ZAIZI LTD

DevSecOps Service

Zaizi's DevSecOps service helps you build a robust, secure and automated delivery pipeline.

Our service creates configuration "as-code", streamlines pipelines, automates deployment of applications, creates application robustness and constant security assurance.

Up-skill, implement and improve your security and development practices. Automate and streamline processes, enabling continuous development and resilience

Features

• Continuous Integration, Continuous Delivery, Continuous Deployment
• Establish best practice for continuous security
• Create a security community of practice within your organisation
• Train and mentors your developers to become more security focused
• Security and resilience planning
• Automation on testing and risk-heavy manual processes
• Advise on security policy and vendor selection
• Construct and implement containers - Docker, Kubernetes
• Responsiveness to changing landscape of cybersecurity

Benefits

• Encourages your teams to be more agile
• Speed of recovery enhances in cases of security incidents
• Confidence to deploy and build in a secure environment
• Ensures the highest standards for information security
• Remove single points of failure around cyber-security
• Implement continuous resilience to help prevent vulnerabilities
• Reduces cyber security risks
• Monitoring of security metrics
• CI/CD governance and security

£450 to £1,600 a unit a day

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@zaizi.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

998933538902692

Contact

Andrew Hawkins
0203 582 8330
sales@zaizi.com

Planning

• Planning service: Yes
• How the planning service works: We plan and implement a move from legacy applications and hosting to new cloud-based services. We tailor our approach to your needs and to offer value for money.; ; Hosting of 3rd Party Applications is on a case by case basis. We use our Site Reliability Engineering to better utilise our support and development functions to ensure we get maximum crossover of activities; ; We are platform and technology agnostic. It enables us to offer you impartial advice on supplier and vendor selection during the planning stage. We explore the options available for cloud deployment solutions; such as SaaS/PaaS/IaaS and whether to use private/public/hybrid cloud solutions.
• Planning service works with specific services: No

Training

• Training service provided: Yes
• How the training service works: We can offer both onsite and remote training throughout the engagement, designed to upskill your internal teams. It enables your team to maintain and provide their own continuous improvements to the services we deliver. Training services are typically agreed as part of the initial planning phase to ensure we are clear on the level of training you require.; This could be delivered in a number of ways, including one-to-one coaching, pair programming, show and tells, workshop sessions, webinars or user guides. During the planning phase, we would also formulate an exit plan to ensure this is tied into the deliverables schedule. We will always endeavour to provide as much knowledge transfer and information sharing as practically possible, as it will ultimately reduce your reliance on external suppliers in future.
• Training is tied to specific services: No

Setup and migration

• Setup or migration service available: Yes
• How the setup or migration service works: Our architects will identify cybersecurity processes and tooling that complies with your security guidelines, maintaining the integrity of your sensitive data.; ; We offer expert setup and migration consultation, providing hands-on technical capabilities to deploy services to a new platform. We will collaboratively develop a detailed migration strategy with your in-house team.; ; We deliver a seamless transition that ensures:; - continuity of service; - integrity of data; - staff skills capability; - implementing security measures; - cross-compatibility and preventing any data loss in the process; ; We provide specialists in Cloud Engineering, Cyber Security, Data, DevOps, Change Management, Infrastructure and QA/Testing, supporting all aspects of the migration journey. We comply with ISO2700.
• Setup or migration service is for specific cloud services: No

Quality assurance and performance testing

• Quality assurance and performance testing service: Yes
• How the quality assurance and performance testing works: QA and Performance Testing is baked into the delivery of our services. We develop user testing scenarios that reflect key user journeys, enabling us to test solutions as real users experience it.; ; These scenarios can also provide a foundation for cross-browser/device testing and user acceptance testing.; ; Our test specialists deliver:; - Functional Testing; - Load & Performance Testing; - Automation Testing; - Infrastructure Testing; - Acceptance Testing; - Security Testing; - UAT / OAT / DR Testing; - Vulnerabilities and Stress Testing

Security testing

• Security services: Yes
• Security services type:
  • Security risk management
  • Security design
  • Security incident management
  • Other
• Other security services:
  • Security Design
  • Security Automation

Ongoing support

• Ongoing support service: Yes
• Types of service supported:
  • Buyer hosting or software
  • Hosting or software provided by your organisation
  • Hosting or software provided by a third-party organisation
• How the support service works: Support cloud applications developed in Open Source technologies / Java and COTS packages including Alfresco, Drupal, Crafter, Talend and Ephesoft. We support the application platforms on AWS, Azure, Google Cloud and UKCloud

