DIGITAL MARKETPLACE (G-CLOUD 7) OFFERING

Transcription

1 DIGITAL MARKETPLACE (G-CLOUD 7) OFFERING Sopra Steria Platform on Command Sopra Steria in the public sector Organisations across the public sector choose Sopra Steria to deliver transformation programmes that blend strategic, technical and commercial innovation, to solve their most complex and critical business challenges. Partnering to improve outcomes in a demanding world Delivering expertise and simplicity in a complex world Blending agility and dependability in a fast-changing world Collaborating with stakeholders in a networked world G-Cloud Contact Details Please soprasteria-gcloud@soprasteria.com For further details Introduction Platform on Command is a Sopra Steria cloud service that provides a flexible, scalable and cost efficient monitored and managed platform on which you can deploy bespoke and COTS applications. Disaster tolerant and with flexible connectivity options including DDoS protected internet access, PSN, N3 and dedicated circuits, the service can be used for both business critical and Citizen centric services. Sopra Steria, in partnership with Skyscape Cloud Services (Skyscape), can provide a range of Service Levels up to 99.5%availability allowing Customers the ability to match their application / user needs to an appropriate level and cost. A PaaS offering providing a cost effective, available, flexible, reliable cloud service to host your own applications. Securely monitored and managed by Sopra Steria and providing Windows, RHEL and Open Source Linux O/S, four service level options and configurable storage and back-up, this service can be tailored to meet business needs. Platform on Command provides access to on demand infrastructure services, on a per virtual machine basis and over the Internet from wherever customers need access. Platform on Command provides a range of configurations to provide maximum flexibility to meet your needs. These range from Micro, Tiny, small and medium level VM configurations through to high end high memory large VM configurations. These are available for data classified as OFFICIAL. Sopra Steria will use this flexibility together with configuration options for connectivity, disaster recovery and storage, to design and implement the right environment to meet specific customer needs whether it is for an isolated piece of testing or a large scale business critical production system. Platform on Command, operates as a commodity service that can be tailored to service needs. The service has multiple layers of operational and physical security to ensure the integrity and safety of customer data. Customers can buy Platform on Command to host their own applications or can take advantage of the other available Sopra Steria Cloud offerings. Equally, customers can use the VMs in their basic form (see our Lot 1 service Infrastructure on Command) and can install the operating system and application stack of their choice or can ask Sopra Steria to perform some or all of those activities for them through this Platform on Command service. In addition to the provision of a ly purchased platform on command Sopra Steria also offers a managed Dev and Test environments service that is d by the hour.

2 This service can be extended using Sopra Steria s Lot 4 Specialist Cloud Services to provide Dev and Test environments for leading applications from providers such as Pegasystems and Alfresco, and provides flexible provisioning of environments to meet the iterative requirement of Agile development projects in the digital age. Benefits of Platform on Command The benefits of Platform on Command are summarised below: Benefit Managed Flexibility Responsive Value for Money Low Risk Reliable Security Disaster Tolerant Green Agile Extendable Justification Customers can flex the number of Virtual Machines up or down as their needs change and leave Sopra Steria to manage the environment. Pricing is based on the number of VMs deployed - customers only pay for what they actually use Rapid provisioning gives responsiveness to customer needs as they arise no longer do users have to wait weeks for a new server environment No capital expenditure is required as the platform is provided on a pay as you go cloud basis. Customers know the price impact for increasing or decreasing the number of virtual machines. Virtual Machines are managed, patched and monitored to the base Operating System level Tried and trusted infrastructure components from an experienced services provider Industry standard virtualisation components are used to ensure that Platform on Command is always available when needed CESG Pan Government Accreditation of the underpinning infrastructure achieved at both IL2 and IL3 for data classified as OFFICIAL and OFFICIAL-SENSITIVE. Aligned with international standards including ISO27001 and CSA STAR Underpinning platform hosted in two tier 3 secure data centres separated by more than 100km and securely connected by high bandwidth, low latency dedicated connectivity enabling synchronous replication The IOC service is based in Sovereign data centres which offer market leading efficiency around power and cooling Flexible Dev and Test provisioning to meet Agile development requirements Support add-ons for applications, for example Pegasystems and Alfresco, available as Sopra Steria Lot 4 services. Service Definition Platform on Command is a simple to use service that provides flexible configurations which can be assembled to meet the various different scenarios that a customer may require. Sopra Steria is providing a service with the following configuration options: Predefined VMs in Test & Dev and Production for data classified as OFFICIAL 2GHz vcpu RAM (GB) Micro 1 (500MHz) 0.5GB Micro comes with a fixed 10GB allocation which cannot be expanded Tiny 1 vcpu 2GB All Service Levels = 60GB Small 2 vcpu 4GB All Service Levels = 60GB 4 vcpu 8GB All Service Levels = 60GB 4 vcpu 16GB All Service Levels = 60GB High 8 vcpu 16GB All Service Levels = 60GB High Small Tier One Tier One Tier One All VMs (except Micro) come with 60GB of storage by default included in the price, additional storage can simply be added as required and is bought on a per GB per basis. Technical Features Platform on Command provides customers with VMs monitored and managed to the base O/S layer. The key features of Platform on Command include: Service monitored and managed to the O/S 99.5% availability 8 vcpu 32GB All Service Levels = 60GB 8 vcpu 48GB All Service Levels = 60GB 8 vcpu 64GB All Service Levels = 60GB 8 vcpu 96GB All Service Levels = 60GB Service Hours 8am to 6pm Monday to Friday excluding Public Holidays with options to extend to a 24 x 7 service for Severity 1 incidents Service Desk during Service Hours to take calls from your 1st Line Desk Standard ly service reports Access to VMs over the internet (and through an additional VPN if required) The ability to combine multiple instances of the standard configurations to build the infrastructure that is needed The ability to add more VMs at short notice

