Airwalk Consulting Reply Ltd
Cloud Continuous Compliance Framework
Airwalk Reply's Cloud Continuous Compliance Framework (CCF) is a comprehensive, automated approach to delivering ongoing, dynamic security and compliance management of your cloud estate, through visbility and active management of security and compliance risks. CCF provides codified and automated compliance policies which automatically trigger alerts, corrective or preventative action.
Features
- Out of the box automated security controls framework for cloud
- Proprietary, real-time infrastructure security compliance tool, delivering insight and action
- Preventative: Ensures Permissions, Roles and Service Control Policies are aligned
- Corrective: Remediate high-risk events instantaneously, without stifling development
- Detective: Process events in real-time, providing actionable security alerts
- Exemptions: Use exemptions to manage risk based on business requirements
- Automated Incident management strategy and delivery, with advanced SOC capabilities
- Multi-cloud compliance across major services from AWS, Azure and GCP
- Enhanced scalability and responsiveness of security monitoring and alerting
- Customisable framework allowing for new cloud services and security risks
Benefits
- Gain absolute confidence in the security of your critical infrastructure
- Pass infrastructure and security audits with ease and maintain status
- Reduce the risk of cloud with real-time alerts and automation
- Protect your critical services and applications from major security risks
- Protect against potential costly leaks of customer and commercial data
- Enable development teams to use cloud without increasing organisational risk
- Facilitate better informed security led decision-making whilst driving better outcomes
- Implement a scalable, automated security compliance and risk-monitoring framework
- Make security a core part of delivery and design processes
- Build a strong capability that ensures security remains robust long-term
Pricing
£350 a unit a day
Service documents
Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format,
email the supplier at bid@airwalkconsulting.com.
Tell them what format you need. It will help if you say what assistive technology you use.
Framework
G-Cloud 14
Service ID
7 9 9 1 0 7 6 3 8 1 1 4 7 9 6
Contact
Airwalk Consulting Reply Ltd
Alex Hammond
Telephone: 02081428686
Email: bid@airwalkconsulting.com
Planning
- Planning service
- Yes
- How the planning service works
- Airwalk Reply will work with you to define the delivery plan, including the specific deliverables, implementation of the framework and associated integrations, and training of development and security teams. We will undertake this planning alongside the client team to ensure mutually agreed-upon timescales and objectives. We can provide out-of-the-box rules and develop customer-specific rules based on your requirements.
- Planning service works with specific services
- No
Training
- Training service provided
- Yes
- How the training service works
- We work closely with our clients and their teams to ensure their skills, knowledge, and experience develop and evolve during our engagement. We describe this as Enablement - our goal is to leave our clients stronger than we found them. Whilst formal training is part of this, we strongly believe in the effectiveness of working in blended teams with our clients, utilising methods such as peer programming and mentoring to transfer knowledge and skills to client team members, over time providing them with greater ownership and responsibility as Airwalk steps back from hands-on delivery and hands over to the client.
- Training is tied to specific services
- No
Setup and migration
- Setup or migration service available
- Yes
- How the setup or migration service works
- The implementation of our Cloud Continuous Compliance framework enables a lower-risk migration to the cloud and/or between cloud services by ensuring that development teams' activities do not (inadvertently or otherwise) create security or compliance issues. Airwalk Reply will work with you to facilitate the framework's set-up and implementation and guide you on the best approach to using it to help manage migration.
- Setup or migration service is for specific cloud services
- No
Quality assurance and performance testing
- Quality assurance and performance testing service
- No
Security testing
- Security services
- Yes
- Security services type
-
- Security strategy
- Security risk management
- Security design
- Cyber security consultancy
- Security incident management
- Security audit services
- Other
- Other security services
-
- DevSecOps - strategy and implementation support
- Cyber Security Controls Design
- Cyber Security Architecture Blueprints
Ongoing support
- Ongoing support service
- Yes
- Types of service supported
-
- Buyer hosting or software
- Hosting or software provided by your organisation
- Hosting or software provided by a third-party organisation
- How the support service works
- We provide our Cloud Continuous Compliance Framework as a managed service or as a standalone option for clients to adopt and manage themselves, depending on preference and capabilities. In both cases, Airwalk Reply can support various service management and operational areas, including incident management, service desk, and engineering support. This can be shaped in line with client needs and charged on a fixed monthly cost basis where appropriate.
