Cobry

Google Cloud Platform (GCP)

With Google Cloud Platform, we help organisations to leverage the third largest public cloud.

We cover operations, security, data and application development.

Our example services include:
Infrastructure Modernisation
Data Pipeline Modernisation
Business Intelligence
API Management

However we can meet the needs of many other cloud projects as required.

Features

• Data pipeline modernisation
• Database optimisation
• Real-time analytics
• Increased data governance
• Training and driving a data culture
• Embedded Analytics
• API Management
• SAAS Data Consolidation
• Data Security
• Data Visualisation Services

Benefits

• Lower data processing costs
• Reduce query time
• Enablement of faster decision making
• Increased compliance
• Better trained employees
• Make your data available to customers and end-users.
• Allows managed external use of your data
• Increased visibility of data across applications
• Increased identity and access management
• Increased accessibility to enhance insights from data

£5 a user

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

• Modern Slavery statement

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at ryan@cobry.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

691568578940335

Contact

Ryan McKenna
01413432443
ryan@cobry.co.uk

Service scope

• Service constraints: Company resource and time may be limited, planning and preparation via client communication is therefore crucial.
• System requirements: No concrete system requirements.

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Within agreed SLA; ; Ranging from 2 hrs to 1 working day.; ; Support services are open from 9am-5pm, Monday-Friday.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Yes, at an extra cost
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: None or don’t know
• How the web chat support is accessible: Web Chat is available via Google Chat groups.; ; Available to anyone using our products or services.
• Web chat accessibility testing: N/A
• Onsite support: Yes, at extra cost
• Support levels: Support levels are split into three tiers; Gold, Silver & Bronze; ; Pricing is agreed after scoping the clients needs.; ; Account Manager and Cloud Engineer available depending on the size of project and support agreement.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: We provide on-site and online training (onboarding) in addition to direct consultancy via web-chat.; ; Documentation is provided upon request.; ; Onboarding sessions are provided with most services.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: There are tools available for user data-extraction if required.; ; It is up to the user to extract this data when deciding to end their service agreement.; ; However backups can be provided at an extra cost.
• End-of-contract process: In the price of the contract we offboard the user, and help with any queries that the user may have during the offboarding process.; ; We can assist the user with their offboarding at a technical level at an additional cost - depending on the scope of the project.

Using the service

• Web browser interface: No
• API: No
• Command line interface: No

Scaling

• Scaling available: Yes
• Scaling type:
  • Automatic
  • Manual
• Independence of resources: The infrastructure we leverage is large enough for that not to be an issue (Google). We also have SLA's in place to ensure satisfaction with the service.
• Usage notifications: Yes
• Usage reporting:
  • Email
  • Other

Analytics

• Infrastructure or application metrics: Yes
• Metrics types:
  • CPU
  • Disk
  • HTTP request and response status
  • Memory
  • Network
  • Number of active instances
  • Other
• Other metrics:
  • Uptime
  • Downtime
  • Response-time
  • Pod Numbers
  • Server time
  • Others available for configuration
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: Google

Staff security

• Staff security clearance: Staff screening not performed
• Government security clearance: Up to Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
• User control over data storage and processing locations: Yes
• Datacentre security standards: Supplier-defined controls
• Penetration testing frequency: Never
• Protecting data at rest: Physical access control, complying with another standard
• Data sanitisation process: Yes
• Data sanitisation type: Deleted data can’t be directly accessed
• Equipment disposal approach: In-house destruction process

Backup and recovery

• Backup and recovery: Yes
• What’s backed up:
  • Files
  • Virtual Machines
  • Databases
  • Messaging Queues
  • System Images
  • Objects
  • Configuration
• Backup controls: Depends on the service purchased via Google.
• Datacentre setup: Multiple datacentres with disaster recovery
• Scheduling backups: Supplier controls the whole backup schedule
• Backup recovery:
  • Users can recover backups themselves, for example through a web interface
  • Users contact the support team

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: We adhere to Google Cloud's SLA's found here:; ; https://cloud.google.com/terms/sla
• Approach to resilience: We leverage Google's data centres.; ; More information on this can easily be found online or through request.
• Outage reporting: Public Dashboard for Google Cloud Outages.