3 Service Options There are four Service Options to choose from: TEST & DEVELOPMENT is hosted in one UK DC. Typically used for short term testing and development projects or less critical workloads such as temporary applications. Backup can be added at the rates shown in Pricing. BASIC compute is hosted in one UK DC with no backup included by default. Typically used for true cloud applications which are designed for failure, short term Pilots & Proof of Concepts or when disposable compute resources are required. If DR/site resilience is required, customers can deploy independent systems in each data centre. Backup can be added at the rates shown in Pricing. STANDARD compute is hosted in one UK DC and includes a local backup for 14 days within the price of both the VM and additional storage. In addition, backups can be stored for 28 days at an additional. Typically used for Enterprise / Production environments requiring the additional protection of automated backup included. This solution can be engineered to help a Customer design a solution that is highly resilient. ENHANCED compute offers Customers a turnkey solution that contains a highly resilient environment by continually replicating the live VMs over to the second Data Centre in real time, offering near zero RPO and RTO s to help Customers with their Disaster Avoidance plans. The service includes a local and remote backup for 14 days within the price of both the VM and additional storage. In addition, backups can be stored for 28 days at an additional. This service leverages synchronous replication to ensure data is always available at both data centres Customers should be aware of the additional latency this incurs. Each service provides the following availability: Availability (ly) excluding planned maintenance Test and Dev Basic Standard Enhanced 99.0% 99.0% 99.5% 99.5% Configurations can be purchased on their own or can be combined in multiples of each or any type to provide the infrastructure that each customer needs. Development and Test Environment Management In addition to the provision of a ly purchased production Platform on Command Sopra Steria also offers Dev and Test environments d by the hour for when the environment (VM) is running. When the VM is stopped data retention / storage s are incurred. When the VM is deleted no s are incurred. This is managed service which when a client has been on boarded will enable the rapid provisioning of environments (typically within a day) that will support the rapidly changing requirements in this digital age. With the ability to stand up more or less environments Agile development projects can rapidly react to the changing calls on environment provisioning during the lifecycle of projects. The servers offered are the same specification as our ly service and included provision of: Managing online hours on an individual environment basis Snapshots available on request Production of capacity reports Initial network configuration (One change to configuration included) Initial load balancing (One change included) Upgrading or down grading an environment to a different standard provision Nightly back-ups and Restore from backup are included Provision of installed antivirus software The management of this service is supported during normal working hours (9 to 5) Monday to Friday excluding bank holidays. Additional support and extended support hours can be provided if required, and will be d at our standard rates. Sopra Steria are able to offer enhanced environments for Development and Testing of specific products such as: SharePoint Java Microsoft Mobile applications These will be discussed on an individual basis and will incur additional costs at our standard SFIA rates. Dev and Test costs for both Windows and RHEL services are detailed in Pricing. Note: There is a minimum commitment of online hours for each environment (server) of 50 hours per for a minimum of three s. Service Management The hosted environment is monitored 24x7x365 Incident, problem and change management for the platform to the O/S is included Incidents will be notified to the customers Service Desk via automated A named service manager will be provided

