DEFENCE DATASEC LTD

Cloud Security Testing Services

Defence DataSec Provide end to end Security Testing service across Cloud Enterprise Applications.Our Cloud Service Testing Services provides professionals who develop/deliver end-to-end cloud solutions, including testing of cloud services to ensure they conform with cloud security and operational policies

Features

• Risk Analysis using Threat Modelling & Attack Surface Analysis
• Well defined approach & methodology
• Rich experience in scanning tools & false positive analysis
• Providing optimized scans using Regular Expressions
• Enhance build and automation of cloud services and secure access
• Customized reporting framework
• Security assessment performed by Certified professionals
• Verification of cloud based applications for security vulnerabilities
• Effective utilisation of commercial & open source tools

Benefits

• Relevant & detailed reporting
• Cloud testing services delivery with knowledge transfer into the organisation
• Cloud services process development, service desk setup and testing services
• Compliance with major security standards & regulations
• Experience of cross-government cloud service testing
• Early phase testing reduces costs and reduces risk
• Experienced & Certified Security Testers
• Expert consultancy for Cloud adoption projects & reduce Business risk

£400 to £1,400 a unit a day

• Education pricing available

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@defencedatasec.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

836167596368022

Contact

Mohamed Amri
07772866727
info@defencedatasec.co.uk

Planning

• Planning service: Yes
• How the planning service works: Defence DataSec Data management service planning will ensure the process of acquiring, storing, organising, and maintaining created and collected data. We also ensure data management planning will set up business applications to provide analytical information to help drive strategic planning by end-users. Our experts will provide you with guidance on how to prepare your data which includes: Data Profiling, Data Cleansing, Data mining, Data manipulation and enhancement, and Data aggregation to Simplify your data management process of collecting.; ; We follow Information Governance and Security Policies which are the process flows and baseline documents to help your organisation align to best practices in terms of Data Security and legal requirements such as the Data Protection Act and GDPR.
• Planning service works with specific services: Yes
• Hosting or software services the planning service works with:
  • AWS Cloud hosting services and Well Architecture Framework review
  • Azure Cloud hosting services, architecture and best practice review
  • Google Cloud hosting services, architecture and best practice review
  • OCI Cloud hosting services, architecture and best practice review
  • MuleSoft Cloud hosting services, architecture and best practice review
  • Qlik and dynamic yield Cloud hosting architecture and best practice
  • Okta Cloud Security services, architecture and best practice review
  • Oracle Fusion Cloud hosting services, architecture and best practice review
  • Workday Cloud Cloud hosting services, architecture and best practice review
  • ZScaler Cloud Security services, architecture and best practice review

Training

• Training service provided: Yes
• How the training service works: Defence DataSec can provide knowledge transfer at all stages of the cloud transition process. By working closely with your in-house technical teams, we’ll help ensure they are equipped with the necessary skills via our tried-and-trusted combination of shadowing our experts during implementation and formal knowledge transfer and training sessions. A training approach will be agreed during the planning phase and may include any or all of the below:- • Train the trainer • Classroom based sessions for super users • Online guided training • Pre-recorded show and tell videos • Inbuilt system guides and help tips • Knowledge base • Knowledge transfer of the HLD’s (High Level Design), • Knowledge transfer of the LLD (Low Level Design), • Knowledge transfer of the Infrastructure and Network Diagrams.
• Training is tied to specific services: Yes
• Services the training service works with:
  • Cloud strategy assessment and design
  • Cloud architecture definition, assessment, design and delivery
  • Cloud technical governance and operating model
  • Architecture capability assessment and development
  • Executive and business leader/owner cloud awareness and education
  • Legacy environment cost review savings identification to fund cloud migration
  • Cloud migration planning and delivery