Identity and authentication

• User authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google apps)
  • Username or password
• Access restrictions in management interfaces and support channels: Admin can control user permissions and visibility.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Devices users manage the service through: Dedicated device on a segregated network (providers own provision)

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: QMS International
• ISO/IEC 27001 accreditation date: 26/01/2022
• What the ISO/IEC 27001 doesn’t cover: N/A
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: Yes
• Any other security certifications: ISO9001/14001:2013

Security governance

• Named board-level person responsible for service security: No
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Our information security policies are outlined and audited as part of our ISO27001 framework, policies include:; ; Access Control Policy; Anti-Piracy Policy; Backup Policy; Data Protection Policy; EMAIL/CHAT & INTERNET ACCEPTABLE USAGE POLICY; LAPTOP POLICY; LEAVING POLICY; NETWORK SYSTEMS MONITORING POLICY; PASSWORD POLICY; REMOTE ACCESS AND MOBILE COMPUTING POLICY; VIRUS PROTECTION POLICY; SECURITY INCIDENT REPORTING POLICY; ; The ISMS manager ensures all policies are followed, with any non-conformances logged in a non-conformance log. These are internally and externally audited annually at a minimum.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: We rely on the Google documentation to highlight any security issues and respond to those with immediate priority.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Google patches all services we resell.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Supplier responds to all potential compromises and patches on behalf of us.
• Incident management type: Supplier-defined controls
• Incident management approach: Non-conformance logs are kept and maintained.; ; Business Continuity and Disaster recovery plan in place.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Separation between users

• Virtualisation technology used to keep applications and users sharing the same infrastructure apart: No

Energy efficiency

• Energy-efficient datacentres: Yes
• Description of energy efficient datacentres: Google Data Centres are built to adhere to the EU code of conduct.; ; More information here:; https://www.google.co.uk/about/datacenters/efficiency/

Social Value

• Fighting climate change:

  Fighting climate change

  Google is carbon neutral today, but aiming higher: their goal is to run on carbon-free energy, 24/7, at all of our data centers by 2030. Plus, they are sharing technology, methods, and funding to enable organizations around the world to transition to more carbon-free and sustainable systems. A Google data center is twice as energy efficient as a typical enterprise data center, and now delivers six times as much computing power for the same amount of electrical power, compared with five years ago. Google are sharing performance data to move the entire industry forward, and help businesses get greener.
• Covid-19 recovery:

  Covid-19 recovery

  Google provided a lot of features for free during the COVID-19 lockdown so that businesses could collaborate and communicate remotely.
• Tackling economic inequality:

  Tackling economic inequality

  Google's circular principles affect how we design products, buildings, and infrastructure, helping them make smarter use of the Earth’s resources. Google design out waste and pollution, keep materials in use, and promote more sustainable supply chains.
• Equal opportunity:

  Equal opportunity

  Google is committed to continuing to make diversity, equity, and inclusion part of everything they do—from how they build their products to how they build their workforce. Google is growing to fulfill that vision. In the past few years, they’ve doubled in size—today, they have more than 100,000 employees in 170 cities spanning nearly 60 countries. Operating at this scale brings an elevated level of responsibility to everything they do—including a workforce that's more representative of their users, and a workplace that creates a sense of belonging for everyone. View the diversity report via the link below: https://diversity.google/annual-report/
• Wellbeing:

  Wellbeing

  As technology becomes more and more integral to everything we do, it can sometimes distract us from the things that matter most to us. Google believes technology should improve life, not distract from it. They’re committed to giving everyone the tools they need to develop their own sense of digital wellbeing. So that life, not the technology in it, stays front and center.

Pricing

• Price: £5 a user
• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: 90-day, $300 Free Trial; ; Free Tier: All Google Cloud customers can use select Google Cloud products—like Compute Engine, Cloud Storage, and BigQuery—free of charge, within specified monthly usage limits.; ; Google Maps Platform monthly credit: Google Maps Platform features a recurring $200 monthly credit (see Pricing for Maps, Routes, and Places).
• Link to free trial: https://cloud.google.com/free/docs/gcp-free-tier

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

• Modern Slavery statement

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at ryan@cobry.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.