4 Service Reporting Monthly summary service report will be provided to include: Incident reports Availability reports Capacity utilisation Enhanced service reporting can be provided if required by the customer Other important information: Leased line and site to site VPN connectivity for remote access is available Each customer is provided with 3 useable external IP address by default, these are not transferable. Additional IP addresses maybe available on request and processors are uncontended and so performance is certain to be predictable at the BASIC, STANDARD or ENHANCED Service Levels. The TEST & DEVELOPMENT Service Level is subject to resource contention and so performance might be more variable Micro VM s must reside in a dedicated Virtual Data Centre (VDC) separate from other VM sizes. Customers can configure a VPN between the Micro VDC and other VDC s to enable network connectivity if required Each customer can create their own catalogues of software and operating systems, providing gold images for other users to build and replicate from VMs and storage (including backups) are persistent they are not deleted when the VM is stopped Data transfer between VMs within a customer s environment is free whilst within the same data centre. When transferring data between data centres (for example for back up), s will be incurred VMware vsphere is used as the hypervisor for this PaaS service. Software The provided VMs do not include third party applications such as Java or Adobe for example. Sopra Steria can manage, license and install these if required under our Lot 4 consultancy service Anti-virus is not included. Sopra Steria can provide an antivirus solution if required or you can utilise your existing solution and licencing arrangements In line with Microsoft Terms and Conditions, licenses for Microsoft Windows operating systems must be provided by Skyscape. Other Microsoft licenses (e.g. applications such as Exchange, SQL, etc) on existing agreements have the potential to be used under Microsoft s License Mobility. G-SPLA or Charity & Academic Licenses can be provided. Sopra Steria reserve the right to change SPLA pricing in line with Microsoft. Backup / Recovery; Disaster Recovery and High Availability Standard, localised component failures are tolerated within the infrastructure by eliminating all single points of failure (including physical server failure or disk failure). High availability and fault tolerance at the Virtual Machine level (e.g. load balancing across multiple virtual machines). In this way, service will be automatically restored in most situations. Backup Availability Default Retention Period 28 day Retention Period Replicated Backup Backup Location Backup Frequency Recovery Test & Development Automated VM Backups include the whole Virtual Machine (crash consistent snapshot) and so partial backups are not supported Automated VM Backups do not include the Virtual Data Centre configuration (e.g. firewall rules, load balancing configuration, etc) Sopra Steria do not guarantee how quickly a restore can complete as this is based on the amount of data backed up. A restore of a VM from backup will incur additional () s based on the resources consumed i.e. it will be treated as another VM Additionally, Sopra Steria can provide a Cloud platform on which customers can keep secondary copies of data. This can be achieved via manual data copy, scripted data copy or the use of supported backup applications such as Commvault, Tessella, Riverbed, EMC ViPR and others. Such data can be replicated between data centres for even higher data protection. Disaster Recovery For customers who choose: Basic Standard Enhanced Optional Cost Not Inclusive Inclusive 14 days - 14 days 14 days Optional Cost - Included Included No - No Yes Remote DC - Remote DC Local and Remote DC Once every - Once every Once every 24 hours 24 hours 24 hours Via Service - Via Service Via Service Request Request Request ENHANCED Service Level will replicate the VMs and associated data to a second UK locale which provides a robust solution for more substantial failure of the primary environment (e.g. site failure) TEST & DEVELOPMENT, BASIC and STANDARD service levels: Customers can elect to have independent VM s in each site and implement application level replication utilising Skyscape s secure and scalable inter-datacentre circuits (at additional cost). In the event of a site failure, Sopra Steria can assist the Customer to failover their environment to the second data centre.

