FORGE TECHNOLOGIES LTD

Forge Cloud Resiliency

Forge’s managed service solutions, built on Rubrik’s Security Cloud, enable organisations to control their entire backup environment ensuring resiliency against data loss, natural disasters and cyber attacks

Features

Schedule backups that meet your requirements using Rubrik SLA domains
Granular recovery of objects across subscriptions
Store your backup data in our default location or Azure
Perform restoration of data with full fidelity and user mapping
Quickly locate records you need to restore through keyword search
Review backup and restore details via the Rubrik Security Cloud
Assign roles for administrative specific responsibilities on backup recoveries
Gain full visibility of backup and restore service is used

Benefits

Protects against data loss, natural disasters, cyber attacks

Education pricing available
Free trial available

Service documents

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at Mark.hibberd@forge-technologies.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

Contact

FORGE TECHNOLOGIES LTD Mark Hibberd
Telephone: +443301796149
Email: Mark.hibberd@forge-technologies.com

About the service

Service categories: Systems Infrastructure Software

Security

Data security

Information protection

Digital trust
Multi cloud support: Yes

Service scope

Software add-on or extension: No
Cloud deployment model: Public cloud

Private cloud

Community cloud

Hybrid cloud
Service constraints: English Language Support Desk
System requirements: Internet Connection

Rack Units expected standard 19” width rack with standard depth

IP Addresses on customer’s internal network are required for devices

Assigned VLANs for Management Network Data Protection Networ

User support

Email or online ticketing support: Yes
Support response times: Within 4 hours during business hours (Mon - Fri / 8am - 6pm)

Weekends and out of hours is available upon request
User can manage status and priority of support tickets: Yes
Online ticketing support accessibility: EN 301 549
Phone support: Yes
Phone support availability: 24 hours, 7 days a week
Web chat support: No
Onsite support: Yes, at extra cost
Support levels: Fully managed solution - Forge take care of every aspect of the organisations backup and recovery processes, from backup support to carrying out restores.

- 3rd Line Support - Forge will provide 3rd line support for software and hardware issues, as well as training for the end user to carry out 1st and 2nd line tasks
Support available to third parties: Yes

Onboarding and offboarding

Getting started: During the service design phase, a transition manager will be assigned, and you will have the opportunity to meet with them prior to the delivery phase commencing. The assigned transition will work hand in hand with the delivery members to ensure structured communications, performance and reporting

In addition to the service delivery manager, Forge consultants from the scoping phase will either transition into delivery roles, or participate in ongoing service reviews. This approach helps ensure continuity of knowledge and that swift adjustments are made during the engagement to achieve the original outcomes.

Forge will work to mobilise all service team members as efficiently as possible for each customer engagement. The specific team members will be identified and allocated early in the scoping phase. Any incremental client specific clearances, security briefings, site inductions or training will be completed as early as possible, to ensure that they can ‘hit the ground running’ and deliver value from day-1 of the engagement. Forge will coordinate all mobilisation and on/off-boarding activity to minimise any additional overhead to customer stakeholders.
Service documentation: Yes
Documentation formats: HTML

ODF

PDF
Documentation accessibility standard: None or don’t know
How the documentation is accessible: Via email and service portal
End-of-contract data extraction: At the conclusion of a Cloud Resiliency engagement, we will conduct thorough transition and handover activities to your in-house team. This typically includes
• Knowledge transfer sessions
• Lessons learned workshop with key stakeholders
• Handover of shared document libraries, including the necessary tools, data/reporting outputs, processes, and training documentation
• End-of-contract review and sign-off against the agreed Scope of Works
End-of-contract process: • Knowledge transfer sessions
• Lessons learned workshop with key stakeholders
• Handover of shared document libraries, including the necessary tools, data/reporting outputs, processes, and training documentation
• End-of-contract review and sign-off against the agreed Scope of Works

Using the service

Web browser interface: Yes
Supported browsers: Microsoft Edge

Firefox

Chrome

Safari

Opera

Other
Application to install: No
Designed for use on mobile devices: No
Service interface: Yes
Description of service interface: Web portal available via supported browsers
Accessibility standards: EN 301 549
Accessibility testing: While we have not yet conducted formal usability sessions with external assistive technology users, we have prioritised a foundational compliance strategy. We treat accessibility as a core requirement from the start of development rather than a final check, ensuring our code follows semantic HTML and ARIA best practices
User support accessibility: EN 301 549
API: Yes
What users can and can't do using the API: Rubrik is an API 1st technology, with all features and functionalities accessed in this manner.
API documentation: Yes
API documentation formats: HTML

