stakeholders within 24-48 hours, detailing the nature of the incident, actions taken, and resolution steps. This structured approach ensures transparency and accountability throughout the incident management lifecycle, contributing to continuous improvement in our service delivery.
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: Atlas
• ISO/IEC 27001 accreditation date: Sunday 13 April 2025
• What the ISO/IEC 27001 doesn’t cover: N/A
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: Atlas
• ISO 9001 accreditation date: Tuesday 1 April 2025
• What the ISO 9001 doesn’t cover: N/A
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: Be7ce590-de10-486e-8431-2e10891a8979
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: Cd8b1a78-44c7-4bb0-84d6-59a7506f3bba
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Plans to engage the contract workforce in deciding the most important workplace issues to address
    • Ensuring new workers are informed of their right to join a trade union
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Activities to cascade good practice on fair working conditions throughout the supply chain
    • Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
    • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
    • Plans for an appropriate income replacement policy for staff who are required to spend time away from work to care for a sick dependent or close relative

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at pstenderteam@insight.com. Tell them what format you need. It will help if you say what assistive technology you use.