GCI Network Solutions Ltd

Nasstar Intelligent Connected Cloud (ICC) Infrastructure

Nasstar Intelligent Connected Cloud (ICC) Infrastructure is a core network with dedicated private interconnection to the cloud, offering reliable, scalable, resilient connectivity across the UK. Hosted in tier 1 data centres, with handoff to multiple national carriers, connect between sites, the internet or the cloud via ethernet, broadband or mobile.

Features

• Supports WAN, Internet and Cloud access services
• High bandwidth connectivity, up to 10 Gbps
• Private circuits available to all major Cloud Service Providers
• Resilient and redundancy connectivity options available
• Flexible site connectivity via Broadband, Ethernet and mobile
• Ethernet provider agnostic, for the best value connectivity per site
• Supports Nasstar Managed WAN and SD-WAN services

Benefits

• Utilise cloud services, whilst keeping sensitive data off the internet
• High availability networks with carrier and data centre diversity
• Reduce connectivity costs with on-net pricing from multiple carriers
• Save on cloud service providers’ internet egress charges
• Optimise connectivity budgets, with options ranging from broadband to Ethernet
• Access all services, regardless of site connectivity type
• Overlay Nasstar Managed WAN or SD-WAN to optimise services

£344 to £45,000 a unit a year

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@nasstar.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

921114308177144

Contact

Mike Ayres
03450030000
tenders@nasstar.com

Service scope

• Service constraints: The customers on site equipment must be from a Nasstar support networking partner, including but not limited to Cisco, Fortinet, Aruba and Juniper.
• System requirements: Customers need connectivity into Nasstar ICC core network

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: 30 minutes
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Service is included according to the products purchased per site.; ; Where business critical systems/sites/services (defined by those where resilient Ethernet service is purchased) is completely unavailable (Critical business impact) a P1 ticket will be declared and a response given within 30 minutes (24x7), with a 6 hour fix SLA.; ; Where system/site/service is severely degraded for all users, but a workaround is possible, or system/site/service is not business critical, a P2 ticket will get a response within 60 minutes (24x7), with a 8 hour fix SLA.; Additional levels of support (e.g. Service Manager) are available where an additional Managed Service is also taken.
• Support available to third parties: No

Onboarding and offboarding

• Getting started: Connectivity service - no user training required. Where taken as a wires only solution, best practice guidance can be provided for CPE configuration
• Service documentation: Yes
• Documentation formats:
  • HTML
  • ODF
  • PDF
• End-of-contract data extraction: The Service provides Data Transit only, therefore no Data is stored that would require extraction at the end of contract.
• End-of-contract process: Off-boarding is carried out by our Service Management team and transition, termination and service closure can be determined upon request.

Using the service

• Web browser interface: No
• API: No
• Command line interface: No

Scaling

• Scaling available: No
• Independence of resources: Nasstar continuously monitor core network capacity and scale as required
• Usage notifications: No

Analytics

• Infrastructure or application metrics: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • Other locations
• User control over data storage and processing locations: No
• Datacentre security standards: Supplier-defined controls
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest: Encryption of all physical media
• Data sanitisation process: No
• Equipment disposal approach: A third-party destruction service

Backup and recovery

• Backup and recovery: No

Data-in-transit protection

• Data protection between buyer and supplier networks: Private network or public sector network
• Data protection within supplier network: Other
• Other protection within supplier network: ICC is a private network and customer data is not stored within the network

Availability and resilience

• Guaranteed availability: Service availability target will vary according to the connectivity options chosen per site. Ethernet Services with resilience have availability in excess of 99.99%.; Core Network services (such as central internet breakout) are offered with an SLA of 99.999%.; Where service levels and availability targets are not met, the customer is able to claim service credits.
• Approach to resilience: The ICC core network is hosted in multiple tier 1 data centres. Core network switches and routers are run in high availability pairs, with multiple resilient high bandwidth routes across the network. Customer site connectivity can be provided with resilient circuits to multiple data centres, with carrier resilience e.g. BT and Virgin ethernet circuits, and/or technology resilience, e.g. ethernet and broadband or mobile backup.
• Outage reporting: Email alerts available from our Network Operations Centre