Setup and migration

• Setup or migration service available: Yes
• How the setup or migration service works: Defence DataSec will carry out series of meetings, workshops with stakeholders and system owners, technical and business discussion to define the scope of work and deliver the projects in following steps. 1 - Strategy Development Developing principles and plans for the future of cloud use in the business. Output Examples: Conceptual architecture, Cloud principles, Data regulation planning. 2-Discovery Looking into the existing IT estate in the business and identifying opportunities. Output Examples: Systems catalogue, Cloud cost estimates, Benefit estimates 3 - Design Creating the blueprints for cloud systems and detailed plans for migration to cloud. Output Examples: Systems architecture, Migration plans, Detailed costs, Detailed benefits. 4 - Solutions Defence DataSec products used to migrate and manage systems in the cloud Output Examples: Defence DataSec cloud control & Backup. 5 - Implementation Building solutions based on cloud components and moving business systems to the cloud Output Examples: AWS IaaS build & configuration, Testing strategy & execution, Defect tracking & resolution. 6 - Management Operating solutions in the cloud to agreed service levels and operating scope Output Examples: Planned service management, Unplanned incident resolution, Help desk & troubleshooting. 7 - Warranty We will provide warranty for 3 days from go live.
• Setup or migration service is for specific cloud services: Yes
• List of supported services:
  • Cloud Provisioning and Configuration
  • Migration for Oracle Apps to IaaS and PaaS
  • Zero Downtime Cloud Migrations for Oracle, SQL, Mongo Database
  • Legacy to cloud migration (lift & shift)
  • Legacy to cloud migration (a live migration using CloudEndure)
  • Cloud to Cloud migration
  • Design to agreed operational budget constraints
  • Design for connectivity into cloud
  • Tools-based technical discovery for migration planning

Quality assurance and performance testing

• Quality assurance and performance testing service: Yes
• How the quality assurance and performance testing works: Defence DataSec can provide knowledge transfer at all stages of the cloud transition process. By working closely with your in-house technical teams, we’ll help ensure they are equipped with the necessary skills via our tried-and-trusted combination of shadowing our experts during implementation and formal knowledge transfer and training sessions. A training approach will be agreed during the planning phase and may include any or all of the below:- • Train the trainer • Classroom based sessions for super users • Online guided training • Pre-recorded show and tell videos • Inbuilt system guides and help tips • Knowledge base • Knowledge transfer of the HLD’s (High Level Design), • Knowledge transfer of the LLD (Low Level Design), • Knowledge transfer of the Infrastructure and Network Diagrams.

Security testing

• Security services: Yes
• Security services type:
  • Security strategy
  • Security risk management
  • Security design
  • Cyber security consultancy
  • Security testing
  • Security incident management
  • Security audit services
• Certified security testers: Yes
• Security testing certifications: Cyber Scheme

Ongoing support

• Ongoing support service: No

Service scope

• Service constraints: Our Normal Service hours are 9.00 hours to 17.00 hours, anything outside of this hours or weekend work should be agreed with the Clients with additional cost as per SFIA. All Client’s project travels are chargeable based on the agreed terms and conditions.

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Within a Day
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Support levels: We provide dedicated support during the project. It is typically available during working hours (Monday to Friday). Extended support can be provided with agreement.

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Developed Vetting (DV)

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: Yes
• Any other security certifications:
  • ICO - Data Protection
  • GDPR

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  "; At Defence DataSec Ltd, we recognize that our consultants, experts, resources, and staff are our most valuable assets. Therefore, we prioritize their well-being and that of their loved ones. We support their professional growth and career advancement by providing training and assistance to attain certifications. Our commitment to their welfare is reflected in their long-term tenure with us, as we ensure their satisfaction and fulfillment in their roles.; ; To foster a culture of continuous learning and collaboration, we conduct weekly stand-up meetings where all consultants across different projects come together to share knowledge, exchange experiences, and address any challenges. Additionally, we have a dedicated mental health champion who participates in these meetings to provide guidance and support. Our monthly mental health sessions, led by the champion, have proven invaluable, particularly during times of lockdown and transition back to the workplace.; ; Understanding the diverse impacts of lockdowns on individuals, we prioritize open communication and support. Line managers regularly engage with team members, providing a platform for discussing both work-related and personal concerns. We have cultivated an environment where staff feel comfortable expressing themselves, whether in writing or verbally. Regular feedback mechanisms, including questionnaires and interviews, allow us to closely monitor the well-being of our team members and address any issues promptly.; ; Furthermore, we conduct comprehensive 360-degree feedback evaluations twice a year, as well as at the conclusion of each project, to assess employee performance from multiple perspectives, including self-evaluation, supervisor feedback, and input from clients and suppliers. Our annual medical tests also serve as an additional measure to gauge the mental well-being of our staff, ensuring their holistic health and wellness.; "