5 Customers can choose to have backups stored at the remote site. In the event of a major failure affecting the primary data centre, Sopra Steria will work with Skyscape to endeavour to re-provision our Customers environment within the second data centre. Customers should note that this is subject to available capacity within the second data centre. If customers require certainty that capacity will be available in the event of DR, it is recommended that VM s are procured at the second data centre. Data Services. Licensing Licensing of the Hypervisor is included within the service In line with Microsoft Terms and Conditions, licenses for Microsoft Windows operating systems must be provided by Skyscape. Other Microsoft licenses (e.g. applications such as Exchange, SQL, etc) on existing agreements have the potential to be used under Microsoft s License Mobility Windows G-SPLA or Charity & Academic Licenses can be provided Sopra Steria reserve the right to change SPLA pricing in line with Microsoft Licenses/Subscriptions for Red Hat Enterprise Linux Operating Systems can be provided by Skyscape or we can use your existing licence arrangements Licensing for all other software is the responsibility of the Customer Billing If reconfiguring or resizing a VM outside the pre-defined templates, pricing is based the next closest sized machine in an upwardly fashion Production environments - Minimum usage will be two s with a minimum one notice to terminate the service Development and Test environments Minimum usage will be 50 hours per per environment (VM) for a minimum of three s with a minimum one notice to terminate the service Monitoring The availability of the compute platform and each VM will be monitored to ensure the Service Level Agreements are met Standard availability monitoring to the base O/S will be provided Enhanced monitoring and management services to provide metrics on Application availability and Business processes can be added as an additional service if required set of core functional components. These are summarised below: Flexible Infrastructure Services An infrastructure service that meets customers current and future needs Current economic conditions require customers to provision new services within their organisations and government departments with the minimal financial expenditure. In addition, services must allow for flexible growth, again without significant capital expenditure. Platform on Command allows customers to use as little as one VM and to only be d for what they use. Customers can flex on demand with minimal forecast planning. This flexibility is also reflected in utility based ly charging model. Provisioning Service Customer driven provisioning The Sopra Steria Platform on Command offers the customer the opportunity to specify the configuration options for the standard service and whether they require Additional Service Options or enhanced Service Management including: VM sizes (Micro, Tiny, Small, and ) Production or Test and Development Number of Virtual Machines (VMs) of each size Options Backup Options Operating System Options Network / Connectivity Options Image Management Options Application monitoring and management options Provisioning Method Reporting Options VPN Options Duration Off-boarding options By selecting from a menu of configuration options, the service can be defined rapidly. The time traditionally taken to discuss and agree service requirements, which delays access to the services, can be avoided. Sopra Steria recognise that not all customers requirements will be met by selecting options through an automated provisioning service. If a customer requires a tailored configuration, Sopra Steria will design one to meet the customer s precise needs. Functional Description Platform on Command has been developed following discussions with key stakeholders across Government, Industry and Partner organisations to provide a cloud service based on a

6 Secure Infrastructure Information Assurance The Platform on Command is suitable for IL0 data. Sopra Steria can also provide the Platform on Command as a bespoke Private Cloud. Service isolation of customer services Sopra Steria can provide secure isolation within the VMs provided. This is provided utilising networking (Firewalling) and virtualisation technology best practice. Access to the service can be provided by a dedicated customer VPN connection. This can be specified as a configuration option as part of the Provisioning Service described above. The VPN option enhances security by making sure that all traffic is encrypted between the customer and the Platform on Command environment. Physical Location UK delivered services to provide peace of mind. Sopra Steria know that Government departments must minimise their security exposure when consuming cloud services and this is one of the primary drivers for the Sopra Steria Platform on Command service to be delivered from within the UK through our partnership with Skyscape. Platform on Command uses the most modern data centre technologies with advanced power and cooling to help Government to realise the stringent sustainability targets that have been laid out in the Greening IT strategy. Tiered Delivery Model Operational flexibility for enhanced service delivery Information Assurance Security Components This Platform on Command is provided to hold data classified as OFFICIAL. The standard service comes with the following security components within the standard : Firewall management for secure multi-tenancy delivery Virtual switch deployment for secure isolation of virtual traffic Penetration and Vulnerability Protection The systems supporting Platform on Command are protected by firewalls. CESG Listed Advisor Scheme (CLAS) Accreditation Sopra Steria recognises the importance of security and has a well-established team of delivery CLAS consultants. Through all phases of design and implementation the CLAS consultants advise and check to make sure the solutions that Sopra Steria deliver are capable of meeting CESG accreditation Sopra Steria CLAS consultants can provide support and advice to our customers and can be engaged through the Specialist Lot 4 Cloud Services on the G-Cloud catalogue. Employee Clearance Levels All Sopra Steria employees are suitably cleared in accordance with CESG guidelines for the relevant Information Classification. Additional Service Options The configurations within the core Platform on Command service have been designed as the fundamental building blocks to allow customers to define the infrastructure platform that they need. However, we recognise that customers may have specific needs beyond the core building blocks and so we have a number of additional service options to meet these needs. Sopra Steria has a range of service capabilities that allow additional options to be incorporated that enhance the core offering, as shown below: Predefined VMs Micro, Tiny, Small,,, High memory Service Options Test & Dev, Basic, Standard, Enhanced Platform Availability from 99.95% Service Availability to 99.5% Backups 14 day and 28 day retention Managed Backups to provide longer retention if required Monitoring to the OS, Application and Database level Creation of OS Gold Images as templates to replicate Reconfiguration of VMs as required Installation of the Application Layer Partner Management, Service Management and Reporting Governance A description of the most popular options is given below, please contact us if you wish to discuss adding these or other additional service options to your Platform on Command services. Operating Systems Installation The following Operating Systems can be installed and supported as our standard offering: Microsoft Server Operating Systems: Windows Server 2003, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012 Red Hat Linux Sopra Steria can also offer other operating system installations, including open source, if required. The following items are additional services that the consumer can include in their service should they wish: Data Migration Support with secure data migration to and from Platform on Command using government approved products and methods.

