Mobilise Cloud Services Ltd

Azure Red Hat OpenShift (ARO)

Azure Red Hat OpenShift (ARO) provides highly available, fully managed OpenShift clusters on demand, monitored and operated jointly by Microsoft and Red Hat. OpenShift brings added-value features to complement Kubernetes, making it a turnkey container platform as a service (PaaS) with a significantly improved developer and operator experience.

Features

• Fully managed Red Hat OpenShift clusters with automatic updates
• Kubernetes Certified Service Provider (KCSP), Red Hat Advanced Partner
• Integrated Azure Active Directory (AAD) for identity and access management
• Support for Azure Virtual Networks (VNets) and security groups
• Supports Red Hat OpenShift Container Storage (OCS) for persistent storage
• Azure Disk Storage options for persistent storage volumes
• Azure Monitor integration for logging and performance metrics
• Built-in support for Kubernetes operators and Helm charts
• Red Hat Enterprise Linux (RHEL) or self-supplied RHEL subscriptions
• Self-managed or fully-managed options for control plane flexibility

Benefits

• Joint Microsoft and Red Hat support for streamlined troubleshooting
• Deploy and manage OpenShift clusters directly within the Azure portal
• Simplified billing and cost management through a single Azure invoice
• Enterprise-grade security and compliance inherited from Azure infrastructure
• Pre-configured for integration with Azure services (e.g., storage, networking)
• Global scalability leveraging Azure's vast datacenter footprint
• Options for both self-managed and fully managed control planes
• High availability configurations for production-critical workloads
• Supports hybrid cloud deployments with on-premises OpenShift environments
• Pay-as-you-go pricing model for flexible cost optimisation

£400 to £1,850 a unit a day

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at gcloud@mobilise.cloud. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

826572697317037

Contact

James Carnie
07817317694
gcloud@mobilise.cloud

Service scope

• Service constraints: https://learn.microsoft.com/en-gb/azure/openshift/intro-openshift
• System requirements: N/A

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Between 8 and 1 hour depending on support plan purchased See https://azure.microsoft.com/en-gb/support/plans/
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.1 A
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: Web chat
• Web chat support availability: 24 hours, 7 days a week
• Web chat support accessibility standard: None or don’t know
• How the web chat support is accessible: https://azure.microsoft.com/en-gb/support
• Web chat accessibility testing: None
• Onsite support: Yes, at extra cost
• Support levels: See https://azure.microsoft.com/en-gb/support/plans/
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: See https://azure.microsoft.com/en-us/resources/ plus comprehensive online documentation for various solutions available across the platform. See https://docs.microsoft.com/en-us/azure/. We also offer free of charge remote best practice guidance from our Azure Engineers called FastTrack for Azure. https://azure.microsoft.com/en-us/programs/azure-fasttrack/#overview
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Customer are able to remove their data at any time through the same means they uploaded. Either over their network (internet or express route) or via the Azure Import/Export services. Also see https://www.microsoft.com/en-us/trustcenter/privacy
• End-of-contract process: Microsoft is governed by strict standards and removes cloud customer data from systems under our control, overwriting storage resources before reuse, and purging or destroying decommissioned hardware. https://www.microsoft.com/en-gb/trust-center/privacy/data-management?rtc=1

Using the service

• Web browser interface: Yes
• Using the web interface: https://azure.microsoft.com/en-gb/features/azure-portal/
• Web interface accessibility standard: WCAG 2.1 AA or EN 301 549
• Web interface accessibility testing: https://www.microsoft.com/en-us/accessibility/
• API: Yes
• What users can and can't do using the API: https://msdn.microsoft.com/en-us/library/azure/ee460799.aspx
• API automation tools:
  • Ansible
  • Chef
  • SaltStack
  • Terraform
  • Puppet
• API documentation: No
• Command line interface: Yes
• Command line interface compatibility:
  • Linux or Unix
  • Windows
  • MacOS
• Using the command line interface: The Azure command-line interface (Azure CLI) is a set of commands used to create and manage Azure resources. The Azure CLI is available across Azure services and is designed to get you working quickly with Azure, with an emphasis on automation. https://docs.microsoft.com/en-us/cli/azure/?msclkid=2b50e70aa91311ec9b84e2bb2e192699