Other
API sandbox or test environment: No
Customisation available: Yes
Description of customisation: Customer can customise the sla and scope of service they also have availability to customise the look and feel of the portal including white labeling and custom dashboards
this can be done directly through the portal of via service requests by authorised customer contacts

Scaling

Independence of resources: As part of the Service definition we identify the local peak load required and provide with in the service localiesd private resources to mangle that load

Analytics

Service usage metrics: Yes
Metrics types: Customisable dashboard metrics are available covering data such as
Sevice Overview
Backup Success/Failure Rates
Ingest Throughput
Replication Status
Hardware Uptime & Performance

Capacity & Efficiency Metrics
Storage Consumption & Growth
Capacity Alerts
Data Reduction/Deduplication Ratios

Compliance & Security Metrics
Activity & Audit Logs
Patch & Version Latency
Two-Person Rule (TPR) Audits
Reporting types: Real-time dashboards

Reports on request
Resource tagging: Yes
FOCUS resource tagging: Yes

Supplier type

Supplier type: Reseller providing extra features and support
Organisation whose services are being resold: Assured Data Protection

Staff security

Staff security clearance: Conforms to BS7858:2019
Government security clearance: Security Clearance (SC)

Asset protection

Knowledge of data storage and processing locations: Yes
Data storage and processing locations: United Kingdom

European Economic Area (EEA)

Other locations
User control over data storage and processing locations: Yes
Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
Penetration testing frequency: At least once a year
Penetration testing approach: In-house
Protecting data at rest: Encryption of all physical media

Other
Other data at rest protection approach: Private resources delivered into customers private data centre are subject to the customers DC protection process alongside Data at rest encryption
Data sanitisation process: Yes
Data sanitisation type: Deleted data can’t be directly accessed / Cryptographic Erasure
Equipment disposal approach: In-house destruction process

Data importing and exporting

Data export approach: Users can export their data through several methods depending on whether they are recovering individual files, virtual machine images, or large-scale datasets. Since the service is built on Rubrik technology and managed via the portal, the export process is designed to be self-service and highly automated.
Data export formats: Other
Other data export formats: Individual Files

Machine images

Defined datasets
Data import formats: CSV

ODF

Other
Other data import formats: Individual files

Defined data sets

Virtual machine images

Data-in-transit protection

Data protection between buyer and supplier networks: Private network or public sector network

TLS (version 1.2 or above)

IPsec or TLS VPN gateway
Data protection within supplier network: TLS (version 1.2 or above)

IPsec or TLS VPN gateway

Availability and resilience

Guaranteed availability: Contract Dependent Forge Cloud Resiliency engagements can be structured to provide a fixed set of outcomes, to provide an agreed set of services, or on a time and materials basis. We are open to innovative commercial models, including payments based upon milestones/outcomes, gain-share/pain-share mechanisms, SLAs and service credits.
Approach to resilience: Masterless technology
Redundant-everything
Outage reporting: Account Managers
Online Portal
Email

Identity and authentication

User authentication needed: Yes
User authentication: Username or password
Access restrictions in management interfaces and support channels: The access to the interface is restricted by the customers.
Access restriction testing frequency: At least once a year
Management access authentication: Multi-Factor Authentication (MFA)

Public key authentication (including by TLS client certificate)

Limited access network (for example PSN)

Dedicated link (for example VPN)

Username or password

Audit information for users

Access to user activity audit information: Users contact the support team to get audit information
How long user audit data is stored for: User-defined
Access to supplier activity audit information: Users contact the support team to get audit information
How long supplier audit data is stored for: User-defined
How long system logs are stored for: User-defined