Service scope
- Service constraints
- No
User support
- Email or online ticketing support
- No
- Phone support
- No
- Web chat support
- No
- Support levels
- Not applicable
Resellers
- Supplier type
- Not a reseller
Staff security
- Staff security clearance
- Conforms to BS7858:2019
- Government security clearance
- Up to Developed Vetting (DV)
Standards and certifications
- ISO/IEC 27001 certification
- Yes
- Who accredited the ISO/IEC 27001
- Alcumus ISOQAR
- ISO/IEC 27001 accreditation date
- 20/01/2023
- What the ISO/IEC 27001 doesn’t cover
- N/A
- ISO 28000:2007 certification
- No
- CSA STAR certification
- No
- PCI certification
- No
- Cyber essentials
- Yes
- Cyber essentials plus
- Yes
- Other security certifications
- No
Social Value
- Social Value
-
Social Value
- Fighting climate change
- Covid-19 recovery
- Tackling economic inequality
- Equal opportunity
- Wellbeing
Fighting climate change
As part of our services, we extensively promote sustainable behaviours such as minimising documentation printing, systematically recycling materials, adopting energy-saving habits, reducing travel, and using low-emission transport.
Our significant investment in hardware (server) virtualisation has allowed us to create a comprehensive and innovative offer in cloud computing. We leverage the cloud extensively internally, thereby reducing consumption and minimising the environmental impact of our operations by decreasing the need for physical machines.
Our commitment to environmental sustainability is evident in our everyday actions. For instance, we have replaced all incandescent bulbs with LED lighting in our office, resulting in a 90% energy savings. Our gadgets and creative packaging are all made from recyclable materials, and we have joined the UK Government Cycle to Work scheme. Moreover, we are actively reducing our business travel by promoting audio-visual conference solutions.
Outside of our working practices, as part of the Reply group, we have purchased 1,046 trees across nine countries that absorb 322,510 kg of CO2 annually. We are also on track to meet our target of having over 50% of our vehicles be fully electric by 2025.
We are committed to lowering our environmental impact as much as possible and constantly evaluate our practices to ensure we do everything possible to protect the planet.
We're looking forward to talking with you about what we can do by providing our services to help you reduce the environmental impact.Covid-19 recovery
We support organisations in managing and recovering from the impacts of COVID-19 by delivering transformational change to operate more efficiently, enable remote or hybrid working, and be more cost-effective, allowing them to support their citizens more effectively.
We are setting up two Airwalk Academy programmes for underprivileged secondary-school Year 12 students to support new opportunities in high-growth sectors. These programmes comprise 10-12 weeks of online project management and leadership tutorial sessions. Participants attend Partner-led employability workshops and receive formal certifications and valuable skills to help them achieve worthwhile and rewarding technology careers.
We support the physical and mental health and wellbeing of our people. We are recognised as one of the UK's Best Workplaces for Technology and Wellbeing.
Our hybrid-working model supports effective social distancing, remote working, and those who are shielding. Our managers focus on our employees’ wellbeing by contacting those they manage at least twice weekly, with more formal check-ins every two weeks. We provide a cycle-to-work scheme and a train season ticket loan to support sustainable travel solutions.
To reduce the demand for health and care services, our people have access to private healthcare, including GP and hospital services, mental wellbeing support, and Talking therapy.
To help people and communities manage and recover from the impacts of COVID-19, we constantly review our supply chain, positively discriminating SMEs, VCSEs and mutuals. To remove barriers in advertising for our public sector contracts, we publish opportunities on Contracts Finder and through local authority websites in clients’ locations to support local employment.
We are committed to helping local communities manage and recover from the impact of COVID-19. We are excited to discuss how we can help you and your communities.Tackling economic inequality
We are Social Value Quality Mark accredited and committed to tackling economic inequality. Working with disadvantaged school and university students in Manchester and London creates employment and training opportunities in some of the country's most deprived areas.