7 Connectivity Consumers will require appropriate network connectivity such as internet access or accredited connectivity to the Skyscape Cloud Platforms. Connectivity via the internet, a government secure network for example PSN-A (assured) and PSN-P (Protected), N3 or private leased line is available but may incur additional s. Where required, consumers are responsible for procuring and managing appropriate devices or software to meet the requirement for data security over the various forms of connectivity. Skyscape s cloud is resiliently connected to a variety of government, public and private networks, including: DDoS-protected internet connections PSN-A (Assured) and PSN-P (Protected); customers can access legacy GCF networks such as PNN and CJX utilising the PSN-P connection N3 Skyscape is one of a small number of N3 aggregators allowed to carry out compliance auditing on behalf of HSCIC, removing reliance on third parties to get onto the N3 HybridConnect allows customers to install their own dedicated leased lines into the platform Security Services To further enhance the security of the standard service offering, Sopra Steria can apply additional security services including the following: Penetration and Vulnerability Protection The core Platform on Command includes a defined level of security protection. If additional security is required, Sopra Steria can provide the following penetration and vulnerability services: Border firewall management Internal firewall management Intrusion prevention software can be installed if required Load Balancing Load balancing between VMs can be provided if required. Service Management Sopra Steria s approach to Service Management is based on 40 years proven experience of delivery for both Public and Private sector clients, each of which has their own unique strategic business drivers and operational service needs. Sopra Steria has developed a Service Management model for Platform on Command that is based on our experience in successfully delivering similar services to the public and private sector for many years. The Sopra Steria support services provided to customers as part of the standard Platform on Command include the following: A single point of contact for all incidents through the Sopra Steria Service Desk Service Desk from 08:00hrs to 18:00hrs (UK time) Monday to Friday, excluding Bank Holidays. Extended support hours are also available as an additional service management option 24/7/365 monitoring to the base O/S ITIL v3 Service Management Service governance to ensure that the overall service is meeting all service requirements and provides basic Service Reporting Contract assurance to ensure that delivery and financial management are aligned to contractual terms Delivery of incident management service to standard SLAs Service Monitoring As part of the standard Platform on Command, customers will be provided with a reactive availability monitoring service. Sopra Steria will fix any infrastructure and base O/S related availability issues that are raised by the customer within the supported hours. Service Levels Sopra Steria offers an Availability SLA and Response Time SLA for Platform on Command as per the following table. Availability (ly*) Incident response Incident update Communication Incident review Test/Dev Basic Standard Enhanced 99.0% 99.0% 99.5% 99.5% Auto response with access to online portal FAQs via online portal P1 within 30 minutes P2 within 4 hours P3 within 24 hours P4 within 72 hours P1 P2 every 2 hours P3 every 24 hours P4 every 24 hours Bespoke Auto response with access to online portal FAQs via online portal Incident Report * Availability indication based on an average 730 hrs per. - excludes Emergency Maintenance. Unavailability applies to existing VMs where the VM becomes unresponsive due to a fault recognised at the hypervisor layer or lower, for example: Fault is not caused by the consumer (Applications, user networks) Fault is within Sopra Steria controlled components such as the virtual infrastructure, storage, power and physical firewalls and routers etc P1/P2 Phone P3/P4 Bespoke Service Manager / support advisor Incident Report

