Application Management (DevOps)
Endava has a proven approach to DevSecOps which helps you achieve faster business value yield & responsiveness, at scale, without compromising on quality, security, or operability.
We have an established framework to map your capability and use that to recommend a strategy and implement it with you.
Features
- DevSecOps and DevOps capability mapping
- DevSecOps and DevOps strategy
- Advice and implementation for DevSecOps tools and processes
- Value Stream mapping approach to indetify proces bottlenecks
- Cross Functional approach
Benefits
- Proven Expertise with largest clients transformation to faster, better delivery
- Improved, streamlined delivery processes
Pricing
£320 to £1,300 a unit a day
- Education pricing available
Service documents
Request an accessible format
Framework
G-Cloud 14
Service ID
5 1 5 6 8 0 4 9 7 2 3 9 2 0 7
Contact
Endava (UK) Limited
Jelena Jecmenic
Telephone: +38651360032
Email: jelena.jecmenic@endava.com
Planning
- Planning service
- Yes
- How the planning service works
- We help you build creating a DevSecOps capability into your plans
- Planning service works with specific services
- No
Training
- Training service provided
- Yes
- How the training service works
- As part of creating your DevSecOps capability, we will work as part of your teams to make sure that knowledge is passed on, using hands-on techniques as well as training where appropriate.
- Training is tied to specific services
- No
Setup and migration
- Setup or migration service available
- Yes
- How the setup or migration service works
- DevSecOps techniques can be used to migrate between cloud platforms, especially where migration is incremental (e.g. by customer or application function or other ), to have reliable, repeatable pipeline and processes will provide cost effective and lower risk migration.
- Setup or migration service is for specific cloud services
- No
Quality assurance and performance testing
- Quality assurance and performance testing service
- Yes
- How the quality assurance and performance testing works
-
"As part of a wider DevSecOps strategy, the DevSecOps engineer helps a given cross-functional team to implement a CI/CD pipeline with a suitable suite of application security test tooling (SAST), to complement other ancillary security tooling required such as IAST, SIEM and threat modelling software. The pipeline adheres to a security-by-design workflow as a variant of agile methodology, whereby a balance is struck between identifying security issues as early as possible in the development/test cycle, and over-hardening the software too early. Application code/ build artefacts are incrementally reviewed and scanned as they are promoted through successively robust environments.
Performance testing is not specifically tied to DevSecOps in particular, but our typical approach is to combine advance planning (and scheduling) with automated jobs that run overnight - for example, a CI/CD pipeline can trigger a JMeter run against a staging or pre-production environment, and publish the results for the team to review."
Security testing
- Security services
- Yes
- Security services type
-
- Security strategy
- Security design
- Security testing
- Certified security testers
- No
Ongoing support
- Ongoing support service
- Yes
- Types of service supported
-
- Hosting or software provided by your organisation
- Hosting or software provided by a third-party organisation
- How the support service works
- We build a business-focused service desk with smart contracts building in transparent incentives that encourage a long-term partnership and vision to drive down costs, drive up satisfaction and deliver a personalised and optimised user experience. We achieve this by investing in research and analysis to target call reduction, by implementing automation and self-service that users want to use, and through development of first class service delivery, tools and process engineering to design in efficiency and customer satisfaction. By harnessing our extensive knowledge-base built through delivering support services to over 10,000 end users for global organisations, across 60 countries, we optimise our service to all clients by spotting patterns in this rich source of data. Our Service Desk operations are managed within our Information Security Management System certified to ISO 27001, while our staff are screened to BS 7858 standards. We ensure excellence in delivery and have been awarded a top 3 position in the last four years of Service Desk Institute awards. We partner with the Service Desk Institute and regularly assess customer satisfaction to ensure we maintain our standard of over 90 percent “satisfied” and “very satisfied” Service Desk users, measured through both our own and independent surveys.
Service scope
- Service constraints
- None
User support
- Email or online ticketing support
- Email or online ticketing
- Support response times
- Response times are agreed as the service commitment with the Client, both in the services to be delivered and response to service demand. Weekend response times are part of that agreement.