Scaling

• Scaling available: Yes
• Scaling type: Automatic
• Independence of resources: Resource Isolation: Azure Resource Manager enforces limits on CPU, memory, and network for each OpenShift cluster, preventing one's usage from impacting others.; Dedicated Node Pools: Users can provision dedicated nodes for their OpenShift workloads, ensuring exclusive access to compute resources.; Autoscaling: Clusters can automatically scale up or down based on demand, ensuring resources are always available when needed.; Proactive Monitoring: Azure constantly monitors resource usage and can preemptively add capacity to maintain service levels.
• Usage notifications: Yes
• Usage reporting:
  • API
  • Email
  • SMS

Analytics

• Infrastructure or application metrics: Yes
• Metrics types:
  • CPU
  • Disk
  • HTTP request and response status
  • Memory
  • Network
  • Number of active instances
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: Azure, AWS, Google Cloud, Elastic, Red Hat and others

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
• User control over data storage and processing locations: Yes
• Datacentre security standards: Supplier-defined controls
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest: Physical access control, complying with CSA CCM v3.0
• Data sanitisation process: Yes
• Data sanitisation type:
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
  • Hardware containing data is completely destroyed
• Equipment disposal approach: In-house destruction process

Backup and recovery

• Backup and recovery: Yes
• What’s backed up:
  • On-Premises
  • Azure VMs
  • Azure Managed Disks
  • Azure File Shares
  • SQL Server in Azure VMs
  • Azure Blobs
• Backup controls: By assigning Azure Policies in Backup Center.
• Datacentre setup: Multiple datacentres with disaster recovery
• Scheduling backups: Users schedule backups through a web interface
• Backup recovery: Users can recover backups themselves, for example through a web interface

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Bonded fibre optic connections
  • Legacy SSL and TLS (under version 1.2)
• Data protection within supplier network: Other
• Other protection within supplier network: Microsoft’s approach to enabling two layers of encryption for data in transit is:; ; Transit encryption using Transport Layer Security (TLS) 1.2. All traffic leaving a datacenter is encrypted in transit, even if the traffic destination is another domain controller in the same region. TLS 1.2 is the default security protocol used. TLS provides strong authentication, message privacy, and integrity (enabling detection of message tampering, interception, and forgery), interoperability, algorithm flexibility, and ease of deployment and use.; ; Additional layer of encryption provided at the infrastructure layer. Whenever Azure customer traffic moves between datacenters-- outside physical boundaries not controlled by Microsoft

Availability and resilience

• Guaranteed availability: https://azure.microsoft.com/en-gb/support/legal/sla/summary
• Approach to resilience: "Network reliability through intelligent software; Safe Deployment with AIOps; Resiliency threat modeling for large distributed systems; Low and no impact maintenance; For more detail please see https://azure.microsoft.com/en-us/features/reliability/#features"
• Outage reporting: Through Azure Service Health which gives personalised alerts and guidance for Azure service issues

Identity and authentication

• User authentication:
  • 2-factor authentication
  • Identity federation with existing provider (for example Google apps)
  • Limited access network (for example PSN)
  • Dedicated link (for example VPN)
  • Username or password
  • Other
• Other user authentication: "Azure Active Directory is Microsoft’s multi-tenant cloud based directory and identity management service. Azure-AD includes a full suite of identity management capabilities including multi-factor authentication, device registration, self-service password management, self-service group management, privileged account management.; ; https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-methods?msclkid=b2a138a1a92d11ec918375623c320dc1"
• Access restrictions in management interfaces and support channels: Azure-AD can designate separate administrators to serve different functions. These administrators will have access to features in the Azure portal and, depending on their role, will be able to create or edit users, assign administrative roles to others, reset user passwords, manage user-licenses, and manage domains, among other things. A user who is assigned an admin role will have the same permissions across all of the cloud services that your organization has subscribed to, regardless of whether you assign the role in the Office365 portal, or in the Azure classic-portal, or by using the Azure-AD module for Windows PowerShell.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
  • Other
• Description of management access authentication: Azure role-based access control (Azure RBAC) helps you manage who has access to Azure resources, what they can do with those resources, and what areas they have access to.; ; Azure RBAC is an authorization system built on Azure Resource Manager that provides fine-grained access management of Azure resources.; ; For more information: https://docs.microsoft.com/en-gb/azure/role-based-access-control/overview
• Devices users manage the service through:
  • Dedicated device on a segregated network (providers own provision)
  • Directly from any device which may also be used for normal business (for example web browsing or viewing external email)

