SPECTRUM IT HUB LIMITED
Security QA & Operational Readiness Testing Services
Security QA and operational readiness testing services assessing whether systems are secure, resilient and ready for live operation. Services include security-focused quality assurance, configuration and access validation, operational readiness checks, failure scenario testing and evidence reporting to support secure, controlled go-live of cloud-hosted public sector services.
Features
- Security-focused quality assurance of system configurations
- Validation of access controls and role-based permissions
- Secure configuration and environment readiness verification
- Operational readiness testing for live service operation
- Failure and recovery scenario testing support
- Data handling and integration security validation
- Pre-go-live security and readiness assurance checks
- Dependency and third-party operational readiness validation
- Security risk identification and prioritisation support
- Evidence-based security readiness reporting
Benefits
- Reduces security and operational risks before go-live
- Improves confidence in live service readiness
- Identifies configuration and access control weaknesses
- Supports secure and controlled service launch
- Improves resilience of operational environments
- Reduces risk of post-deployment incidents
- Supports compliance with security governance expectations
- Enables informed go-live and risk acceptance decisions
- Improves coordination across technical and operational teams
- Provides clear security readiness evidence
Pricing
- Education pricing available
Service documents
Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format,
email the supplier at arif.shaik@spectrumithub.com.
Tell them what format you need. It will help if you say what assistive technology you use.
Framework
G-Cloud 15
Service ID
7 8 7 2 1 7 8 9 9 8 6 8 0 0 9
Contact
SPECTRUM IT HUB LIMITED
Arif Basha Shaik
Telephone: +44 7468 341880
Email: arif.shaik@spectrumithub.com
About your service
- Service categories
-
Cloud Support Services
Quality Assurance and Performance Testing
Operational readiness testing
- Accessibility testing
Service scope
- Service constraints
- Security QA and operational readiness testing require access to environments, configurations, documentation and relevant security policies. Buyer input is required to confirm security scope, risk appetite and operational scenarios. Services focus on assurance and readiness validation and do not include accredited penetration testing, vulnerability scanning, remediation activities or ongoing security monitoring unless separately agreed. Third-party systems or restricted access may limit coverage.
User support
- Email or online ticketing support
- Yes
- Support response times
- Support requests are acknowledged within 2 working hours during standard support hours (09:00–17:00 UK time, Monday to Friday, excluding UK public holidays). High-priority issues impacting active testing activities are acknowledged within 30 minutes. Out-of-hours or weekend requests are acknowledged within 4 hours. All support interactions are logged and tracked through agreed communication channels until resolution.
- User can manage status and priority of support tickets
- Yes
- Online ticketing support accessibility
- WCAG 2.2 AAA
- Phone support
- Yes
- Phone support availability
- 9 to 5 (UK time), 7 days a week
- Web chat support
- Yes
- Web chat support availability
- 9 to 5 (UK time), 7 days a week
- Web chat support accessibility standard
- WCAG 2.2 AAA
- Web chat accessibility testing
- Web chat accessibility has been tested with users employing assistive technologies including screen readers (JAWS, NVDA and VoiceOver), keyboard-only navigation, screen magnification, speech-to-text tools and colour-contrast adjustments. Testing validated core interactions such as initiating chats, navigating conversation history, sending messages, receiving responses, and escalating from automated to human support. Usability testing included users with visual, motor and cognitive impairments to assess focus order, clarity, error handling, timing controls and consistency. Identified accessibility issues were remediated and re-tested to confirm compliance with WCAG 2.2 AAA criteria. Accessibility testing is repeated following material changes to the web chat service to maintain ongoing compliance.
- Support levels
- Support is provided through tiered service levels appropriate for cloud-hosted assurance and testing services. Standard Support is included and provides email, ticketing and web-chat assistance during published support hours, with defined response targets for routine and high-priority issues. Enhanced Support is available where extended hours or faster response times are required for critical testing phases, such as acceptance testing or release activities. Premium Support can be provided for services requiring 24/7 availability, senior engineering access, or accelerated issue resolution during time-critical delivery windows. Where paid support levels apply, scope, availability and response targets are agreed in advance. Support levels are designed to align with buyer operational needs without imposing unnecessary overheads.