8 External connectivity providers (e.g. internet, PSN), and components co-located at Skyscape are also not included in the availability calculation Sopra Steria will monitor the platform 24 x 7. Any incidents affecting availability to the base O/S will be handled 24 x 7 by Sopra Steria s Remote Operations Centre. Service Reporting Customers are provided with a standard set of service reports with the option to add, at additional cost, enhanced reporting should it be required. The standard ly service report includes reporting on the following: Incident reports Availability reports Capacity utilisation reports Extended Support Services The Platform on Command service comes with standard service management as outlined above. However, we recognise that some customers may wish to have enhanced service management in certain areas including Enhanced Service Desk and/or SLAs Proactive Management Additional service reporting Maintenance Windows "Planned Maintenance means any pre-planned maintenance of any infrastructure relating to the Platform on Command Services. While Planned Maintenance should have no impact on the availability of the virtual machines running the Platform on Command Service, Planned Maintenance activity may result in short periods of degraded service (for example, temporary performance degradation). In such cases, Sopra Steria shall provide the Client with at least twenty four (24) hours advance notice of any such planned maintenance. O/S Patching activity shall happen between the hours of 18:00 and 06:00 (UK local time) Monday to Sunday and/or between the hours of 08:00 and 12:00 (UK local time) on a Saturday and/or Sunday. Planned Maintenance shall be excluded from any availability calculation but shall be included in the ly service reporting. Emergency Maintenance means any emergency maintenance of any of the infrastructure relating to the Services. Whenever possible, Sopra Steria shall provide the Client with at least six (6) hours advance notice: Whenever possible Emergency Maintenance of the Platform on Command platform will happen between the hours of 18:00 and 06:00 (UK local time) Monday to Sunday and/or between the hours of 08:00 and 12:00 (UK local time)on Saturday and/or Sunday unless there is an identified and demonstrable immediate risk to a Clients environment Emergency maintenance may result in periods of degradation or loss of availability depending on the nature of the activity required: Emergency Maintenance shall be excluded from any availability calculation but shall be included in the ly service reporting Support Hours Sopra Steria will provide a service desk and contact details to respond to issues raised by the Customer. Faults with the Production Service can be reported during the standard Support Hours of 08:00 to 18:00 Monday to Friday excluding Public Holidays Faults with the Dev and Test service can be reported during the standard Dev and Test Support Hours of 09:00 to 17:00 Monday to Friday excluding Public Holidays Enhanced Service Desk and/or SLAs Sopra Steria can offer additional support services from our ITIL v3 Service Desk. This can include extended service hours, enhanced SLAs and a range of other support options to augment the service management provided as standard for Platform on Command. Pro-active Management, Monitoring and Compliance The standard Platform on Command includes: Platform and O/S availability monitoring and management. SLAs are integrated to the Service Desk tool, enabling incidents to be closely managed and early warning of an SLA nearing breach Incident, Major Incident and Problem Management to base O/S Patch and Anti-Virus Management services for the VMs In addition, the following reporting options are also available: KPI Metric Management Details to the customer the following highlight management information Usage reports Service Level Reports Over-provision reports Monthly s Security Event and Incident Event reports Additional Platform on Command options include: Monitoring and management of the application layer, including database administration Application development, enhancement and testing Availability monitoring at the application service layer Asset Management services Access Management services Partners Sopra Steria have partnered with Skyscape Cloud Services (Skyscape) to provide the compute layer to our Platform on Command offering.

9 Consumer Responsibilities The control and management of access and responsibilities for end users including appropriate connectivity, security and accreditation if required. Where access is required over Government Secure Networks such as N3 or PSN, the consumer is responsible for adhering to the Code of Connection and assigning appropriate IP addresses from their own allocation to their services hosted on the Skyscape platform. The customer is also responsible for ensuring only appropriate data (OFFICIAL) is stored and processed by applications on this environment and that they comply with the Skyscape Security Operating Procedures (SyOps) and other information assurance requirements as specified in Skyscape System Interconnect and Security Policy (SISP) and associated accreditation documentation sets. Details of Customer responsibilities can be found in the Service Specific terms document. On-Boarding / Off-Boarding Processes On-Boarding Processes Sopra Steria operate a standard, repeatable on-boarding process for our Cloud offerings to minimise the time taken from a customer forming a requirement to being able to use the service. The Sopra Steria on-boarding process will commence upon receipt of a valid order from the customer. For most Platform on Command offerings, this will simply be an order form requesting one or more of the standard VMs (Micro, Tiny, Small, or VM configurations, as part of the order, the customer will complete a questionnaire specifying their configuration options as outlined above. Once received, Sopra Steria will confirm that there are no issues with the order and assuming there are none, will commence Build and Deployment as outlined below. If none of the standard configuration options are suitable, a customer will require a tailored configuration. On receipt of an enquiry, one of the Sopra Steria Platform on Command team will contact the customer to discuss their specific needs. Sopra Steria will document what the customer needs and propose a configuration to deliver this. Once this is agreed, a price will be provided to allow the customer to raise a formal order. Once received, Sopra Steria will commence Deployment as outlined below. Provisioning The simple process for provisioning Platform on Command can be summarised as below: Ordering and processing phase Deployment phase Activity New Customer Existing Customer Ordering and processing Deployment On receipt of a valid order, Sopra Steria will advise of the lead times that can be expected for the order. The lead times above are indicative and may vary for a number of factors including the completeness of the order questionnaire and the complexity of configuration requested. Off-Boarding Process Off-boarding from Platform on Command is equally straightforward. On expiry of the agreement or notice of a customer stopping using the service, the service will be withdrawn. Depending on the off-boarding options selected, some or all of the following off-boarding services may apply: Activity Exit Checklist Data Decommission Service Process Data Deletion Billing Finalisation If the customer anticipates re-use of any of the services that they have used on Platform on Command, a number of Off- Boarding scenarios can be requested as additional service options including: Mothballing persistent data 2 days 1 day Will depend on size and complexity typically between 3 and 10 days for up to 20 servers of standard configuration and low complexity. Description The activities on the exit checklist will be completed. This checklist options will be confirmed during on-boarding which will ensure that the exit process is not ambiguous. Unless requested otherwise as an additional service, the customer is responsible for securely removing any data. When the customer terminates their agreement with Sopra Steria, we will ensure all of the customer s data is deleted. Once the customer has off-boarded from the service, Sopra Steria will raise the final billing to cover any outstanding ly, exit and consumption s. Mothballing VMs Snapshot, CMDB status The typical lead times for new and existing customers, taking a standard service, can be seen in the table below.