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: You control when users can access audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: BSI
• ISO/IEC 27001 accreditation date: 01/01/2024
• What the ISO/IEC 27001 doesn’t cover: Please see https://docs.microsoft.com/en-gb/compliance/regulatory/offering-ISO-27001?view=o365-worldwide
• ISO 28000:2007 certification: No
• CSA STAR certification: Yes
• CSA STAR accreditation date: 18/01/2022
• CSA STAR certification level: Level 3: CSA STAR Certification
• What the CSA STAR doesn’t cover: N/A
• PCI certification: Yes
• Who accredited the PCI DSS certification: Coalfire Systems Inc.
• PCI DSS accreditation date: 14/12/2023
• What the PCI DSS doesn’t cover: N/A
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: Yes
• Any other security certifications:
  • FACT
  • FedRamp
  • NIST 800-171
  • FIPS 140-2
  • CCSL (IRAP)
  • ENISA IAF
  • CDSA
  • SOC 1, SOC 2, SOC 3
  • ISO 27001 (ISMS), 27017 (Cloud Security) and 27018 (Personal Data)
  • 22301 (Business Continuity) and 9001 (Quality Management)

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards:
  • CSA CCM version 3.0
  • ISO/IEC 27001
  • Other
• Other security governance standards: EN 301 549, ENISA IAF, EU Model Clauses, UK Cyber Essentials Plus, UK NPIRMT, CIS Hardened images, SOC 1 Type 2, SOC 2 Type 2
• Information security policies and processes: Security is integrated into every aspect of Azure. Azure offers unique security advantages derived from global security intelligence, sophisticated customer-facing controls, and a secure hardened infrastructure. This combination helps protect your applications and data, support your compliance efforts, and provide cost-effective security for organizations of all sizes. For more information https://docs.microsoft.com/en-gb/azure/security/; ; We have policies for infrastructure security, physical security, abailability, components & boundaries, network architecture, production network, SQL DB, operations, monitoring, integrity and data protection. For more information please visit https://docs.microsoft.com/en-gb/azure/security/fundamentals/infrastructure-availability

