Trustmarque Solutions Limited

Livingstone (part of Trustmarque) - Cloud vendor management and audit defence

Organisations are adopting IaaS platforms to deliver an increasing number of software based services, but complex licensing models can differ between on-premise and cloud, carrying significant risks. Our service helps manage vendor contracts and cloud licensing, supporting the preparation for audits (defence), ensuring compliance and minimising related costs and risks.

Features

• Software publisher (vendor) contract and entitlements assessment
• Asset inventory data collection, cleansing, normalisation, assessment and remediation
• Cloud software deployment and usage/consumption analysis
• Tooling review including data and reporting accuracy validation
• Assessment of cloud governance maturity - ITAM capabilities and capacity
• Review of existing ITAM governance processes and policies
• Mitigating identified risks and costs, minimising financial and reputational damage
• Support preparing for audits, consumption calculations & true-up requirements
• Recommendations for cloud licensing models and cost optimisation
• Roadmap for future vendor and audit management

Benefits

• Pro-active management of vendor/software publishers utilised in the cloud
• Optimises commercial terms vendor/software publishers for cloud software
• Minimises reputational and financial damage from audit non-compliance
• Provides visibility of licensing entitlements, asset inventory & contracts
• Ensures correct software licensing is in place for cloud deployments
• Recommends SAM & ITAM best practice ensures effective cloud governance
• Software publisher/vendor audits, become routine, non-disruptive and inexpensive
• Alignment of people, processes and technology through policy & process
• Audit defence minimises potential cloud liabilities & risks
• Access to Derive Logics expertise, knowledge base and experience

£450 to £1,560 a unit a day

• Education pricing available

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@trustmarque.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

477745646084745

Contact

Lorraine Spence
01904 924089
tenders@trustmarque.com

Planning

• Planning service: Yes
• How the planning service works: We help buyers to develop a strategic plan that ensures successful migration to cloud. Achieving a pragmatic hybrid architecture that combines business applications and data that can be migrated to the cloud and those that have to stay on-premise; is a reality for most clients. We help clients to Plan (Access and Discover), Transform (Design and Deliver) and Operate (Manage and Optimise) cloud ecosystems.; ; As part of the Plan stage, we help clients by engaging and applying a unique set of diagnostic discovery techniques and methodologies using highly skilled consultants, to understand the current landscape of technology (architecture and tools), commercial (contracts and pricing models) and operational (processes and procedures) within the client organisation. Three facets – Technology, Operational and Commercial must be planned for as part of a successful strategic move away from enterprise on-premise business applications to cloud-bases consumption services and transformed Target Operating Model (TOM).; ; The outputs from this Plan stage provide the client with a visual clarity as to where they are, the current challenges across the IT landscape and a high-level roadmap of transformation to achieve the target state
• Planning service works with specific services: No

Training

• Training service provided: Yes
• How the training service works: We are able to provide training for Asset Management Tooling either provided via the cloud or to manage IT assets being consumed in the cloud. This includes but is not limited to end-user training on tool usage best practice, functionality, process and procedure. We also provide administration and super-user training on system set-up, configuration and integration, general management best practice and reporting and dashboard creation and management.
• Training is tied to specific services: Yes
• Services the training service works with:
  • Snow Software as a Service
  • ITAM/SAM Management Platforms (as required)
  • Corinium Platform (Derive Logic)

Setup and migration

• Setup or migration service available: No

Quality assurance and performance testing

• Quality assurance and performance testing service: No

Security testing

• Security services: Yes
• Security services type:
  • Security strategy
  • Security risk management
  • Security design
  • Cyber security consultancy
  • Security testing
  • Security incident management
  • Security audit services
• Certified security testers: Yes
• Security testing certifications:
  • CHECK
  • CREST
  • Cyber Scheme

Ongoing support

• Ongoing support service: Yes
• Types of service supported:
  • Buyer hosting or software
  • Hosting or software provided by a third-party organisation
• How the support service works: We have a range of Professional and Managed Services aimed at supporting the buyer, finance, IT and Commercial teams throughout the cloud software lifecycle, these include but are not limited to the following...; ; User Management - including cloud software asset requests and cloud/hosting request management.; ; Service Management - we help our clients establish effective target operating model framework for cloud services that aligns people, process and technology to achieve real governance and control over the lifecycle of their cloud based assets.; ; Support Desk - We operate a support desk that supports both buyers and users with advice on cloud software services, including but not limited to asset management tooling, software licensing for cloud environments, compliance and optimisation, as well as general ITAM and SAM related queries.

Service scope

• Service constraints: This service will only cover the vendors/software publishers and their products or cloud service providers as defined within our Statement of Work (SoW) scope and/or Call of Contract.; ; Provision of any inventory or discovery tools for the purposes of collecting application usage, inventory or consumption data is not included.; ; Our Support Desk operates in office hours 9-5.30pm Monday to Friday, excluding Bank Holidays.

