Airwalk Consulting Reply Ltd
Azure Security Controls Defined and Deployed as Code
Airwalk Reply provides advanced security controls defined as code for your Azure services, Azure Policy files for enforcement, and a deployment mechanism to assign the controls to your landing zone. This will improve the security posture of your Azure infrastructure, far exceeding the current out-of-the-box offerings for highly regulated organisations.
Features
- Security controls are defined as code for 120+ Azure services
- Control mappings against NIST, CIS, and organisation-specific frameworks
- Deeper compliance view through control to framework mappings
- Customised documentation using standardised templates by automation
- Documentation in human-readable formats, e.g. markdown
- Documentation in machine-readable formats, e.g. JSON and YAML
- Controls as Code allows auditing, version control, and approval gates
- Azure Policy as Code for efficient control enforcement
- Automated deployment to landing zones streamlines processes
- Seamless integration with existing systems like repositories and pipelines
Benefits
- Enhanced security posture surpasses default out-the-box options
- Effective guardrails and governance reduces risk of misconfiguration
- Provides clear end-to-end mapping between control, framework and Policy
- Compliance can be demonstrated against applicable frameworks
- Controls as Code approach simplifies maintenance rollback, allowing pipeline integration
- Controls as Code approach provides full audit history
- Automated deployments enhance efficiency, standardisation, and risk mitigation
- Controlled deployments with approval gates reduces risk
- Specialised in operating in highly regulated environments
- Proven expertise in helping customers secure their cloud environments
Pricing
£350 a unit a day
Service documents
Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format,
email the supplier at bid@airwalkconsulting.com.
Tell them what format you need. It will help if you say what assistive technology you use.
Framework
G-Cloud 14
Service ID
9 6 2 7 2 0 2 2 0 9 7 7 3 1 4
Contact
Airwalk Consulting Reply Ltd
Alex Hammond
Telephone: 02081428686
Email: bid@airwalkconsulting.com
Planning
- Planning service
- Yes
- How the planning service works
- We collaborate with our clients to help them define the project's critical objectives alongside their broader strategy. Understanding these drivers enables us to work with the client to define a strategic plan for delivering the solution. This process includes a detailed analysis of the existing application and operating model (where applicable) and a prioritisation of the critical outcomes the project is intended to deliver. Once this has been defined, an implementation plan can be developed, including identifying the necessary foundational elements that would need to be offered to realise the benefits case successfully. We work closely with the client to manage this process, giving all artefacts whilst managing inputs from the client, ultimately providing robust outputs that the client team can use to gain senior management buy-in and move forward with implementation at their desired pace and scale.
- Planning service works with specific services
- No
Training
- Training service provided
- Yes
- How the training service works
- We work closely with our clients and their teams to ensure their skills, knowledge, and experience develop and evolve during our engagement process. We describe this as Enablement; our goal is to leave our clients stronger than we found them. Whilst formal training is part of this, we strongly believe in the effectiveness of working in blended delivery teams with our clients, utilising methods such as mentoring to transfer knowledge and skills to client team members, over time providing them with greater ownership and responsibility as Airwalk Reply steps back from hands-on delivery and hands over to the client. Where appropriate, we will structure formal training in specific areas (e.g. DevOps, Terraform, etc.), which can be incorporated into the programme as an additional module.
- Training is tied to specific services
- No
Setup and migration
- Setup or migration service available
- Yes
- How the setup or migration service works
- Airwalk Reply will manage the delivery of these elements where new technology, automation, reporting, tooling or process is required. This includes scoping, planning, and execution, as well as any architecture, engineering, or project management involved.
- Setup or migration service is for specific cloud services
- No
Quality assurance and performance testing
- Quality assurance and performance testing service
- Yes
- How the quality assurance and performance testing works
-
A key element of our methodology is our quality and delivery assurance approach. We are ISO 9001 accredited, with robust quality assurance processes for all client programmes. For technical execution, we employ integrated assurance methods, including peer review of all designs and code, alongside formal project governance, including monthly design authorities, fortnightly client demonstrations and a formal QA process before any service goes live.
We use a shift-left and test-automation framework for cost-effective continuous release, load, stress, volume, soak, scalability testing, and capacity planning. We test system infrastructure performance, including network provisioning, platforms, hosting, and cross-channel testing. We conduct end-user testing to assess ease of use, including via assistive technologies.
We work collaboratively with Buyers to prepare for operational readiness, testing software installation and configuration, database backup and recovery, rollback and failover testing, maintainability, and security.
