Responsiv Solutions Ltd

IBM Cloud Pak Service

IBM Cloud Paks provide enterprise container software that is pre-integrated for cloud use cases in production-ready configurations. Quickly build new cloud- native applications deployed to Kubernetes based container orchestration platforms. Modernize/extend existing applications, and deploy middleware in a consistent manner across multiple clouds.
Software installed on Buyer suppler Kubernetes environments.

Features

• Full Enterprise Service Bus (ESB) Capability
• Over 100 integration connectors available out of the box
• Drag-and-drop no-code node deployments, graphical management console
• Control of distributed nodes deployed across all cloud platforms
• IBM Cloud Pak for Applications
• IBM Cloud Pak for Data
• IBM Cloud Pak for Integration
• IBM Cloud Pak for Multicloud Management
• IBM Cloud Pak for Business Automation

Benefits

• Critical cloud data and AI capabilities as containerized microservices
• Complete and flexible set of integrated automation software
• Enterprise-grade middleware capable of supporting organisations large and small
• Seamless connection of on-premise and cloud applications
• Seamless integration with existing infrastructure management tooling using SNMP
• Consistent added capabilities for deployment, lifecycle management,
• Containerized IBM middleware and open source components
• Workloads monitored seamlessly using the integrated monitoring service
• Application-centric, AI infused, platform for IT automation
• Containerised platform for agile integration

£390 a unit a month

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@responsiv.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

927449436764831

Contact

Mike Axial
+44 (0)1344 266 980
sales@responsiv.co.uk

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Hybrid cloud
• Service constraints: None
• System requirements:
  • Buyer provides Kubernetes-based orchestration cloud platform
  • Microsoft Azure
  • Amazon AWS
  • Google Cloud
  • IBM Cloud

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: The response goal is two business hours (8AM to 5PM Monday to Friday). For Severity 1 tickets (critical business impact) there is 24x7 support.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: https://www.ibm.com/support/pages/contacting-ibm-cloud-pak-system-technical-support
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Extensive documentation available from IBM web site. ; https://cloudpak8s.io/playbook/; Extensive training available in a variety of formats including classroom and remote.; https://www.ibm.com/training/search?query=Cloud%20Pak&trainingType=journey; Onsite training and mentoring can be provide as required (charges apply).
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Cloud Paks are installed and run on customer provided kubernetes environments. Customers will have the ability to extract their data prior to the end of the contract is they choose not to renew the subscription
• End-of-contract process: Cloud Paks are installed and run on customer provided kubernetes environments. Entitlement to use the software will expire at the end of the contract.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: Yes
• Compatible operating systems:
  • Linux or Unix
  • Windows
• Designed for use on mobile devices: No
• Service interface: Yes
• User support accessibility: WCAG 2.1 AA or EN 301 549
• Description of service interface: Full featured interfaces to support the comprehensive nature of the product features
• Accessibility standards: WCAG 2.1 AA or EN 301 549
• Accessibility testing: https://www.ibm.com/able/product_accessibility/request?requestId=b8acc447892a11aeea445312b5dc0e43
• API: Yes
• What users can and can't do using the API: Full API set where applicable ; https://cloud.ibm.com/docs?tab=api-docs
• API documentation: Yes
• API documentation formats:
  • Open API (also known as Swagger)
  • HTML
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: IBM Cloud Paks use pre-built configurations that describe runtime environments. These resource definitions can be easily customized during deployment, and upgrades can be easily rolled out or rolled back

Scaling

• Independence of resources: Users will deploy IBM Cloud Paks on the cloud platform of their choice. The service available will be subject to the choice of cloud the client makes and whether the environment is running in dedicated, or multi-tenanted mode

Analytics

• Service usage metrics: Yes
• Metrics types: Containers capable of being integrated with any OpenShift platform. Extensive monitoring available using IBM Cloud Pak for Multicloud Management
• Reporting types:
  • API access
  • Real-time dashboards

Resellers

• Supplier type: Reseller providing extra support
• Organisation whose services are being resold: IBM

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Encryption of all physical media
  • Other
• Other data at rest protection approach: IBM Cloud Paks will run on the Buyer-provided cloud platform and behind the buyers firewalls. Buyer is responsible for protecting data at rest using the tooling available from their choice of cloud platform
• Data sanitisation process: Yes
• Data sanitisation type: Deleted data can’t be directly accessed
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: This service does not store enterprise data Configuration information and business process definitions can be extracted using open formats and industry standards for this product.
• Data export formats: Other
• Other data export formats: Format as appropriate to the specific Cloud Pak
• Data import formats: Other
• Other data import formats: Format as appropriate to the specific Cloud Pak

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Legacy SSL and TLS (under version 1.2)
  • Other
• Other protection between networks: IBM Cloud Paks will run on the Buyer-provided cloud platform and behind the buyers firewalls.
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Legacy SSL and TLS (under version 1.2)
  • Other
• Other protection within supplier network: IBM Cloud Paks will run on the Buyer-provided cloud platform and behind the buyers firewalls.

