EASIPC SERVICES LTD

EasiCloud - Infrastructure as a Service (AWS)

EasiCloud is an education focused IaaS solution leveraging Amazon Web Services (AWS) to provide Schools, Academies and Trusts with a cost effective, innovative, cloud solution. It incorporates transformation from existing traditional server solutions, allowing education organisations the ability to move to the cloud with minimal downtime.

Features

  • Amazon Web Services (AWS) managed IaaS
  • Scalable and Cost Effective education focused
  • UK datacentres and support
  • ISO 27001 compliant
  • Full remote access to the IaaS

Benefits

  • Significantly reduced risk of data loss or downtime
  • Measurable cost savings over traditional physical hardware
  • Highly scalable, with seamless integration
  • Low upfront capital investment required
  • Fully GDPR compliant
  • Increased security

Pricing

£250 to £10,000 an instance a year

  • Education pricing available

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at bids@easipc.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

9 0 8 8 3 9 4 4 4 2 5 1 9 8 4

Contact

EASIPC SERVICES LTD Rob Lloyd
Telephone: 01604286682
Email: bids@easipc.co.uk

Service scope

Service constraints
All planned maintenance is completed outside of working hours, EasiPC aims to provide 14 days notice for planned maintenance and any potential outages these changes may cause.

All changes are tested outside of the production environment in accordance with strict change management procedures.
System requirements
  • A high speed internet connection
  • Local firewall or VPN access for remote workers
  • Windows 10 devices

User support

Email or online ticketing support
Email or online ticketing
Support response times
All response times are defined in the service specification.

Initial target response times are 30 minutes for non critical tickets up to a maximum of 8 hours for low priority service requests.

No support is provided outside of working hours - Monday to Friday 8am to 5pm.
User can manage status and priority of support tickets
Yes
Online ticketing support accessibility
WCAG 2.1 AA or EN 301 549
Phone support
Yes
Phone support availability
9 to 5 (UK time), Monday to Friday
Web chat support
No
Onsite support
Yes, at extra cost
Support levels
All EasiPC customers are assigned an account manager for general service requests, escalation of service issues and general account management.

The service is a fully managed service, and any support required due to issues with the service are covered by the EasiPC service desk. Support via the service desk can be obtained via email and phone, during business hours.

EasiPC also offer a fully managed service desk, providing further reactive support which can be provided at additional cost.

For customers who do not have onsite support an additional onsite support service can be provided at additional cost.
Support available to third parties
Yes

Onboarding and offboarding

Getting started
EasiPC will provide a fully managed onboarding experience, managed by the Cloud Deployment team and following PRINCE2 project management processes.

During initial consultancy, the EasiPC Cloud Deployment team will build a bespoke onboarding process defined by the exact service requirement.

During onboarding, EasiPC will provide support and training, including but not limited to electronic resources, workshops and webinars.
Service documentation
Yes
Documentation formats
  • ODF
  • PDF
End-of-contract data extraction
In the event the service is no longer required, a termination of service can be requested 60 days in advance of the renewal date.

During offboarding (at the end of contract) all data and virtual machine exports will be provided for download for a period of 30 days. The export of data and virtual machines are included within the contract costs, however any migration services required are chargeable at the EasiPC day rate.
End-of-contract process
Once the contract reaches it's end date, all data is exported and made available to the customer for 30 days. After 30 days, all data, user accounts and access is permanently deleted.

Using the service

Web browser interface
No
API
No
Command line interface
No

Scaling

Scaling available
Yes
Scaling type
Manual
Independence of resources
Each customer has their own virtual private network and instances, these are managed by the AWS Hypervisor which guarantees customer separation.

All instance usage is actively monitored and where system usage is nearing capacity the instance type is changed during planned maintenance.
Usage notifications
Yes
Usage reporting
  • Email
  • Other

Analytics

Infrastructure or application metrics
Yes
Metrics types
  • CPU
  • Disk
  • Memory
  • Number of active instances
Reporting types
  • Regular reports
  • Reports on request

Resellers

Supplier type
Reseller providing extra support
Organisation whose services are being resold
Amazon Web Services (AWS)

Staff security

Staff security clearance
Other security clearance
Government security clearance
None

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
User control over data storage and processing locations
Yes
Datacentre security standards
Complies with a recognised standard (for example CSA CCM version 3.0)
Penetration testing frequency
At least once a year
Penetration testing approach
Another external penetration testing organisation
Protecting data at rest
Physical access control, complying with CSA CCM v3.0
Data sanitisation process
Yes
Data sanitisation type
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
  • Hardware containing data is completely destroyed
Equipment disposal approach
Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Backup and recovery

