LogiQ Consulting Ltd

Secure Application Hosting (Cloud)

The service provides an application hosting environment approved for holding information up to OFFICIAL-SENSITIVE. Logiq will host customer applications that enable the processing and storage of sensitive information. All administration of the platform is conducted by Logiq.

Features

• MOD DART accredited platform
• Fully managed IT Service
• Application hosting
• Secure by Design

Benefits

• Fully managed accreditation approvals
• Rapid deployment
• Scalable from 1 - 5000+ users
• Bespoke applications and requirements implemented
• Application patching

£100 to £5,000 an instance a month

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at commercial@logiqconsulting.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

538355024633797

Contact

Tamzin Vaughan
0117 313 0902
commercial@logiqconsulting.co.uk

Service scope

• Service constraints: All applications will need to conform to the associated Application Joining Rules.; Support is limited to ensuring the hosting application is maintained and available for use. Application functional support is out of scope.
• System requirements:
  • Meet MOD and Government security policy and guidance
  • Satisfies industry security standards
  • Host line of business applications
  • Rapid deployment
  • Secure by Design

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Within 4 hours, Monday-Friday and between 9am and 5pm (excluding Bank Holidays)
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.1 AA or EN 301 549
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Yes, at an extra cost
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: WCAG 2.1 AA or EN 301 549
• Web chat accessibility testing: NA
• Onsite support: Yes, at extra cost
• Support levels: Logiq Consulting provide online & telephone UK support between 9 - 5pm Monday to Friday (excluding Bank holidays) in our standard pricing. The service is ITIL aligned and certified to ISO20000. Logiq provide additional range of support levels to meet customer requirements, these are tailored to the customers business need and will be priced on request.
• Support available to third parties: No

Onboarding and offboarding

• Getting started: Typically an on-site or Video Conference introduction is provided at the beginning of the service, covering the primary aspects of the service. Further support is provided through the service portal and also through Microsoft documentation.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: This process can vary, but the process will be agreed prior to the commencement of the contract.
• End-of-contract process: At the end of the contract a data migration process will be decided upon and a migration plan will be produced. Where there are non-standard requirements and additional hardware is required to facilitate this, there is typically an additional charge.

Using the service

• Web browser interface: Yes
• Using the web interface: Details available on request
• Web interface accessibility standard: WCAG 2.1 AA or EN 301 549
• Web interface accessibility testing: NA
• API: No
• Command line interface: No

Scaling

• Scaling available: Yes
• Scaling type: Manual
• Independence of resources: The service is appropriately designed utilising scalable cloud technology to ensure the number of users doesn't affect the service.
• Usage notifications: Yes
• Usage reporting: Email

Analytics

• Infrastructure or application metrics: Yes
• Metrics types: Other
• Other metrics: These can be defined at the beginning of the contract
• Reporting types: Reports on request

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: Microsoft

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CHECK service provider
• Protecting data at rest:
  • Physical access control, complying with another standard
  • Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type: Explicit overwriting of storage before reallocation
• Equipment disposal approach: In-house destruction process

Backup and recovery

• Backup and recovery: Yes
• What’s backed up:
  • All files and data
  • Virtual machines (where applicable)
  • Databases (where applicable)
• Backup controls: This is established at the start of the service.
• Datacentre setup:
  • Multiple datacentres
  • Single datacentre
• Scheduling backups: Supplier controls the whole backup schedule
• Backup recovery: Users contact the support team

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: SLAs are defined by the cloud services which the service is built upon. These service levels are typically 99.9%.
• Approach to resilience: Resilience information is available on request.
• Outage reporting: Email alerts and via the service desk portal

Identity and authentication

• User authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Username or password
• Access restrictions in management interfaces and support channels: Available on request
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Username or password
• Devices users manage the service through:
  • Dedicated device on a segregated network (providers own provision)
  • Any device but through a bastion host (a bastion host is a server that provides access to a private network from an external network such as the internet)

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: Between 6 months and 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: Between 6 months and 12 months
• How long system logs are stored for: Between 6 months and 12 months

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: Yes
• Who accredited the PCI DSS certification: Barclaycard
• PCI DSS accreditation date: 15/08/2023
• What the PCI DSS doesn’t cover: No exemptions
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: Yes
• Any other security certifications: MOD Accreditation - DISX