Transition is low-risk, with migration rehearsals for tranches of users and services, testing, and refining throughout. We recommend a window in which the original and new services run concurrently. Our highly structured approach ensures planning, risk management, and transition are executed consistently and effectively, with high transparency and limited opportunity for surprise.
Security testing
- Security services
- Yes
- Security services type
-
- Security strategy
- Security risk management
- Security design
- Cyber security consultancy
- Security testing
- Security incident management
- Security audit services
- Certified security testers
- No
Ongoing support
- Ongoing support service
- No
Service scope
- Service constraints
- N/A
User support
- Email or online ticketing support
- No
- Phone support
- No
- Web chat support
- No
- Support levels
- N/A
Resellers
- Supplier type
- Not a reseller
Staff security
- Staff security clearance
- Conforms to BS7858:2019
- Government security clearance
- Up to Developed Vetting (DV)
Standards and certifications
- ISO/IEC 27001 certification
- Yes
- Who accredited the ISO/IEC 27001
- Alcumus ISOQAR
- ISO/IEC 27001 accreditation date
- 20/01/2023
- What the ISO/IEC 27001 doesn’t cover
- N/A
- ISO 28000:2007 certification
- No
- CSA STAR certification
- No
- PCI certification
- No
- Cyber essentials
- Yes
- Cyber essentials plus
- Yes
- Other security certifications
- No
Social Value
- Social Value
-
Social Value
- Fighting climate change
- Covid-19 recovery
- Tackling economic inequality
- Equal opportunity
- Wellbeing
Fighting climate change
As part of our services, we extensively promote sustainable behaviours such as minimising documentation printing, systematically recycling materials, adopting energy-saving habits, reducing travel, and using low-emission transport.
Our significant investment in hardware (server) virtualisation has allowed us to create a comprehensive and innovative offer in cloud computing. We leverage the cloud extensively internally, thereby reducing consumption and minimising the environmental impact of our operations by decreasing the need for physical machines.
Our commitment to environmental sustainability is evident in our everyday actions. For instance, we have replaced all incandescent bulbs with LED lighting in our office, resulting in a 90% energy savings. Our gadgets and creative packaging are all made from recyclable materials, and we have joined the UK Government Cycle to Work scheme. Moreover, we are actively reducing our business travel by promoting audio-visual conference solutions.
Outside of our working practices, as part of the Reply group, we have purchased 1,046 trees across nine countries that absorb 322,510 kg of CO2 annually. We are also on track to meet our target of having over 50% of our vehicles be fully electric by 2025.
We are committed to lowering our environmental impact as much as possible and constantly evaluate our practices to ensure we do everything possible to protect the planet.
We're looking forward to talking with you about what we can do by providing our services to help you reduce the environmental impact.Covid-19 recovery
We support organisations in managing and recovering from the impacts of COVID-19 by delivering transformational change to operate more efficiently, enable remote or hybrid working, and be more cost-effective, allowing them to support their citizens more effectively.
We are setting up two Airwalk Academy programmes for underprivileged secondary-school Year 12 students to support new opportunities in high-growth sectors. These programmes comprise 10-12 weeks of online project management and leadership tutorial sessions. Participants attend Partner-led employability workshops and receive formal certifications and valuable skills to help them achieve worthwhile and rewarding technology careers.
We support the physical and mental health and wellbeing of our people. We are recognised as one of the UK's Best Workplaces for Technology and Wellbeing.
Our hybrid-working model supports effective social distancing, remote working, and those who are shielding. Our managers focus on our employees’ wellbeing by contacting those they manage at least twice weekly, with more formal check-ins every two weeks. We provide a cycle-to-work scheme and a train season ticket loan to support sustainable travel solutions.
To reduce the demand for health and care services, our people have access to private healthcare, including GP and hospital services, mental wellbeing support, and Talking therapy.
To help people and communities manage and recover from the impacts of COVID-19, we constantly review our supply chain, positively discriminating SMEs, VCSEs and mutuals. To remove barriers in advertising for our public sector contracts, we publish opportunities on Contracts Finder and through local authority websites in clients’ locations to support local employment.
We are committed to helping local communities manage and recover from the impact of COVID-19. We are excited to discuss how we can help you and your communities.Tackling economic inequality
We are Social Value Quality Mark accredited and committed to tackling economic inequality. Working with disadvantaged school and university students in Manchester and London creates employment and training opportunities in some of the country's most deprived areas.