Security governance

Named board-level person responsible for service security: Yes
Software Security Code of Practice: Yes
Security governance certified: Yes
Security governance standards: ISO/IEC 27001
Information security policies and processes: Forge maintain an Information Management System designed to meet the requirements of ISO 27001:2017 in pursuit of its primary objectives
The policy of Forge to:
Make the details of our policy known to all other interested parties including external and determine the need for communication and by what methods relevant to the business management system.
Comply with all legal requirements, codes of practice and all other requirements applicable to our activities; we are committed to satisfy applicable requirements related to information security and the continual improvement of the ISMS.
Provide all the resources of equipment, trained and competent staff and any other requirements to enable these objectives to be met;
Ensure that all employees are made aware of their individual obligations in respect of this information security policy;
Maintain a management system that will achieve these objectives and seek continual improvement in the effectiveness and performance of our management system based on “risk”.
This information security policy provides a framework for setting, monitoring, reviewing and achieving our objectives, programmes and targets. The business management system is regularly reviewed by “Senior Leadership Team” to ensure it remains appropriate and suitable to our business and is subject to internal/external annual audits.

Operational security

Configuration and change management standard: Supplier-defined controls
Configuration and change management approach: All controlled elements of the service are managed through our own internal processes overseen by the Technical Operations Director The Forge Change Management process is based on the ITIL framework and is integrated into our ITSM platform.
Vulnerability management type: Undisclosed
Vulnerability management approach: Vulnerability management is dealt with on a case by case basis and fixes and patches are implemented inline their severity.
Protective monitoring type: Supplier-defined controls
Protective monitoring approach: Using provided monitoring and reporting portal their proactive account managers inform customers of issues as the happen
Incident management type: Supplier-defined controls
Post-quantum cryptography secure: Yes
Incident management approach: Incident management is dealt with by the Technical Operations Director and any other relevant members of staff

Secure development

Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

Connection to public sector networks: Yes
Connected networks: Public Services Network (PSN)

Joint Academic Network (JANET)

Health and Social Care Network (HSCN)

Other
Other public sector networks: Crown Hosting

Pricing

Discount for educational organisations: Yes
Free trial available: Yes
Description of free trial: Free POC's of service can be arranged with scope and time of POC agreed on a case by case basis

POC's do not include data extraction at end of trial

Discount percentage by annual call-off contract value (excluding VAT)

Less than £250,000: 0%
Between £250,000 and £500,000: 1%
Between £500,001 and £1,000,000: 1%
Between £1,000,001 and £2,500,000: 1%
Between £2,500,001 and £5,000,000: 1%
Over £5,000,001: 1%

Standards and certifications

ISO/IEC 27001 certification: Yes
ISO/IEC 27001 accredited by: British Assessment Bureau
ISO/IEC 27001 accreditation date: Monday 1 July 2024
What the ISO/IEC 27001 doesn’t cover: Public Cloud Providers (Carry their own Certs)
ISO 28000:2022 certification: No
ISO 9001 certification: Yes
ISO 9001 certification accredited by: British Assessment Bureau
ISO 9001 accreditation date: Monday 1 July 2024
What the ISO 9001 doesn’t cover: Public Cloud Providers (Carry their own Certs)
Quality management systems (QMS): Yes
CSA STAR certification: No
PCI certification: No
Cyber essentials: Yes
Cyber Essentials Certificate Number: Ab5805c9-1497-47e7-a4a4-189d9aaeeb4c
Cyber essentials plus: Yes
Cyber Essentials Plus Certificate Number: 405ccb6a-1a61-4abf-a78a-71b0e487a029
Other security certifications: Yes
Any other security certifications: ISO 140001

Mission: Kick start economic growth

To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
New apprenticeships on the contract workforce in the relevant area that meet the criteria set out in MAC 1b
Plans to engage the contract workforce in deciding the most important workplace issues to address
Ensuring new workers are informed of their right to join a trade union
Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
Activities to cascade good practice on fair working conditions throughout the supply chain
Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave
Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
Plans for an appropriate income replacement policy for staff who are required to spend time away from work to care for a sick dependent or close relative
Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
Volunteering opportunities for staff
Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling
How these flow down the supply chain and are monitored Illustrative examples include reporting, site visits, audits, etc.
How to ensure business decisions re: price/cost, short lead times, payment timescales do not create modern slavery risks in the supply chain
How the supplier will work with NGOs, trade unions or other businesses to address modern slavery risk
Means of influencing staff, suppliers, customers, communities and/or any other appropriate stakeholders with respect to modern slavery risks relating to the contract

Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering
Delivery of apprenticeships, supported internships and T Level industry placement opportunities (Level 2, 3 and 4+) in relation to the contract

Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
Activities to identify opportunities to open up sub-contracts under the prime contract to a diverse range of businesses, including new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
Plans for engaging a diverse range of businesses in engagement activities prior to appointing subcontractors (including activities prior to award of the main contract and during the contract term)
Activities that demonstrate a collaborative way to work with a diverse range of businesses as part of the supply chain
Advertising of supply chain opportunities openly and to ensure they are accessible to a diverse range of businesses, including advertising all subcontracting opportunities on Contracts Finder
Ensuring accessibility to contracting and subcontracting opportunities for disabled business owners and employees
Structuring of the supply chain selection process to ensure fairness (e.g. anti-corruption) and encourages participation by a diverse range of businesses, including with regard to new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutual
Understanding of local demographics, needs and opportunities for the co-design of the goods, services and works to be delivered under the contract
Methods for engaging with different parts of the community (including the education system and charities representing the community) and how communities come together to inform decisions, strategy and projects to leave a positive legacy for future generations
Measures to involve local stakeholders and/or users in design (e.g. in the design of services, systems, products or buildings)
Plans for positive actions with community groups.
Measures for making facilities used in the delivery of the contract available for community groups, education or training
Measures to engage users and communities and build relationships to increase community integration build trust and influence how the contract is delivered
Plans to respond flexibly and adapt approaches to community engagement and initiatives
Support for community-led initiatives relevant to the contract. Illustrative examples: improving transport links; reducing loneliness; helping with English language proficiency; and facilitating social mixing among people with different backgrounds
Collaborating with anchor institutions and community groups to make facilities available for education, training or community events

Mission: Make Britain a clean energy superpower

To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it

Mission: Break down barriers to opportunity

By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

Policy Outcome 6: Employment and training: For those who face barriers to employment

Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
Creation of employment opportunities particularly for those who face barriers to employment, such as prison leavers, care leavers and/or who are located in deprived areas, and for people in industries with known skills shortages or in high growth sectors
Delivery of training schemes and programmes to address any identified skills gaps and under-representation in the workforce for the contract (e.g. prison leavers, care leavers, kinship carers, disabled people)
Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort
Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
Collection of the views and expertise of disabled people and their representative organisations on successfully supporting disabled employees or applicants
Inclusive and accessible recruitment practices, and retention-focused activities, including those provided in the Guide for line managers on recruiting, managing and developing people with a disability or health condition
Introducing transparency to pay and reward processes
Offering a range of quality opportunities with routes of progression if appropriate, e.g. T Level industry placements, students supported into higher level apprenticeships.
Working conditions which promote an inclusive working environment and promote retention and progression
Other measures to provide equality of opportunity for disabled people and those with health conditions into employment, including becoming a Disability Confident employer and inclusion of supported businesses in the contract supply chain
Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce
Inclusive and accessible development practices, including guidance for line managers on recruiting, managing and developing people with a disability or health condition

Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

Understanding of the issues affecting the development of new skills by target cohort
Understanding of the underlying factors affecting improvements to reduce barriers to entry and training schemes for the target cohort(s) related to the contract workforce
Other measures to offer development opportunities for the target cohort(s) in the contract workforce
Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort
Understanding of issues relating to entering the contract workforce
Creation of outreach activities to create a pipeline of employees for the future contract delivery
Content of the outreach activity is designed to suit the target cohort
Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort

Mission: Build an NHS fit for the future

That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion
Inclusive and accessible recruitment practices, development practices and retention policies that support-focused activities including those provided in the Guide for line managers on recruiting, managing and developing which support people with a disability or health condition
Actions to invest in the physical and mental health and wellbeing of the contract workforce

Service documents

Request an accessible format

Cookies on Digital Marketplace

Forge Cloud Resiliency

Features

Benefits

Pricing

Service documents

Framework

Service ID

Contact

About the service

Service scope

User support

Onboarding and offboarding

Using the service

Scaling

Analytics

Supplier type

Staff security

Asset protection

Data importing and exporting

Data-in-transit protection

Availability and resilience

Identity and authentication

Audit information for users

Security governance

Operational security

Secure development

Public sector networks

Pricing

Discount percentage by annual call-off contract value (excluding VAT)

Standards and certifications

Social value

Service documents