Identity and authentication

• User authentication:
  • 2-factor authentication
  • Username or password
• Access restrictions in management interfaces and support channels: The measures implemented in order to manage and restrict access can be divided into six sub-categories: 1) Physical Access Control; 2) Logical Access Control; 3) Access Administration; 4) Authentication and Authorisation; 5) Data Access Control; 6) Data Transfer.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • 2-factor authentication
  • Username or password
• Devices users manage the service through:
  • Dedicated device on a segregated network (providers own provision)
  • Dedicated device over multiple services or networks
  • Directly from any device which may also be used for normal business (for example web browsing or viewing external email)

Audit information for users

• Access to user activity audit information: No audit information available
• Access to supplier activity audit information: No audit information available
• How long system logs are stored for: Less than 1 month

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: United Registrar of Systems
• ISO/IEC 27001 accreditation date: 14/6/21
• What the ISO/IEC 27001 doesn’t cover: The Registered Scope is as follows: Information security management system for the delivery of communications and associated technologies, products and services provided by the Group.
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: Yes
• Who accredited the PCI DSS certification: SAQ-D self assessment
• PCI DSS accreditation date: 12/05/2023
• What the PCI DSS doesn’t cover: Nasstar’s PCI self-assessment covers all aspects of its Live Agent & IVR payment solution used by our customer to transit card payments from their customer to their merchant banks / payment service providers in a PCI compliant manner. Only the Live Agent & IVR Payment solutions, which are run on dedicated
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: Yes
• Any other security certifications:
  • ISO27017
  • ISO27018
  • ISO20000
  • PSN
  • CISPE Code of Conduct Certification

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Nasstar's approach to Security forms part of our overall Integrated Business Systems Management scheme. The Company Secretary is responsible at Board level for Information Security and ensuring that our ISO/IEC 27001 accreditation is maintained and enforced.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Customers may raise a service change request via the support process, this will then be tracked via ticket number for visibility. Either Nasstar, or the customer will prepare a change request document, describing the nature of the change, the reason for the change, and the effect of the change on the solution. If both parties agree to implement the change request, and subject to commercial agreement, the change will be accepted via the sign off of the change request form. Nasstar will engage with the customers change process where required in order to schedule and manage the change.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Customers may raise a service change request via the support process, this will then be tracked via ticket number for visibility. Either Nasstar, or the customer will prepare a change request document, describing the nature of the change, the reason for the change, and the effect of the change on the solution. If both parties agree to implement the change request, and subject to commercial agreement, the change will be accepted via the sign off of the change request form. Nasstar will engage with the customers change process where required in order to schedule and manage the change.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Employs a wide range of security management practices to provide a secure and reliable service to customers. All traffic passes through industry-leading infrastructure to protect against a suite of application attack vectors. Predefined processes & procedures can be obtained upon request.
• Incident management type: Supplier-defined controls
• Incident management approach: All incidents and service requests are raised through Nasstar’s support team, where a unique ticket reference is provided and the incident is tracked with a full audit trail from initial contact through to resolution. Customers can report incidents through email or telephone, with telephone recommended for urgent or high-priority incidents, enabling the most effective response.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Separation between users

• Virtualisation technology used to keep applications and users sharing the same infrastructure apart: Yes
• Who implements virtualisation: Supplier
• Virtualisation technologies used: Other
• Other virtualisation technology used: IP VPN and VRF
• How shared infrastructure is kept separate: Customer networks are set up with logical separation on the Core network via the use of VRFs and dedicated sub interfaces on PE routers

Energy efficiency

• Energy-efficient datacentres: Yes
• Description of energy efficient datacentres: We have invested heavily in implementing best practices that reduce energy consumption without compromising critical functions. Focus is on reducing to near-zero the number of our own datacentres by transforming our own services and infrastructure to Cloud deployment, and on key issues such as effiicient cooling, power supply and IT equipment efficiency.

