Skip to main content

Help us improve the Digital Marketplace - send your feedback

The Scale Factory

AWS Security Assessment / Audit

Our AWS Security Review provides a comprehensive assessment of your public sector AWS workload, ensuring alignment with best practices and industry standards. Conducted by certified experts, the review covers key security areas, delivers a detailed report with risk profiles and technical recommendations, tailored to your organisation's unique requirements.

Features

  • Hands-on assessment of your AWS workload
  • Delivered by AWS Security Specialty certified experts
  • Covers controls from CIS AWS Foundations Benchmark
  • Tailored to your unique business context and risk profile
  • Comprehensive review of accounts, governance, auditability, and more
  • Includes build, deployment, credentials, authentication, and data protection
  • Assesses network security and processes
  • Detailed report with executive summary and risk profiles
  • Specific technical recommendations for your team
  • Includes a hands-on audit and discovery session

Benefits

  • Ensures your public sector AWS workload is secure
  • Aligns with AWS best practices and industry standards
  • Identifies and mitigates potential security risks
  • Provides a clear understanding of your security posture
  • Tailored recommendations based on your unique public sector requirements
  • Comprehensive coverage of critical security areas
  • Improves auditability and compliance for public sector workloads
  • Actionable insights to enhance your AWS security
  • Expertly delivered by certified professionals with public sector experience
  • Helps prioritise security improvements based on risk profiles

Pricing

£1,430 a unit a day

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at jemma@scalefactory.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

9 8 0 1 7 3 5 5 5 4 8 6 7 7 5

Contact

The Scale Factory Jemma Bolland
Telephone: 020 3095 7609
Email: jemma@scalefactory.com

Planning

Planning service
No

Training

Training service provided
Yes
How the training service works
We’re believers in a “learning by doing” approach and so in each of our engagements, we work alongside our customers’ team members imparting knowledge as we go.

We also have some hands-on training workshops on relevant topics that we can run for your team, using sandbox environments.
Training is tied to specific services
Yes
Services the training service works with
AWS

Setup and migration

Setup or migration service available
No

Quality assurance and performance testing

Quality assurance and performance testing service
No

Security testing

Security services
Yes
Security services type
  • Security strategy
  • Security design
  • Cyber security consultancy
  • Security audit services

Ongoing support

Ongoing support service
No

Service scope

Service constraints
The Scale Factory is a remote-first organisation. We deliver all services remotely as standard, collaborating using tools like Slack, Zoom, and Miro. We’re happy to attend in person for project kickoffs, design workshops, and other activities where high bandwidth collaboration or team bonding is important. Day to day delivery or engineering work will usually not be delivered on your premises.

User support

Email or online ticketing support
No
Phone support
No
Web chat support
No
Support levels
We don't offer support for our assessment / audit engagements because of the nature and scope of this work.

Resellers

Supplier type
Reseller (no extras)
Organisation whose services are being resold
AWS

Staff security

Staff security clearance
Other security clearance
Government security clearance
Up to Security Clearance (SC)

Standards and certifications

ISO/IEC 27001 certification
Yes
Who accredited the ISO/IEC 27001
British Assessment Bureau
ISO/IEC 27001 accreditation date
08/08/2023
What the ISO/IEC 27001 doesn’t cover
None
ISO 28000:2007 certification
No
CSA STAR certification
No
PCI certification
No
Cyber essentials
No
Cyber essentials plus
No
Other security certifications
No

Social Value

Social Value

Social Value

  • Equal opportunity
  • Wellbeing

Equal opportunity

We’ve built a comprehensive career ladder for our employees, making it very clear what expectations we have at each level of employment. Our salary model is tied directly to that career ladder, to promote fairness of remuneration across the company: people doing equivalent work are compensated at the same level. When internal promotions are available, we run an application process. Training opportunities are made available equitably.

We’ve worked to eliminate gender coded language from our job ads, and where possible we try to ensure our hiring panels include individuals from underrepresented groups, particularly where the candidate themselves is from such a group.

Wellbeing

Scale Factory staff have access to a group Vitality health insurance plan promoting physical health and fitness, as well as an Employee Assistance Plan offering counselling and other mental health support.

Every employee has a regular one-to-one relationship with a line manager who’s looking out for their wellbeing, and we’ve trained a number of people as Mental Health First Aiders to respond to any mental health challenges.

Although our workforce works primarily from their own homes, we provide each employee with a fund to cover the costs of devices and furniture to set up an ergonomic workstation.

Pricing

Price
£1,430 a unit a day
Discount for educational organisations
No

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at jemma@scalefactory.com. Tell them what format you need. It will help if you say what assistive technology you use.