Operational security

• Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Configuration and change management approach: Azure has developed formal standard operating procedures (SOPs) governing the change management process. These SOPs cover both software development and hardware change and release management, and are consistent with established regulatory guidelines including ISO 27001, SOC 1 / SOC 2, NIST 800-53, and others.; ; Microsoft also uses Operational Security Assurance (OSA), a framework that incorporates the knowledge gained through a variety of capabilities that are unique to Microsoft including the Microsoft Security Development Lifecycle (SDL), the Microsoft Security Response Center program, and deep awareness of the cybersecurity threat landscape.; Please see https://www.microsoft.com/en-us/SDL/OperationalSecurityAssurance and https://www.microsoft.com/en-us/sdl
• Vulnerability management type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Vulnerability management approach: Vulnerability management recommendations focus on addressing issues related to continuously acquiring, assessing, and acting on new information in order to identify and remediate vulnerabilities as well as minimizing the window of opportunity for attackers.; 1: Run automated vulnerability scanning tools; 2: Deploy automated operating system patch management solution; 3: Deploy automated patch management solution for third-party software titles; 4: Compare back-to-back vulnerability scans; 5: Use a risk-rating process to prioritize the remediation of discovered vulnerabilities; For more information https://docs.microsoft.com/en-us/security/benchmark/azure/security-control-vulnerability-management
• Protective monitoring type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Protective monitoring approach: Defender for Cloud gives you increased visibility into, and control over, the security of your Azure resources as well as those in your hybrid cloud environment.; ; Defender for Cloud performs continuous security assessments of your connected resources and compares their configuration and deployment against the Azure Security Benchmark to provide detailed security recommendations tailored for your environment.; ; In addition Intelligent Security Graph provides real-time threat protection in Microsoft products and services. It uses advanced analytics that link a massive amount of threat intelligence and security data to provide insights that can strengthen organizational security
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: Microsoft has developed robust processes to facilitate a coordinated response to incidents.; • Identification – System and security alerts may be harvested, correlated, and analyzed.; • Containment – The escalation team evaluates the scope and impact of an incident.; • Eradication – The escalation team eradicates any damage caused by the security breach, identifies root cause for why the security issue occurred.; • Recovery – During recovery, software or configuration updates are applied to the system and services are returned to a full working capacity.; • Lessons Learned – Each security incident is analyzed to protect against future reoccurrence.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Separation between users

• Virtualisation technology used to keep applications and users sharing the same infrastructure apart: Yes
• Who implements virtualisation: Supplier
• Virtualisation technologies used: VMware
• How shared infrastructure is kept separate: With the identity platform provided by Microsoft Azure, a tenant is a dedicated instance of Azure Active Directory (Azure AD) that your organization receives and owns when it signs up for a Microsoft cloud service. Each Azure AD directory is distinct and separate from other Azure AD directories. The Azure AD architecture isolates customer data and identity information from co-mingling. This means that users and administrators of one Azure AD directory cannot accidentally or maliciously access data in another directory. For more information: https://docs.microsoft.com/en-us/azure/security/fundamentals/isolation-choices

Energy efficiency

• Energy-efficient datacentres: Yes
• Description of energy efficient datacentres: Please see https://www.microsoft.com/en-us/corporate-responsibility/sustainability

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  Microsoft Azure is committed to fighting climate change through several key initiatives within its cloud environments:; ; Sustainability Focus: Azure prioritises renewable energy sources, aiming for 100% supply by 2025. This reduces reliance on fossil fuels and lowers carbon footprint.; Energy Efficiency: Azure data centers are optimized for efficiency, using innovative cooling techniques and hardware choices to minimize energy consumption.; Cloud Optimization: Migrating workloads to Azure can lead to overall efficiency gains. Shared infrastructure and server consolidation reduce physical hardware needs.; Sustainable Innovation: Azure offers tools and services that empower customers to build sustainable solutions. AI and analytics can optimize energy usage and resource allocation for businesses.; Carbon Transparency: Microsoft provides tools to track and manage carbon emissions associated with Azure usage. This enables customers to make informed choices and reduce their environmental impact.; By focusing on these areas, Microsoft aims to make Azure a cloud platform that not only empowers businesses but also contributes to a more sustainable future.

  Covid-19 recovery

  Microsoft has leveraged its Azure cloud platform to support COVID-19 recovery efforts in several ways:; ; Remote Collaboration: Azure services like Teams facilitated remote work and communication, keeping businesses and organizations operational during lockdowns.; Data-Driven Response: Azure's analytics capabilities helped governments and health agencies analyze data to track outbreaks, identify trends, and allocate resources effectively.; Rapid Research and Development: Azure provided a platform for researchers to collaborate on vaccine development, drug discovery, and diagnostics using AI and high-performance computing.; Supply Chain Optimization: Azure helped optimize supply chains for critical medical equipment and supplies, ensuring efficient delivery to healthcare systems.; Reimagining Retail: Azure tools empowered retailers to adapt to changing consumer behavior by enabling online ordering, contactless transactions, and enhanced in-store experiences that prioritise safety.; By focusing on these areas, Microsoft helped accelerate recovery efforts and lay the groundwork for a more resilient future in the face of pandemics.