User support

• Email or online ticketing support: Yes, at extra cost
• Support response times: First response or acknowledgement one working day. In this response we provide ticket details and priority, we also provide details of expected timeline for resolution based on SLAs agreed with buyers. Our support deck operates 9am to 5.30pm (UK time), Monday to Friday excluding bank holidays.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Support levels: Our Service Desk Analysts act as a single point of contact and aim to resolve issues and queries on the first call. Should that not be possible we have a clear escalation path to Level 2 and 3 resources to ensure rapid resolution, via escalation to the appropriate Consultant or Architect as required.; ; Level1: Service Desk – Single Point of Contact (SPoC), call/ticket logging and reporting, support and advice with goal of first call resolution.; ; Level2: Licensing Consultant – skilled in cloud licensing and compliance, covering specified vendors or software publishers.; ; Level3: Senior Consultant or Architect - extensive experience and skills in SAM & ITAM transformation including cloud licensing, optimisation & data architecture.; ; If the client issue cannot be resolved remotely via telephone or web conference, we can provide on-site user support provided by our technical experts and consultants as defined by individual client contracts agreed with buyers on the framework. Pricing for on-site support will be dependant upon SLA and defined number and frequency of visits, to be defined and agreed with buyer at time of order.

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Developed Vetting (DV)

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: LRQA
• ISO/IEC 27001 accreditation date: 06/03/2023
• What the ISO/IEC 27001 doesn’t cover: Anything that is NOT covered in the following: Information Security for the provision and support of the end-to-end IT services; software, cloud, cyber security, managed services and datacentre solutions; including strategy, planning and integration, licensing, deployment, and management of third-party service providers. In accordance with Statement of Applicability version 5.n.
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: Yes
• Who accredited the PCI DSS certification: PCI Security Standards Council
• PCI DSS accreditation date: 25/07/2023
• What the PCI DSS doesn’t cover: Trustmarque is PCI-DSS Level 4 Compliant
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: Yes
• Any other security certifications:
  • PSN
  • ISO22301 (Continuity and Data Recovery)

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  Trustmarque's Environmental Policy and Carbon Reduction Plan include delivering and supporting actions on reducing our carbon footprint and our impact on climate change. We have set a target to achieve net zero by 2035. Our policies include 'Virtual First 'meetings, energy reduction plans, flexible working, green software solutions and associated services from innovative suppliers to promote digital environmental innovation, promoting sustainable procurement. Please contact Trustmarque to discuss the provision of Social Value. Any Social Value deliverable must be agreed with Trustmarque and be proportionate to the contract value and scope.

  Covid-19 recovery

  Trustmarque can provide re-training for those left disadvantaged by Covid-19 through skills training, CV and interview workshops. We promote employment and skills by working with Buyers to identify individuals who can benefit from our incentives, which can include workshops to develop and help those who face barriers to employment and increase digital accessibility for communities and hard to reach groups. We can also provide access to apply for apprenticeship and work experience opportunities. Please contact Trustmarque to discuss the provision of Social Value. Any Social Value deliverable must be agreed with Trustmarque and be proportionate to the contract value and scope.

  Tackling economic inequality

  Trustmarque tackles economic inequality through operating a diverse supply chain including many SMEs and micro businesses. Our access to a broad range of suppliers ensures both resilience and capacity. Trustmarque is continuously refining our supply chain to meet the ever-changing needs of our customers and to ensure we can always offer the best solution through capability, capacity and resilience at the best price. Our vendor agnostic approach among suppliers allows us to support innovation and disruptive technologies to deliver lower cost and/or higher quality goods and services to customers. Please contact Trustmarque to discuss the provision of Social Value. Any Social Value deliverable must be agreed with Trustmarque and be proportionate to the contract value and scope.

  Equal opportunity

  Trustmarque operates an Equal Opportunities policy that outlines our commitments including creating a workforce that reflects the diversity of our communities. Other initiatives include supporting disabled people to develop skills and supporting in-work progression. Trustmarque is a Level 1 Disability Confident employer, demonstrating our commitment to employing a diverse workforce so all can flourish. We are committed to a policy of treating all its employees and applicants equally. We are committed to creating an environment where diversity is valued and respected and where our people can bring their different perspectives, and whole selves to work. Inclusivity and equal opportunities for all colleagues are paramount. Trustmarque is a Living wage employer, and we offer 14–18-month apprenticeships. In February 2024 we launched Encircle our DEI network – made by colleagues, for colleagues to support Diversity, Equity, and Inclusion in the workplace. Please contact Trustmarque to discuss the provision of Social Value. Any Social Value deliverable must be agreed with Trustmarque and be proportionate to the contract value and scope.

  Wellbeing

  We align our approach to mental wellbeing to the six standards in the Mental Health at Work commitment, including staff work and wellbeing sessions, flexible working, speak-up policy, etc. We have a dedicated team of qualified Mental Health First Aiders who offer support to all Trustmarque Group Colleagues to offer advice regarding how to support and signpost – this is linked to the ALGEE mental health action plan. The Work+Wellbeing team also facilitate workshops or share resources to support wellbeing within the workplace, this can be found on our Work+Wellbeing team via the Trustmarque Hub. We have an Employee Assistance Programme which is available 24/7 to all Trustmarque Group Colleagues. Please contact Trustmarque to discuss the provision of Social Value. Any Social Value deliverable must be agreed with Trustmarque and be proportionate to the contract value and scope.

Pricing

• Price: £450 to £1,560 a unit a day
• Discount for educational organisations: Yes

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@trustmarque.com. Tell them what format you need. It will help if you say what assistive technology you use.