- User can manage status and priority of support tickets
- Yes
- Online ticketing support accessibility
- WCAG 2.1 A
- Phone support
- Yes
- Phone support availability
- 24 hours, 7 days a week
- Web chat support
- Web chat
- Web chat support availability
- 24 hours, 7 days a week
- Web chat support accessibility standard
- WCAG 2.1 A
- Web chat accessibility testing
- We test all our services as required by clients.
- Support levels
- Support levels and costs are agreed with each client. We provide technical account managers and engineers as required.
Resellers
- Supplier type
- Not a reseller
Staff security
- Staff security clearance
- Conforms to BS7858:2019
- Government security clearance
- Up to Baseline Personnel Security Standard (BPSS)
Standards and certifications
- ISO/IEC 27001 certification
- Yes
- Who accredited the ISO/IEC 27001
- N/a
- ISO/IEC 27001 accreditation date
- N/a
- What the ISO/IEC 27001 doesn’t cover
- N/a
- ISO 28000:2007 certification
- No
- CSA STAR certification
- No
- PCI certification
- No
- Cyber essentials
- Yes
- Cyber essentials plus
- No
- Other security certifications
- Yes
- Any other security certifications
- SOC Type II Report
Social Value
- Social Value
-
Social Value
- Fighting climate change
- Covid-19 recovery
- Tackling economic inequality
- Equal opportunity
- Wellbeing
Fighting climate change
On climate change We identify aspects of our business that impact the environment and comply with all relevant legislation and regulatory controls in each of our locations. We consume material goods in moderation, extend the lifecycle of our IT equipment, and thoughtfully manage and reduce waste. We also play our part in tackling broader environmental issues by supporting local community projects. Our Environmental Reporting Steering Committee is a management level body responsible for managing day-to-day activities related to Endava’s environmental performance and mitigating environment and climate-related risks. This committee meets on a monthly basis and discusses and signs off on processes, controls and strategy as well as on environmental reporting methodology. It is also responsible for providing regular updates to the Endava Board. The Committee includes senior management from across Endava, including the CFO, Group General Counsel and Head of ESG. Endava We Care (Sustainability Report) - https://www.endava.com/who-we-are/sustainability-at-endavaCovid-19 recovery
Endava’s people volunteer their time and expertise to local causes, bringing our values to life in practical ways. In response to COVID-19, they stepped up, including by helping local communities build health and safety digital solutions, creating 3D printed face mask components when personal protective equipment (PPE) was in short supply, and organising a global fundraising campaign to support hospitals and charities. Endava We Care (Sustainability Report) - https://www.endava.com/who-we-are/sustainability-at-endavaTackling economic inequality
As good corporate citizens, we are passionate about partnerships that support the communities where we live and work and the broader technology and services industry – it’s how we meaningfully bring our values to life. We are immensely proud of our social impact work over the past two decades – especially in our Central European locations, where we have supported local growth by providing sustainable career opportunities and joined local community projects. Endava We Care (Sustainability Report) - https://www.endava.com/who-we-are/sustainability-at-endavaEqual opportunity
Endava is a place where we can all be authentic and inspired and collaborate across boundaries as part of highly effective teams. Our aim is to create a working environment that offers both equality and equity of career opportunity based on merit, powered by development opportunities such as the Endava University learning platform, Pass It On sessions, and regular employee engagement by our CEO and senior leaders. Endava We Care (Sustainability Report) - https://www.endava.com/who-we-are/sustainability-at-endavaWellbeing
To enable our people to grow and stay connected, we introduced Endava Wellbeing in 2020. The programme brings together a wealth of tools and resources organised around four key pillars – Mind, Body, Home and Community. The programme encourages exploration of the mechanics of the Mind, discovering the most critical steps in taking care of the Body, examining the need for digital detoxing at Home and learning about the important role Community plays in having a sense of belonging. Endava We Care (Sustainability Report) - https://www.endava.com/who-we-are/sustainability-at-endava
Pricing
- Price
- £320 to £1,300 a unit a day
- Discount for educational organisations
- Yes