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: Other
• Other security governance standards: Cyber Essentials PLUS, IASME Governance
• Information security policies and processes: Logiq follow the principles of ISO27001. Policies available on request.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Logiq Consulting run a configuration and change management process for all their services. Processes are based on ITIL best practice industry standards. All processes are owned by the Head of Service Management.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Threats are assessed on a daily basis through a Threat Management engine along with government notices. Patches are deployed within 14 days of a patch being available. Typically these are deployed within a day.
• Protective monitoring type: Undisclosed
• Protective monitoring approach: Monitoring is conducted with automated analysis using industry recognised engines and tools. Alerts are configured and responded to as and when these occur. Manual reviews of activities are conducted on a regular basis.
• Incident management type: Supplier-defined controls
• Incident management approach: Incident management processes are documented and reported on.

Secure development

• Approach to secure software development best practice: Supplier-defined process

Separation between users

• Virtualisation technology used to keep applications and users sharing the same infrastructure apart: Yes
• Who implements virtualisation: Third-party
• Third-party virtualisation provider: Microsoft
• How shared infrastructure is kept separate: Defined by Microsoft

Energy efficiency

• Energy-efficient datacentres: Yes
• Description of energy efficient datacentres: Available on request

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  Logiq Consulting recognises it has a responsibility to the environment beyond legal and regulatory requirements and is dedicated to mitigating negative environmental impacts through targeted measures. We prioritise energy efficiency by employing smart technologies, virtualization and remote working policy. We manage electronic waste responsibly through certified recycling programs and promote green procurement practices through our SCM tool. Additionally, we invest in carbon offsetting initiatives by implementing our own Carbon Reduction Plan working toward Net Zero in line with PPN/0621 to counterbalance unavoidable emissions. Employee awareness and training programs foster a culture of sustainability, while ongoing environmental impact assessment drive continuous improvement. Strategic collaborations play a significant role in our approach and we collaborate with various providers and industry associations focused on sustainable solutions. These collaborations enable us to access cutting-edge technologies and share best practices for reducing environmental footprint in delivering the contract. This collaboration ensures that Logiq’s services not only meet security needs but also minimize its environmental impact. Logiq engages with its clients, regulatory bodies and industry experts to gather input and align its services with the environmental objectives. ; ; Logiq will regularly review the supply chain to ensure that they align with our ethos and environmental committments. We will conduct supply chain assessments by implementinga specialized Supply Chain Management tool where the responses will be monitored for compliance.By using this SCM tool, Logiq will ensure the contract performance will support the environmental objectives imposed by the Government’s 25 year plan. ; ; Throughout the contract lifecycle, we will maintain a commitment for continuous improvement where the environmental performance metrics will be monitored at Board Level and mitigation measures will be put in place to avoid any negative impacts. Also, feedback from stakeholders will guide our efforts to optimize environmental sustainability in providing the delivery of the contract.

  Covid-19 recovery

  As the global pandemic continues to have a knock-on effect to businesses and individuals, Logiq Consulting remains committed to ensuring that there are measures in place to minimise the impact to our employees and stakeholders. ; ; Prioritising the health and safety of our workforce while maintaining operational efficiency is key. Our offices are maintained to a high standard of cleanliness, and it is encouraged that employees adopt the same approach in their home office spaces. We respect the choices of the individual and strive to satisfy the requirements of the team to ensure that they feel safe in the workplace. Our employees have access to personal protective equipment if they choose as well as access to our HR team and Employee Assistance Programme for any concerns they may have. ; ; During the lifecycle of the contract, Logiq is dedicated at ensuring the customer’s Covid-19 policies are followed by all Logiq employees whilst also maintaining the highest level of precaution. ; ; Whilst Logiq has been proactive on ensuring its employees focused on working from home before, during and after the Covid-19 pandemic by making sure Covid-19 health and safety practices have been followed at all times. ; ; We have introduced flexible working arrangements as well as remote working which ensures continuity of contract delivery and uninterrupted services whilst simultaneously supporting the employees to work safely. ; ; We believe as a business we strike the right balance for our employees, the client and the local communities and will continue to monitor and assess the COVID-19 situation as well as taking on board feedback from our employees and stakeholders allowing us to implement changes as necessary.