- AI chatbot
- Yes
Resellers
- Supplier type
- Not a reseller
Staff security
- Staff security clearance
- Conforms to BS7858:2019
- Government security clearance
- Developed Vetting (DV)
Pricing
- Discount for educational organisations
- Yes
Quality assurance testing (QAT) roles
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Tester (QAT) | £369.00 | £99.00 |
| QAT analyst | £506.00 | £180.00 |
| Senior QAT analyst | £644.00 | £216.00 |
| Lead QAT analyst | £850.00 | £270.00 |
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Tester (test engineer) | £369.00 | £99.00 |
| Test engineer | £506.00 | £180.00 |
| Senior test engineer | £644.00 | £216.00 |
| Lead test engineer | £850.00 | £270.00 |
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Test manager | £950.00 | £360.00 |
| Head of test | £999.00 | £450.00 |
Non-mandatory Standards and certifications
- ISO/IEC 27001 certification
- Yes
- Who accredited the ISO/IEC 27001
- ISO Accelerator
- ISO/IEC 27001 accreditation date
- Tuesday 21 February 2023
- What the ISO/IEC 27001 doesn’t cover
- The ISO/IEC 27001 certification covers the Information Security Management System for the provision of IT solutions. Activities or services that fall outside the defined scope of providing IT solutions or any services not delivered under the organisation’s Information Security Management System are not covered by this certification.
- ISO 28000:2022 certification
- No
- ISO 9001 certification
- Yes
- Who accredited the ISO 9001 certification
- ISO Accelerator
- ISO 9001 accreditation date
- Tuesday 11 October 2022
- What the ISO 9001 doesn’t cover
- The ISO 9001 certification applies to the Quality Management System for the provision of IT solutions. Any activities, services or operations that fall outside the defined scope of providing IT solutions are not covered by this certification.
- Quality management systems (QMS)
- Yes
- CSA STAR certification
- No
- PCI certification
- No
- Cyber essentials
- Yes
- Please provide your Cyber Essentials Certificate Number
- 91e650ff-c791-48ac-b554-2fd527f5a6e0
- Cyber essentials plus
- Yes
- Please provide your Cyber Essentials Plus Certificate Number
- 66d11025-4f0e-4a49-9af2-8d44da93757e
- Other security certifications
- No
Social value
- Section B - Commitment for Future: Delivery
-
-
Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.
Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.
- Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
- Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
- Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering
- Delivery of apprenticeships, supported internships and T Level industry placement opportunities (Level 2, 3 and 4+) in relation to the contract
-
Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.
Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises
- Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
- Activities to identify opportunities to open up sub-contracts under the prime contract to a diverse range of businesses, including new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
- Plans for engaging a diverse range of businesses in engagement activities prior to appointing subcontractors (including activities prior to award of the main contract and during the contract term)
- Activities that demonstrate a collaborative way to work with a diverse range of businesses as part of the supply chain
- Advertising of supply chain opportunities openly and to ensure they are accessible to a diverse range of businesses, including advertising all subcontracting opportunities on Contracts Finder
- Ensuring accessibility to contracting and subcontracting opportunities for disabled business owners and employees
- Structuring of the supply chain selection process to ensure fairness (e.g. anti-corruption) and encourages participation by a diverse range of businesses, including with regard to new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutual
- Understanding of local demographics, needs and opportunities for the co-design of the goods, services and works to be delivered under the contract
- Methods for engaging with different parts of the community (including the education system and charities representing the community) and how communities come together to inform decisions, strategy and projects to leave a positive legacy for future generations
- Measures to involve local stakeholders and/or users in design (e.g. in the design of services, systems, products or buildings)
- Plans for positive actions with community groups.
- Measures for making facilities used in the delivery of the contract available for community groups, education or training
- Measures to engage users and communities and build relationships to increase community integration build trust and influence how the contract is delivered
- Plans to respond flexibly and adapt approaches to community engagement and initiatives
- Support for community-led initiatives relevant to the contract. Illustrative examples: improving transport links; reducing loneliness; helping with English language proficiency; and facilitating social mixing among people with different backgrounds
- Collaborating with anchor institutions and community groups to make facilities available for education, training or community events
-
Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero
Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.
- Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
- Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
- Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
- Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
- Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it
-
Service documents
Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format,
email the supplier at arif.shaik@spectrumithub.com.
Tell them what format you need. It will help if you say what assistive technology you use.