  Covid-19 recovery

  "; Defence DataSec Ltd brings the same passion and commitment to our communities and society as we do to our clients and the work we deliver every day. We are providing insights and guidance to small businesses searching for ways to cope with the operational stress generated by COVID-19. Our teams organized the donation and delivery of hundreds of thousands of personal protection and medical equipment pieces. Defence DataSec Ltd has donated and had delivered thousands of meals to the places and people that needed them. We are committed to supporting various food back supplies, contribute to charity fundraising for serving the vulnerable and less privileged ones in our society. We believe that today's young generation is the future of our economic stability. Hence, it is essential to bring them up to speed by developing modern skills and knowledge through fostering their future through apprenticeship programs. We are glad to declare our strategic plan to introduce a range of degree apprenticeship programs to support our government's economic recovery.; "

  Tackling economic inequality

  "; At Defence DataSec Ltd, we firmly believe that today's youth represent the cornerstone of our economic stability. Therefore, it is imperative to equip them with contemporary skills and knowledge through our apprenticeship programs. Our commitment extends to addressing economic inequality at its core. We are pleased to announce our strategic initiative to launch a diverse range of degree apprenticeship programs. These programs aim to mitigate the unequal distribution of income and opportunity across various demographic groups in our society while simultaneously bolstering our government's economic recovery efforts.; "

  Equal opportunity

  "; About 48% of Defence DataSec Ltd's workforce consists of individuals from Black, Asian, and other minority backgrounds, while approximately 40% are women. As an equal opportunity employer, we recognize and embrace the advantages of having a diverse workforce. Diverse perspectives enrich our decision-making processes, as employees bring unique experiences, skills, and beliefs to the table. This diversity fosters innovative thinking and leads to more comprehensive problem-solving approaches, resulting in enhanced performance.; ; Moreover, we prioritize inclusivity by ensuring that every employee feels equally valued and supported in all aspects of the workplace. Annual diversity training further reinforces our commitment to fostering an inclusive environment, which has yielded tangible benefits such as reduced turnover costs, increased productivity and revenues, and improved access to diverse customer markets.; ; Defence DataSec Ltd has integrated diversity into its core policies and practices, with a willingness to adapt and enhance workplace policies to promote inclusivity and diversity at every level, including hiring, performance evaluations, promotions, and benefits. Additionally, we offer prestigious internships and training opportunities, along with continuous professional development support, enabling individuals to advance swiftly into key roles within the organization."

  Wellbeing

  "; At Defence DataSec Ltd, we recognize that our consultants, experts, resources, and staff are our most valuable assets. Therefore, we prioritize their well-being and that of their loved ones. We support their professional growth and career advancement by providing training and assistance to attain certifications. Our commitment to their welfare is reflected in their long-term tenure with us, as we ensure their satisfaction and fulfillment in their roles.; ; To foster a culture of continuous learning and collaboration, we conduct weekly stand-up meetings where all consultants across different projects come together to share knowledge, exchange experiences, and address any challenges. Additionally, we have a dedicated mental health champion who participates in these meetings to provide guidance and support. Our monthly mental health sessions, led by the champion, have proven invaluable, particularly during times of lockdown and transition back to the workplace.; ; Understanding the diverse impacts of lockdowns on individuals, we prioritize open communication and support. Line managers regularly engage with team members, providing a platform for discussing both work-related and personal concerns. We have cultivated an environment where staff feel comfortable expressing themselves, whether in writing or verbally. Regular feedback mechanisms, including questionnaires and interviews, allow us to closely monitor the well-being of our team members and address any issues promptly.; ; Furthermore, we conduct comprehensive 360-degree feedback evaluations twice a year, as well as at the conclusion of each project, to assess employee performance from multiple perspectives, including self-evaluation, supervisor feedback, and input from clients and suppliers. Our annual medical tests also serve as an additional measure to gauge the mental well-being of our staff, ensuring their holistic health and wellness.

Pricing

• Price: £400 to £1,400 a unit a day
• Discount for educational organisations: Yes

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@defencedatasec.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.