10 Training As part of the on-boarding process Sopra Steria will provide information covering How to request new services, get reporting and find out about billing How to access install applications etc. for users who will manage their applications themselves If a customer requires additional training for their users, this can be provided through Sopra Steria s Specialist Cloud Services as outlined below. Service Migration If required, Sopra Steria can provide enhanced Service Migration Services for more complex On-boarding and Offboarding scenarios including where there are specific requirements arising from the transfer to or from another supplier. Specialist Cloud Services Sopra Steria offers a range of Specialist Cloud Services to support Cloud implementations. These can be used either alongside this service or for other activities and are detailed in Lot 4 of the G-Cloud framework. Our Specialist Cloud Services offerings can be combined to offer a number of services that support Platform on Command including the following examples: Integration Services Services to integrate Platform on Command with other services, including integrating with other cloud offerings and with internal enterprise private cloud solutions to form Hybrid cloud services. Supplier Management and Service Aggregation If required, Sopra Steria can manage your applications and other cloud services for you. This could include the following elements: Provision and management of Drupal, MySQL, WordPress. Apache, PHP and similar open source platforms Selecting, procuring and managing services from other 3rd parties to be used in conjunction with Platform on Command Integration and aggregation services to provide data and application integration between differing cloud environments Technical Delivery by the provision of experienced Sopra Steria technical teams to support the implementation of applications such as the Pega 7 Dynamic Case Management platform arising from the transfer to or from another supplier. Sopra Steria would be pleased to discuss your particular requirements and to provide a solution to meet them. Service Desk Facilities Sopra Steria s Service Desk can provide additional helpdesk services including a full range of ITIL v3 services. Training Services Appropriate training is a critical element of any ICT enabled business change. Sopra Steria Learning Services, our dedicated training organisation has the experience, resources, processes, infrastructure and track record to ensure we successfully deliver all training requirements requested from our clients. This can include providing standard training courses, developing bespoke training courses and management and administration of the training function and processes. Testing Services Sopra Steria offers comprehensive testing management services that can be used to support your Platform on Command services. Security Services Sopra Steria is able to offer a number of security services that can ensure solution conformance to government policies. Sopra Steria Security consultancy services cover Penetration Testing, Information Assurance, CLAS Services, PSN Compliance and ISO27001 Assessment. Project / Programme Management To support customers with complex web projects, Sopra Steria is able to provide Project and Programme Management to help ensure that customer solutions are delivered on time and to budget. If you are interested in finding out more about these or any of Sopra Steria s other Specialist Cloud Services, please contact us at soprasteria-gcloud@soprasteria.com Pricing Production The pricing in the tables below are per (part d as a whole ) A one-off on-boarding fee of 1,575 is d for new customers only The following tables shows Platform on Command prices at each of the production service options Transition Services If required, Sopra Steria can provide enhanced Transition Services for more complex On-boarding and Off-boarding scenarios including where there are specific requirements

11 Platform on Command Windows Service (G-SPLA) Production BASIC STANDARD ENHANCED 2GHz vcpu RAM (GB) Set-up Cost Assured Elevated Set-up Cost Assured Elevated Set-up Cost Assured Elevated Micro 1 1 (500MHz) Tiny Small High , , High , , , , Tier 1 Small , , , , , , Tier , , , , , , Tier , , , , , ,848.82

12 Platform on Command Red Hat Linux Service Production BASIC STANDARD ENHANCED 2GHz vcpu RAM (GB) Set-up Cost Assured Elevated Set-up Cost Assured Elevated Set-up Cost Assured Elevated Micro 1 1 (500MHz) Tiny Small High , , High Tier 1 Small Tier 1 Tier , , , , , , , , , , , , , , , , , , , , , , Micro has a fixed 10GB storage allocation (no additional storage can be added to Micro VM s) and a single 500Mhz vcpu. Cloud VM Billing: Billing is per Whilst a VM is stopped, s will be applied to the persistent storage/backup element If reconfiguring or resizing a VM outside the pre-defined templates, pricing is based the next closest sized machine in an upwardly fashion. The VM s above are incurred when the VM is running. When the VM is stopped the storage s are incurred. When the VM is deleted no s are incurred.