In Manchester, we will work with underperforming schools and some of their most disadvantaged pupils, delivering two Airwalk Academy programmes focusing on Project Management or Leadership Skills. The Academies comprise 10-12 weeks of online tutorial sessions, which run alongside the Year 12 participants completing their own independent programming or social-action projects in their local community. Upon completion of the Academy programmes, participants are invited to attend workshops delivered by Airwalk Reply partners, focusing on employability skills and delivering bespoke guidance for practical university and apprenticeship applications. The programmes are followed by a further year of mentoring for all participants, and all students go on to achieve formal certifications. The Academies will provide participants with valuable skills and qualifications to help them achieve worthwhile and rewarding technology careers.
We are working with several other Reply partners in London to mentor underprivileged undergraduate students. Through a partnership with the charity UpReach, we will identify students with the most challenging socio-economic backgrounds and provide regular mentoring to support their journey out of tertiary education into high-quality employment.
Our commitment to economic growth and business creation is not limited to our educational initiatives. We actively support new organisations, constantly reviewing our supply chain to ensure it includes a diverse range of organisations, including SMEs and VCSEs. We also prioritise local procurement where feasible, contributing to growth in our Buyers’ communities.
We are excited to discuss how we can help you tackle economic inequality in your location(s).Equal opportunity
We actively tackle inequality in employment, skills, and pay. For recruitment, we focus on culture fit as much as capability, and hiring managers participate in EDI and Unconscious Bias Awareness training to ensure equality further.
Our commitment to inclusivity is evident in our efforts to increase the representation of disabled people in our contract workforce. As a Disability Confident Committed (DCC) employer, many of our employees are registered as disabled. This accreditation is a testament to our dedication to improving attitudes. We strive to reduce the disability employment gap by ensuring our recruitment process is inclusive and accessible, offering interviews to disabled people who meet the minimum criteria for the job, and providing reasonable adjustments as required. We support existing employees who acquire a disability or long-term health condition, enabling them to stay in work.
We are committed to aligning with government policies to ensure individuals are not excluded from services due to entry barriers associated with provided channels. We design digital services by GDS accessibility standards, providing a secure and inclusive digital environment.
We ensure research groups include the full range of users. For user research, we ensure it is orientated toward topics such as accessibility and usability. We provide digital services that meet standards, e.g., Web Content Accessibility Guidelines, and ensure services are accessible for those who would otherwise be digitally excluded (use of assistive technologies, non-digital channels, etc.). We conduct cross-channel tests for those who try to utilise a service digitally but need to fall back on the phone, post or in-person services. For testing, we make sure testers are representative of all user groups.
We are committed to delivering Social Value throughout all our contracts and exploring with clients how we can add value to their initiatives.Wellbeing
We support the physical and mental health and wellbeing of our people. We are recognised as one of the UK's Best Workplaces for Technology and Wellbeing.
Our hybrid-working model recognises the importance of increased communication in maintaining our people’s wellbeing and mental health. We hold virtual and face-to-face daily team meetings, weekly departmental briefings, and fortnightly all-hands sessions at which our people are encouraged to contribute openly and transparently.
We provide 36 hours (three hours a month) to support employees' mental health via Airwalk Allies virtual meet-up sessions to support those colleagues with mental health issues.
We provide £100,000+ annual funding for Vitality health insurance for employees and dependents. The package includes physical and mental health support;
Our managers focus on our employees’ wellbeing by contacting reports at least twice weekly, with more formal check-ins every two weeks. Various family policies support maternity, paternity, shared parental and adoption leave. Maintaining a work-life balance is essential, and we discourage any weekend work.
We give our people flexible working hours where we can. We urge them to work from our offices in London or Sheffield as much as possible to encourage a one-team approach. We also fund our people to organise team-building events, like indoor golf or bowling.
We encourage our people to participate in our calendar of charity events, such as 5k or 10k park charity runs or other fundraisers. We provide a cycle-to-work scheme and season ticket loan and deliver a discounted technology scheme, which enables our people to save money on a wide range of tech kits.
As a result of all that we do for our people, our consultants are energised, focused, feel appreciated and do all they can to deliver the best possible service to Buyers.
Pricing
- Price
- £350 a unit a day
- Discount for educational organisations
- No
Service documents
Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format,
email the supplier at bid@airwalkconsulting.com.
Tell them what format you need. It will help if you say what assistive technology you use.