  Tackling economic inequality

  Microsoft tackles economic inequality through its technology and initiatives:; ; Digital Skills for Underserved Communities: Microsoft invests in programs to provide digital skills training to underserved communities, bridging the digital divide and enhancing employability for in-demand tech roles.; Expanding Broadband Access: Initiatives aim to extend affordable broadband access to rural and underserved regions, enabling remote work and educational opportunities.; AI for Accessibility: Microsoft develops AI solutions that empower individuals with disabilities, promoting inclusion in the workforce and society.; Supporting Minority-Owned Businesses: Programs help minority-owned businesses access technology, resources, and market opportunities, fostering economic growth.; Responsible Innovation: Microsoft emphasises ethical AI development and deployment to avoid unintended biases and ensure technology benefits everyone equitably.; Data-Driven Approaches: The company leverages insights to understand the causes of economic inequality and identify areas where technology can have the most impact.; Microsoft recognises that technology plays a crucial role in addressing economic disparities and works alongside governments, nonprofits, and communities to create a more equitable future.

  Equal opportunity

  Focus on Diversity and Inclusion (D&I):; ; Representation Goals: Microsoft sets ambitious goals for increasing representation of women, minorities, people with disabilities, and veterans in its workforce.; Inclusive Culture: Promotes a workplace where employees feel heard and valued regardless of background, with a zero-tolerance policy for discrimination and harassment.; Skills Development:; ; Apprenticeship Programs: Offers pathways into tech careers for non-traditional candidates, prioritising diversity and helping those without college degrees.; Partnerships: Collaborates with organisations for skill-building initiatives targeting diverse groups.; Addressing Unconscious Bias:; ; Training: Provides training to identify and mitigate unconscious bias in hiring and management practices.; Technology Tools: Develops tools and technologies to reduce bias in recruiting and talent evaluation.; Accessibility Focus:; ; Assistive Technologies: Invests in creating and supporting assistive technologies for people with disabilities, promoting workplace inclusion.; Inclusive Design: Ensures that Microsoft products and services are accessible and usable by everyone.; Transparency and Accountability:; ; Reporting: Publicly discloses D&I data including workforce demographics and pay equity, allowing for transparency and progress measurement.; Microsoft understands that creating equal opportunity goes beyond hiring diverse talent. It requires building a culture of belonging and ensuring that everyone has the resources and support to succeed and thrive.

  Wellbeing

  Microsoft prioritises employee wellbeing:; ; Comprehensive Benefits:; ; Generous Health Coverage: Provides excellent medical, dental, and vision insurance for employees and their families, emphasising both physical and mental health support.; Paid Time Off (PTO): Encourages work-life balance with ample PTO that includes vacation, sick days, and additional time off for personal and family needs.; Mental Health Focus:; ; Mental Health Programs: Offers resources like counseling, mindfulness training, and stress management tools to support emotional wellbeing.; Culture of Destigmatisation: Works to reduce the stigma surrounding mental health and encourages open conversations.; Employee Assistance Programs (EAPs):; ; Confidential Support: Provides access to confidential support services for personal and work-related challenges.; Flexibility and Work-Life Balance:; ; Remote & Hybrid Work Options: Supports flexibility to meet individual needs and promotes a balanced lifestyle.; Employee Resource Groups (ERGs): Fosters a sense of community and support for employees with various backgrounds, shared interests, and life experiences.; Wellness Programs:; ; On-site and Virtual Wellness: Includes on-campus fitness programs, healthy food options, and virtual wellness classes.; Employee Discounts: Provides discounts on fitness memberships and wellness products.; Microsoft believes that employee wellbeing is fundamental to long-term success and happiness. By providing comprehensive benefits, prioritising mental health, fostering flexibility, and focusing on overall wellness, they create a supportive work environment where employees can thrive.

Pricing

• Price: £400 to £1,850 a unit a day
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at gcloud@mobilise.cloud. Tell them what format you need. It will help if you say what assistive technology you use.