A2G CYBER LIMITED

Security Architecture Reviews and Remediation Support Service

An independent security architecture review service of an organisation’s systems (cloud, on-premise, or high-assurance environments) to identify and prioritise security risks, assess key controls (access, administration, logging, data handling, change processes), and deliver a clear remediation plan with optional implementation support and knowledge transfer.

Features

• Security architecture review service
• Threat modelling and risk assessment to prioritise controls and mitigations.
• Security control review for identity, access, logging, monitoring, and response.
• High assurance and cross domain boundary review for sensitive systems.
• Vendor and product selection support aligned to security requirements constraints.
• Documentation and diagrams to clarify data flows and trust boundaries.
• Remediation roadmap with quick wins, medium term actions, strategic improvements.
• Implementation support and knowledge transfer to embed sustainable security practices.
• Documentation, runbooks, and knowledge transfer to internal teams.

Benefits

• Reduces business risk and cost through prioritised security remediation.
• Speeds design decisions with clear, evidence-based architecture findings.
• Cuts rework by catching architectural flaws before build.
• Accelerates approvals using structured, auditable security documentation.
• Improves accountability with agreed actions, owners, and deadlines.
• Improves incident response with stronger logging, monitoring, and traceability.
• Reduces privileged access exposure by tightening administrative controls.
• Reduces change risk with tested rollbacks and safe deployment practices.
• Increases stakeholder confidence through measurable risk reduction outcomes.
• Standardises reviews using repeatable templates, checklists, and playbooks.

Service documents

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at procurement@a2g-cyber.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

553637939593043

Contact

Shane Mallia
07950 670373
procurement@a2g-cyber.com

About the service

• Service categories:
  • Cloud Support Services
    • Security Services
      • Security strategy
        • Security strategy
      • Security design
        • Security design

Service scope

• Service constraints: Remote delivery by default (onsite available by agreement).; ; Requires appropriate admin access, if required (read-only for assessment).; ; Requires access to key stakeholders for interviews and clarifications. Internal champion to organise introductions to stakeholders.; ; Requires access to design documentation: HLDs, LLDs, and architecture diagrams.; ; Findings depend on access granted, evidence quality, and documentation completeness.; ; Limited access or missing documents may reduce assurance depth and confidence.; ; Implementation support needs buyer approvals, change windows, and testing availability.; ; Scope limited to agreed systems; additions require formal scope change.

User support

• Email or online ticketing support: Yes
• Support response times: Business hours: respond within 8 working hours (Mon–Fri, 09:00–17:00 UK).; Outside business hours: respond within 1 business day.; Weekends/bank holidays: Not monitored, but responses are typically next business day unless pre-agreed as part of an incident support arrangement.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Yes
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• AI chatbot: No
• Web chat support accessibility standard: None or don’t know
• How the web chat support is accessible: We allow Microsoft Teams direct messages for support queries
• Web chat accessibility testing: We allow Microsoft Teams direct messages for support queries. The client uses their Microsoft Teams configuration to contact us.
• Support levels: Support is available Mon–Fri 09:00–17:30 (UK) via email, phone and Microsoft Teams (standard support only). Any out-of-hours support would be agreed on an individual basis. A named lead consultant is assigned to each engagement and acts as the Technical Account Manager (TAM) for coordination, prioritisation and escalation. The same lead consultant provides the cloud support engineering capability where required.; ; All support time (including answering questions, troubleshooting, remediation and implementation assistance) is charged at our hourly rate, as set out on our Lot 3 rate card. Any out of hours support will be charged at time and a half.

Supplier type

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Staff screening not performed
• Government security clearance: Developed Vetting (DV)

Pricing

• Discount for educational organisations: No

Government Digital and Data Roles

Architecture roles

Security architect

Role level	UK Rate	Offshore Rate
Security architect	£1,080.00
Lead security architect	£1,440.00
Principal security architect	£1,720.00

Chief digital and data roles

Chief information security officer

Role level	UK Rate	Offshore Rate
Chief information security officer	£1,720.00

Chief technology officer

Role level	UK Rate	Offshore Rate
Chief technology officer	£1,720.00

Cyber security roles

Cyber security audit and assurance

Role level	UK Rate	Offshore Rate
Lead cyber security audit and assurance	£1,080.00
Principal cyber security audit and assurance	£1,440.00

Cyber security governance and risk management

Role level	UK Rate	Offshore Rate
Associate cyber security governance and risk manager	£1,080.00
Lead cyber security governance and risk manager	£1,440.00
Principal cyber security governance and risk manager	£1,720.00

Cyber security monitoring

Role level	UK Rate	Offshore Rate
Associate cyber security monitoring	£1,080.00
Lead cyber security monitoring	£1,440.00
Principal cyber security monitoring	£1,720.00

Cyber security incident response

Role level	UK Rate	Offshore Rate
Associate cyber incident response	£1,080.00
Lead cyber security incident response	£1,440.00
Principal cyber security incident response	£1,720.00

Cyber security vulnerability management

Role level	UK Rate	Offshore Rate
Associate cyber security vulnerability management	£1,080.00
Lead cyber security vulnerability management	£1,440.00
Principal cyber security vulnerability management	£1,720.00

Cyber security testing

Role level	UK Rate	Offshore Rate
Lead cyber security penetration testing	£1,500.00
Principal cyber security testing	£1,720.00

Cyber security secure design

Role level	UK Rate	Offshore Rate
Associate cyber security secure systems architecture and design	£1,080.00
Lead cyber security secure systems architecture and design	£1,440.00
Principal cyber security secure systems architecture and design	£1,720.00

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber Essentials Certificate Number: Bf4dcc63-5fb4-412a-a9aa-e5bf3ff6750f
• Cyber essentials plus: No
• Cyber Essentials Alternative: None of the criteria
• Other security certifications: No

Social value

• Mission: Kick start economic growth:

  To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

  Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

  • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges

Service documents

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at procurement@a2g-cyber.com. Tell them what format you need. It will help if you say what assistive technology you use.