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  Nasstar is committed to creating innovative Technology with a positive impact by working with your organisation to ensure that opportunities under the contract deliver agreed Policy Outcomes and Model Award Criteria. Nasstar is committed to becoming Net Zero by 2050. Nasstar commits to working with your organisation to ensure that opportunities under the contract deliver agreed Policy Outcomes and Model Award Criteria. Nasstar understand our buyers have commitments in this area and will work with them at implementation stage. We routinely work to ensure delivery of meaningful positive input in this important area. Our initial discovery workshop will include a clear method statement stating how we will achieve Policy outcomes and how our commitment meets the Award Criteria, a timed project plan and process (detailing how we will implement agreed commitments and by when), and how we will monitor, measure and report on our commitments/the impact of our proposals. Related to ‘Fighting climate change’ we will focus on implementing effective measures to deliver any/all of the following benefits through the contract: • MAC 4.1 Deliver additional environmental benefits in the performance of the contract including working towards net-zero greenhouse gas emissions. • MAC 4.2 Influence staff, suppliers, customers, and communities through the delivery of the contract to support environmental protection and improvement which as part of our Social Value Commitment, this product offering will also be integrated into the company's Continuous Improvement Plan and will be scrutinised to identify, monitor, measure and achieve the MAC 4.2 measures. Example reporting metrics of benefits delivered under the contract may include: People-hours spent protecting/improving the environment under the contract, Number of green spaces created under the contract, reduction in emissions of greenhouse gases, reduction in water use, and reduction in waste to landfill.

  Covid-19 recovery

  Nasstar commits to working with your organisation to ensure that opportunities under the contract deliver agreed Policy Outcomes and Model Award Criteria. Nasstar understand our buyers have commitments in this area and will work with them at implementation stage. We routinely work to ensure delivery of meaningful positive input in this important area. Our initial discovery workshop will include a clear method statement stating how we will achieve Policy outcomes and how our commitment meets the Award Criteria, a timed project plan and process (detailing how we will implement agreed commitments and by when), and how we will monitor, measure and report on our commitments/the impact of our proposals. Related to ‘Covid-19 recovery’ we will focus on implementing effective measures to deliver any/all of the following benefits through the contract: • MAC 1.1: Creation of employment, re-training, and other return to work opportunities for those left unemployed by COVID-19, particularly new opportunities in high-growth sectors. • MAC 1.2: Support for people and communities to manage and recover from the impacts of COVID-19, including those worst affected or who are shielding. • MAC 1.3: Support for organisations and businesses to manage/recover from the impacts of COVID-19, including where new ways of working are needed to deliver services. • MAC 1.4: Support for the physical and mental health of people affected by COVID-19, including reducing the demand on health and care services. • MAC 1.5: Improvements to workplace conditions that support the COVID-19 recovery effort including effective social distancing, remote working, and sustainable travel solutions Example reporting metrics of benefits delivered under the contract may include: Number of FTE employment for those made redundant due to COVID-19, people-hours supporting local community integration related to COVID-19, and percentage/number of the supply chain to have implemented the 6 standards in the Mental-Health-at-Work commitment.

  Tackling economic inequality

  Nasstar commits to working with your organisation to ensure that opportunities under the contract deliver agreed Policy Outcomes and Model Award Criteria. Nasstar understand our buyers have commitments in this area and will work with them at implementation stage. We routinely work to ensure delivery of meaningful positive input in this important area. Our initial discovery workshop will include a clear method statement stating how we will achieve Policy outcomes and how our commitment meets the Award Criteria, a timed project plan and process (detailing how we will implement agreed commitments and by when), and how we will monitor, measure and report on our commitments/the impact of our proposals. Related to ‘Tackling Economic Inequality’ we will focus on implementing effective measures to deliver any/all of the following benefits through the contract: • MAC2.1: Create opportunities for entrepreneurship and help new organisations grow. • MAC2.2: Create employment/training opportunities for people who face barriers to employment, are located in deprived areas, and in industries with known skills shortages or high growth sectors. • MAC2.3: Support educational attainment including training schemes • MAC 3.1: Create a diverse supply chain including new businesses/entrepreneurs/start-ups/SMEs/VCSEs/mutuals. • MAC 3.2: Support innovation and disruptive technologies throughout the supply chain to deliver lower cost, higher quality goods/services. • MAC 3.3: Support the development of scalable and future-proofed new methods to modernise delivery and increase productivity. • MAC 3.4: Demonstrate collaboration and a fair/responsible approach to working with supply chain partners. • MAC 3.5: Demonstrate action to identify/manage cyber security risks in the delivery including in the supply chain. Example reporting metrics of benefits delivered under the contract may include: Number of FTE employment/apprenticeship/training opportunities created, learning interventions delivered, start-up/SME/VCSE/mutuals opportunities awarded, and relevant supply chain metrics e.g. Cyber Essentials certification and adoption of NCSC 10 steps.