Availability and resilience

• Guaranteed availability: To be confirmed depending on the deployment of IBM Cloud Paks across the Buyer's hybrid cloud platform.
• Approach to resilience: IBM Cloud Paks will be deployed on a Buyer supplied cloud of their choice Overall resilience will rely heavily on the choice of platform. ; IBM Cloud Paks can be deployed across multiple cloud instances and across multiple nodes to provide the required level of resilience. The Buyer will have to consider any cost implications. ; ; IBM Cloud Paks provide enterprise container software that is pre-integrated for cloud use cases in production-ready configurations; they can be quickly and easily deployed to Kubernetes-based container orchestration platforms. In addition, IBM Cloud Paks provide resiliency, scalability, and integration with core platform services, like monitoring or identity management.; ; IBM Cloud Paks enable you to easily deploy modern enterprise software either on-premises, in the cloud, or with pre-integrated systems and quickly bring workloads to production by seamlessly leveraging Kubernetes as the management framework supporting production-level qualities of service and end-to-end lifecycle management. This gives clients an open, faster, more secure way to move core business applications for any cloud
• Outage reporting: We expect the Buyer will incorporate the functionality available within the IBM Cloud Paks within their existing application performance management capability.; As the IBM Cloud Paks will be hosted on the Buyer's chosen cloud platform any outage due to this will be out of scope.

Identity and authentication

• User authentication needed: Yes
• User authentication: Username or password
• Access restrictions in management interfaces and support channels: IBM maintains individual role-based authorization of privileged accounts that is subject to regular validation. A privileged account is a duly authorized IBM user identity with administrative access to a Cloud Service, including associated infrastructure, networks, systems, applications, databases and file systems.
• Access restriction testing frequency: At least every 6 months
• Management access authentication: Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: Between 1 month and 6 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: Between 1 month and 6 months
• How long system logs are stored for: Between 1 month and 6 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: Citation ISO Certification Limited
• ISO/IEC 27001 accreditation date: 02/12/2024
• What the ISO/IEC 27001 doesn’t cover: N/a
• ISO 28000:2007 certification: No
• CSA STAR certification: Yes
• CSA STAR accreditation date: 02/01/2020
• CSA STAR certification level: Level 1: CSA STAR Self-Assessment
• What the CSA STAR doesn’t cover: The IBM CSA Star Self-Assessment can be viewed https://cloudsecurityalliance.org/star/registry/ibm-cloud/services/ibm-cloud-services/
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: Yes
• Any other security certifications:
  • https://www.ibm.com/uk-en/cloud/compliance/global
  • https://www.ibm.com/trust

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: No
• Security governance approach: IBM Cloud Paks will be deployed on the Buyers cloud platform and the security of the service once deployed is therefore under the management of the Buyer.
• Information security policies and processes: Certification by IBM to run on Red Hat OpenShift, providing full software stack support, and regular security, compliance and version compatibility updates

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: IBM Cloud Paks will be deployed on the Buyers cloud platform and the configuration and management of the service once deployed is therefore under the management of the Buyer.
• Vulnerability management type: Undisclosed
• Vulnerability management approach: IBM Cloud Paks will be installed behind the Buyer's firewall therefore responsibility for penetration testing and vulnerability assessments will rest with the Buyer.; The highest risks will be generated in how the Buyer develops integrations and business processes and their accessibility outside their firewalls. Responsiv can provide additional consultancy and advice (at extra cost) to review the Buyers implementation of security of the platform and any integrations, processes etc built using the features of the IBM Cloud Paks
• Protective monitoring type: Undisclosed
• Protective monitoring approach: IBM Cloud Paks will be installed behind the Buyer's firewall therefore responsibility for protective monitoring will rest with the Buyer. The core parts of the product are IBM enterprise grade software that facilitates logging of most aspects of the platform. The Buyer will therefore have a comprehensive set of tooling with which to integrate their protective monitoring of the IBM Cloud Pak platform with their existing infrastructure.; Responsiv can provide additional consultancy and advice (at extra cost) to review the Buyers implementation of protective monitoring.
• Incident management type: Undisclosed
• Incident management approach: IBM provide extensive product support accessible 24/7 over the internet and phone

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  Fighting climate change

  Fighting climate change

  By using a cloud environment usage of servers are maximised and processing is optimally done resulting in a decrease in power consumption and thus a decrease in consumer carbon footprint

Pricing

• Price: £390 a unit a month
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@responsiv.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.