Service scope

• Service constraints: Na

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Typically, Zaizi provides two models:; ; - Core business hours 08:30 - 18:00 ; - Extended business hours for wider coverage for reasonable endeavours outside of standard business hours for routine maintenance and P1 coverage.; ; 24/7 services are available.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.1 AA or EN 301 549
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Support levels: Zaizi propose a ‘DevSecOps’ service to support live service capabilities in a GDS aligned, streamlined and simpler way, with the right level of service governance and best practice.; ; Zaizi offer the following support service supporting the application, platform and infrastructure as required; ; • Zaizi Service Desk (providing 1st Level support services; handle user queries, service requests and fault reporting and to handle Incident Management response and resolution processes proportionate to agreed definitions of priority and severity (aligned with agreed SLAs),; ; • A 24x7 automated Event Handling Service handling security related events during non-core hours,; ; • A Core Hours DevSecOps Function (providing capability covering the existing 2nd and 3rd level support supplemented with 24x7 ‘on call’ DevSecOps engineer(s) capability.; ; • An agile live service sprint Dev, QA and Web Operations Support capability to deliver continual delivery of functionality enhancement (Change Management), roadmap improvement and defect resolution.; ; Please refer to the pricing and service definition documents to see more information on cost and team composition.

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Developed Vetting (DV)

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: The British Assessment Bureau
• ISO/IEC 27001 accreditation date: 25th August 2022
• What the ISO/IEC 27001 doesn’t cover: NA
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: No

Social Value

• Social Value:

  Social Value

  • Tackling economic inequality
  • Equal opportunity

  Tackling economic inequality

  Zaizi is committed to tackling Economic Inequality through our core purpose to realise the potential of our staff, customers, and fellow citizens:; ; We contribute to the levelling up agenda through our hybrid working policy with hubs in London, Bristol, Manchester, Sheffield, and Newcastle. ; ; We’ve partnered with the Future Frontiers Programme for our staff to mentor school students from deprived areas. ; ; Signatories to the Armed Forces Covenant, we recruit ex-forces colleagues with DV clearance and train them in digital capability. We provide Reservists full pay when they are on training. ; ; Our full-time Organisational Coach, works with our staff to create a mind-set for positive change, enabling all to achieve their goals and thrive at work. ; ; Furthermore, we’ve created a multi-stream approach to recruitment and retention. Board level KPIs measure our impact across multiple facets including reach. This ensures we can resource projects to support the Levelling Up agenda, actively recruiting across the UK.; ; We actively encourage and support those from economically disadvantaged areas and agree KPI’s with our G-Cloud clients for target inclusion rates.; ; We work with our apprenticeship providers Founders & Coders & Makers Academy to source candidates from diverse backgrounds. To date we’ve onboarded 12 apprentices including refugees, return to work mums and career changers such as primary school teachers. ; We recruit nationally in the UK, enabling people to work from anywhere in the UK, enabling remote working as an opportunity to tap into areas traditionally less digitally aware using a variety of techniques to engage in different ways. ; We use projects to help us upskill apprenticeships, graduates and people looking to change careers. For example, one client contract has enabled us to on-board and train over 15 apprentices, graduates and junior staff.

  Equal opportunity

  An ethnic minority owned business, our purpose is to realise the potential of our staff, customers, and fellow citizens through equal opportunity. Through the provision of our G-cloud services continually expand our commitment. Example measures include:; ; 37% of our workforce are women (industry average is 26%). Target 50% by 2027.; 48.5% of the workforce identify as non-White (industry average is 15.2%). ; ; Board level KPIs measure our impact across multiple facets, such as gender, age, ethnicity, religion, gender / sexual orientation, maternity / paternity, and reach. ; ; We actively encourage and support Women, BAME and those from economically disadvantaged groups, agreeing targets with G-cloud clients.; ; All our job adverts carry the following description: “Studies show that women and Black, Asian and minority ethnic people are less likely to apply for a job unless they meet every qualification. So, if you’re excited about this role but your experience doesn’t align perfectly with the job description, we’d love you to still apply. You might just be the perfect person for this role, or another role here at Zaizi.” We ensure we post all jobs on women only job boards as well as other forums.; We work with our apprenticeship providers to source candidates from diverse backgrounds, including refugees, return to work mums and career changers such as primary school teachers. ; We offer flexible and part-time work to enable working mums to pursue a career with us and publish pay bands for all vacancies that we advertise for transparency, ensuring we do not disproportionately negatively impact those from under-represented groups in our industry. ; We are disability confident committed and aim to become a disability confident employer, making necessary adjustments for people with physical and mental disabilities. ; We have women in our board, management and senior roles providing role models for others and attracting more women.

Pricing

• Price: £450 to £1,600 a unit a day
• Discount for educational organisations: No

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@zaizi.com. Tell them what format you need. It will help if you say what assistive technology you use.