Backup and recovery
Yes
What’s backed up
  • System State
  • Full backups of the virtual machine
Backup controls
No user control is given to the backups, the daily backups are for the system state of the virtual machines only and no user data is included in the scope. User data backups can be provided at additional cost.
Datacentre setup
Multiple datacentres with disaster recovery
Scheduling backups
Supplier controls the whole backup schedule
Backup recovery
Users contact the support team

Data-in-transit protection

Data protection between buyer and supplier networks
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
Data protection within supplier network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Legacy SSL and TLS (under version 1.2)
  • Other
Other protection within supplier network
VPC segregation

Availability and resilience

Guaranteed availability
Amazon Web Services provide a 99.5% uptime SLA
Approach to resilience
Using AWS EasiPC deliver the solution from multiple datacentres. The service is deployed ensuring multiple availability zones are used to ensure downtime risks are limited.
Outage reporting
A Public dashboard, email alerts, Twitter service status updates

Identity and authentication

User authentication
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google apps)
  • Dedicated link (for example VPN)
  • Username or password
Access restrictions in management interfaces and support channels
All access to EasiPC services are controlled by leveraging a combination of the following:

Complex Username and Password
Multifactor authentication
IP restrictions
UAC (User Access Control) lists
Firewall
Access restriction testing frequency
At least every 6 months
Management access authentication
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)
  • Username or password
Devices users manage the service through
  • Dedicated device on a segregated network (providers own provision)
  • Dedicated device over multiple services or networks
  • Any device but through a bastion host (a bastion host is a server that provides access to a private network from an external network such as the internet)
  • Directly from any device which may also be used for normal business (for example web browsing or viewing external email)

Audit information for users

Access to user activity audit information
Users have access to real-time audit information
How long user audit data is stored for
User-defined
Access to supplier activity audit information
Users have access to real-time audit information
How long supplier audit data is stored for
User-defined
How long system logs are stored for
User-defined

Standards and certifications

ISO/IEC 27001 certification
No
ISO 28000:2007 certification
No
CSA STAR certification
No
PCI certification
No
Cyber essentials
Yes
Cyber essentials plus
Yes
Other security certifications
No

Security governance

Named board-level person responsible for service security
Yes
Security governance certified
Yes
Security governance standards
Other
Other security governance standards
Cyber Essentials Plus
Information security policies and processes
EasiPC is compliant with ISO 27001 and certified Cyber Essentials Plus. All services that EasiPC have developed and deployed have been subject to strict security testing.

Operational security

Configuration and change management standard
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Configuration and change management approach
EasiPC uses the ITIL change management processes for all services and all configuration items are controlled by the process.
All change requests are managed by an internal CAB who support and work with other teams within EasiPC, ensuring changes are carried out following the ITIL standards. The CAB ensure all change requests and subsequent changes are recorded and carried out successfully.
Vulnerability management type
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Vulnerability management approach
EasiPC leverage vendor support services to ensure current guidance and and recommendations are followed to reduce vulnerabilities.

All systems are patched in accordance with vendor guidelines and within 14 days where they are non critical.

Where critical patching is required, additional emergency maintenance windows my be required. Customers are alerted via direct notifications (email and or phone call) to allow for patching

All patches are tested prior to being deployed to the production environment.
Protective monitoring type
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Protective monitoring approach
All EasiPC systems are automatically monitored 24/7 using industry standard RMM and network tools. Alerts are automated and real time events and logs are reported to the service desk where they are handled by our ITIL aligned service desk team.
Incident management type
Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
Incident management approach
EasiPC provide ITIL aligned incident management through our service desk team.

Incidents reported by phone, email or ticket portal are reviewed and a response and resolution are provided within the agreed timeframes. All responses and resolutions follow EasiPC's documented incident management process.

Secure development

Approach to secure software development best practice
Supplier-defined process

Separation between users

Virtualisation technology used to keep applications and users sharing the same infrastructure apart
Yes
Who implements virtualisation
Third-party
Third-party virtualisation provider
Amazon Web Services (AWS)
How shared infrastructure is kept separate
The AWS hypervisor enforces memory and process separation between virtual machines.

Energy efficiency

Energy-efficient datacentres
Yes
Description of energy efficient datacentres
Full details of Amazon Web Services commitment to energy efficiency can be found here: https://aws.amazon.com/about-aws/global-infrastructure/

Social Value

Fighting climate change

Fighting climate change

EasiPC are committed to providing services that utilise renewable sources of energy and hardware wherever possible.

Amazon Web Services were selected in part for the commitment to moving to 100% renewable energy by 2025 along with a recognised energy efficiency over traditional datacentres as detailed in this report from 2021:

https://www.aboutamazon.co.uk/news/sustainability/eu-businesses-that-move-to-aws-cloud-can-improve-energy-efficiency-and-reduce-carbon-emissions

Pricing

Price
£250 to £10,000 an instance a year
Discount for educational organisations
Yes
Free trial available
No

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at bids@easipc.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.