  Tackling economic inequality

  Logiq Consulting is committed to addressing economic inequality. We understand and have experience in issues affecting employment, skills, and employment shortages in high-growth sectors. We also understand and have experience in relevant education and training issues. ; ; Through our recruitment policy and a range of methodologies and activities, we strive to create jobs and develop new skills to support contract requirements. We target recruitment to improve awareness of opportunities amongst people facing barriers to employment, e.g., ex-service personnel, work returners, people with disabilities, school leavers, and those in regionally deprived areas. ; ; We encourage collaboration and value feedback from stakeholders which guide our efforts to optimise effective recruitment campaigns, gathering ideas for solutions and initiatives. We work with suppliers to ensure they prioritise skills development and employment throughout the supply chain. ; ; Our commitment extends beyond recruitment where we create targeted programmes focusing on providing interested pupils with diverse work experience, conducting training schemes designed to result in recognised qualifications, building staff capabilities, actively attracting new and diverse talent, and promoting awareness of career development and recruitment opportunities. ; ; Through Continual Professional Development and by providing necessary tools and resources, we provide opportunities for employees to enhance their skills in collaboration with local training providers. We encourage volunteering, finding opportunities for employees to support careers initiatives in the local community. ; ; Our initiatives are strategically located to benefit individuals residing in and around the South-West (Bristol, Wiltshire, Devon) where 95% of our employees live and work. These initiatives include fostering social value, tackling economic inequality and contributing to local and regional community development. ; ; A social values committee is appointed to manage, monitor and deliver on our commitments, regularly consolidating metrics to be measured and analysed for review at Board level and ensuring that all initiatives and activities are robust, successful and metrics are transparently reported.

  Equal opportunity

  Logiq Consulting is dedicated to fostering an inclusive and diverse work environment where providing equal opportunities is more than policy. We strongly believe that diversity is a fundamental driver of innovation, creativity and success and everyone, regardless of background, has an equal chance to thrive at Logiq. ; ; In line with this commitment, Logiq have implemented various initiatives and practices aimed at promoting equality and diversity within our workforce. We have created an unbiased recruitment process to ensure a level playing field for all candidates, offering fair pay and flexible working to all employees. During the lifecycle of the contract, we strive to increase representation of people with disabilities and disadvantaged or under-represented groups and collect data to support our efforts. ; ; Logiq provides training and development opportunities for all employees supporting growth and to develop skills relevant to the contract. We aim to create an environment where everyone has an opportunity to succeed based on their skills, experience, and dedication. ; ; Logiq have established clear policies and procedures to prevent discrimination and harassment of any kind. We tackle modern slavery risks in the delivery of the contract by stringent diligence of the supply chain requiring all stakeholders to adhere to the Logiq ethos. ; ; We actively promote a culture of respect, understanding, and collaboration, where every individual has a voice and is valued for their unique perspectives and contributions. We are committed to continuous improvement and strive to continue in our efforts to maintain a safe and respectful working environment for all.

  Wellbeing

  Logiq Consulting is committed to supporting our employees and their families, suppliers and local communities to enhance their physical, mental and emotional wellness. We recognise that a healthy workforce is crucial for productivity, engagement and success and have implemented various strategies and initiatives to support our employees. ; ; Logiq promotes a healthy work-life balance by offering flexible working to all employees. We encourage a culture of open communication and support by internal resources as well as access to mental health support services via an Employee Assistance Programme. Logiq supports an active Mental Health First Aid Team, who provide support to all employees using on-line engagement for mental health drop-ins and physical meets through dedicated regular coffee mornings. ; ; Logiq strive to increase employee awareness and have focussed activity for Mental Health Awareness week. Our activities include guided meditation, wellbeing workshops, team walks, runs and cycling as well as a companywide steps initiative. We encourage a positive and nurturing working environment where employees feel able to prioritise their wellbeing. Logiq are committed to expanding the support of our employees and will regularly offer the opportunity to attend Mental Health First Aider training throughout the contract to ensure there is qualified support within each team. ; ; We have developed guidelines so that all employees have access to resources and support needed throughout the employee lifecycle. By demonstrating our commitment to employee wellbeing, we not only enhance the health and happiness of the team but also drive performance, productivity and retention. We strive to continuously seek to improve and develop our initiatives and are dedicated to maintaining a culture of respect, understanding and support.

Pricing

• Price: £100 to £5,000 an instance a month
• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: A demonstration of existing applications on the service

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at commercial@logiqconsulting.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.