  Equal opportunity

  Nasstar commits to working with your organisation to ensure that opportunities under the contract deliver agreed Policy Outcomes and Model Award Criteria. Nasstar understand our buyers have commitments in this area and will work with them at implementation stage. We routinely work to ensure delivery of meaningful positive input in this important area. Our initial discovery workshop will include a clear method statement stating how we will achieve Policy outcomes and how our commitment meets the Award Criteria, a timed project plan and process (detailing how we will implement agreed commitments and by when), and how we will monitor, measure and report on our commitments/the impact of our proposals. Related to ‘Equal opportunity’ we will focus on implementing effective measures to deliver any/all of the following benefits through the contract: • MAC 5.1: Demonstrate action to increase the representation of disabled people in the contract workforce. • MAC 5.2: Support disabled people in developing new skills relevant to the contract, including through training schemes resulting in recognised qualifications • MAC 6.1: Demonstrate action to identify/tackle inequality in employment, skills, and pay in the contract workforce. • MAC 6.2: Support in-work progression to help people, including those from disadvantaged/minority groups, to move into higher-paid work by developing new skills relevant to the contract. • MAC 6.3 Demonstrate action to identify/manage the risks of modern slavery in the delivery of the contract, including in the supply chain. Example reporting metrics of benefits delivered under the contract may include: Percentage/number of FTE disabled/under-represented people employed as a proportion of the total FTE including apprenticeships/training schemes, percentage/number of companies in the supply chain to have committed to the five foundational principles of good work, percentage of supply chain mapping completed, and people-hours devoted to supporting victims of modern slavery.

  Wellbeing

  Nasstar commits to working with your organisation to ensure that opportunities under the contract deliver agreed Policy Outcomes and Model Award Criteria. Nasstar’s Wellbeing policies are aligned to the UK Government’s Good Work Plan (satisfaction, fair pay, participation and progression, well-being, safety and security, voice and autonomy). Nasstar understand our buyers have commitments in this area and will work with them at implementation stage. We routinely work to ensure delivery of meaningful positive input in this important area. Our initial discovery workshop will include a clear method statement stating how we will achieve Policy outcomes and how our commitment meets the Award Criteria, a timed project plan and process (detailing how we will implement agreed commitments and by when), and how we will monitor, measure and report on our commitments/the impact of our proposals. Related to ‘Wellbeing’ we will focus on implementing effective measures to deliver any/all of the following benefits through the contract: • MAC 7.1: Demonstrate action to support health and wellbeing, including physical/mental health, in the contract workforce. • MAC 7.2: Influence staff, suppliers, customers, and communities through the delivery of the contract to support health and wellbeing, including physical and mental health. • MAC 8.1: Demonstrate collaboration with users and communities in the co-design and delivery of the contract to support strong integrated communities. • MAC 8.2: Influence staff, suppliers, customers, and communities through the delivery of the contract to support strong, integrated communities. Example reporting metrics may include: Percentage/number of the supply chain to have implemented measures to improve the physical and mental health and wellbeing of employees including the 6 standards in the Mental Health at Work commitment and mental health enhanced standards in ‘Thriving at Work’, and people-hours supporting local community integration e.g. volunteering/community-led initiatives and Mental Health First Aiders.

Pricing

• Price: £344 to £45,000 a unit a year
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@nasstar.com. Tell them what format you need. It will help if you say what assistive technology you use.