In Manchester, we will work with underperforming schools and some of their most disadvantaged pupils, delivering two Airwalk Academy programmes focusing on Project Management or Leadership Skills. The Academies comprise 10-12 weeks of online tutorial sessions, which run alongside the Year 12 participants completing their own independent programming or social-action projects in their local community. Upon completion of the Academy programmes, participants are invited to attend workshops delivered by Airwalk Reply partners, focusing on employability skills and delivering bespoke guidance for practical university and apprenticeship applications. The programmes are followed by a further year of mentoring for all participants, and all students go on to achieve formal certifications. The Academies will provide participants with valuable skills and qualifications to help them achieve worthwhile and rewarding technology careers.
We are working with several other Reply partners in London to mentor underprivileged undergraduate students. Through a partnership with the charity UpReach, we will identify students with the most challenging socio-economic backgrounds and provide regular mentoring to support their journey out of tertiary education into high-quality employment.
Our commitment to economic growth and business creation is not limited to our educational initiatives. We actively support new organisations, constantly reviewing our supply chain to ensure it includes various organisations, including SMEs and VCSEs. We also prioritise local procurement where feasible, contributing to growth in our Buyers’ communities.
We are excited to discuss how we can help you tackle economic inequality in your location(s).Equal opportunity
We actively tackle inequality in employment, skills, and pay. For recruitment, we focus on culture fit as much as capability, and hiring managers participate in EDI and Unconscious Bias Awareness training to ensure equality further.
Our commitment to inclusivity is evident in our efforts to increase the representation of disabled people in our contract workforce. As a Disability Confident Committed (DCC) employer, many of our employees are registered as disabled. This accreditation is a testament to our dedication to improving attitudes. We strive to reduce the disability employment gap by ensuring our recruitment process is inclusive and accessible, offering interviews to disabled people who meet the minimum criteria for the job, and providing reasonable adjustments as required. We support existing employees who acquire a disability or long-term health condition, enabling them to stay in work.
We are committed to aligning with government policies to ensure individuals are not excluded from services due to entry barriers associated with provided channels. We design digital services by GDS accessibility standards, providing a secure and inclusive digital environment.
We ensure research groups include the full range of users. For user research, we ensure it is orientated toward topics such as accessibility and usability. We provide digital services that meet standards, e.g., Web Content Accessibility Guidelines, and ensure services are accessible for those who would otherwise be digitally excluded (use of assistive technologies, non-digital channels, etc.). We conduct cross-channel tests for those who try to utilise a service digitally but need to fall back on the phone, post or in-person services. For testing, we make sure testers are representative of all user groups.
We are committed to delivering Social Value throughout all our contracts and exploring with clients how we can add value to their initiatives.Wellbeing
We support the physical and mental health and wellbeing of our people. We are recognised as one of the UK's Best Workplaces for Technology, Wellbeing and Employee Development.
Our hybrid-working model recognises the importance of increased communication in maintaining our people’s wellbeing and mental health. We hold virtual and face-to-face daily team meetings, weekly departmental briefings, and fortnightly all-hands sessions at which our people are encouraged to contribute openly and transparently.
We provide 36 hours (three hours a month) to support employees' mental health via Airwalk Allies virtual meet-up sessions to support those colleagues with mental health issues.
We provide £100,000+ annual funding for Vitality health insurance for employees and dependents. The package includes physical and mental health support;
Our managers focus on our employees’ wellbeing by contacting reports at least twice weekly, with more formal check-ins every two weeks. Various family policies support maternity, paternity, shared parental and adoption leave. Maintaining a work-life balance is essential, and we discourage any weekend work.
We give our people flexible working hours where we can. We urge them to work from our offices in London, Sheffield or Edinburgh as much as possible to encourage a one-team approach. We also fund our people to organise team-building events, like indoor golf or bowling.
We encourage our people to participate in our calendar of charity events, such as 5k or 10k park charity runs or other fundraisers. We provide a cycle-to-work scheme and season ticket loan and deliver a discounted technology scheme, which enables our people to save money on a wide range of tech kits.
As a result of all that we do for our people, our consultants are energised, focused, feel appreciated and do all they can to deliver the best possible service to Buyers.
Pricing
- Price
- £350 a unit a day
- Discount for educational organisations
- No
Service documents
Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format,
email the supplier at bid@airwalkconsulting.com.
Tell them what format you need. It will help if you say what assistive technology you use.