13 Test and Development The pricing in the tables below are per hour (part hour d as a whole hour) There is a minimum commitment of online hours for each environment (VM) of 50 hours per for a minimum of three s A one-off on-boarding fee of 1,575 is d for new customers only The following tables shows Platform on Command prices at each of the Test and Development service options Platform on Command Windows Service (G-SPLA) Test and Dev Per Hour or part of an hour TEST & DEV 2GHz vcpu RAM (GB) Set-up Cost Assured Elevated Micro 1 1 (500MHz) 0.5 Tiny 1 2 Small High High Tier 1 Small Tier 1 Tier

14 Platform on Command Red Hat Linux Service Test and Dev Per Hour or part of an hour TEST & DEV 2GHz vcpu RAM (GB) Set-up Cost Assured Elevated Micro 1 1 (500MHz) 0.5 Tiny 1 2 Small High High Tier 1 Small Tier 1 Tier Micro has a fixed 10GB storage allocation (no additional storage can be added to Micro VM s) and a single 500Mhz vcpu. Cloud VM Billing: Billing is per hour, each partial hour consumed will be billed as a full hour. Whilst a VM is stopped, s will be applied to the persistent storage/backup element The ly for storage/backup will be pro-rated where appropriate If reconfiguring or resizing a VM outside the pre-defined templates, pricing is based the next closest sized machine in an upwardly fashion. The VM s above are incurred when the VM is running. When the VM is stopped the storage s are incurred. When the VM is deleted no s are incurred.

15 and Back-up All Cloud Virtual Machines (Except Micro) come with 60GB storage which cannot be pooled. Select additional storage at the required storage level if you require more. Micro VM s are fixed at 10GB and cannot be expanded further. Dedicated Compute VMs do not come with any storage by default. The required storage allocation can be configured via the Portal & API and will be d at our standard storage prices (i.e. a per GB per basis). TEST & DEV BASIC (above included 60GB**) / 1GB / (above included 60GB): Optimised 14 day backup retention 28 day backup retention (above included 60GB**) / 1GB / (above included 60GB): Optimise d 14 day backup retention 28 day backup retention Micro 1 Not Not Not Not Tiny Small High Not Not High Tier 1 Small Tier 1 Tier

16 STANDARD ENHANCED (above included 60GB**) / 1GB / (above included 60GB): Optimised 14 day backup retention 28 day backup retention (above included 60GB**) / 1GB / (above included 60GB): Optimised 14 day backup retention 28 day backup retention Micro 1 Not Not Not Not Tiny Small High High Tier 1 Small Tier 1 Tier Included Including replication and 14 day replicated backup 0.17 * 500MHz ** Micro VMs are limited to a 10GB storage allocation agnostic Software If licensing Microsoft SQL Server through Sopra Steria /Skyscape, the following licensing s are applicable: Tiny, Small,, High SQL Standard SPLA Type Per Month per VM Academic G-SPLA Note: that SQL Enterprise is bought on a ly basis. Customer must report the quantity they require each., High, Tier One Academic G-SPLA SQL Enterprise Tiny, Small,, High SPLA Type Per Month per VM Academic G-SPLA , High, Tier One Academic G-SPLA

17 Connectivity Options Assured OFFICIAL Option Notes Price Inbound Data Transfer Free 0.00 Internet per GB Outbound Data Transfer 0.04 Unmetered data transfer (per ) Data Transferred Price 3, Starter Pack 1TB 0.00 PSN Assured Connectivity (per GB) Access via Skyscape s resilient, scalable PSN Assured connectivity on a shared bandwidth model. Price is based on the actual volume of data transferred (outbound) per. 1TB to 20TB per GB Above 20TB per GB Unmetered data transfer per , N3 Access Bandwidth, per Encrypted access to the NHS National Network (N3) via Skyscape s resilient, scalable N3 connectivity on a shared bandwidth model Pricing is based on the actual volume of data transferred (outbound) per Starter Pack (250GB) per GB to 1TB TB to 20TB per GB Above 20TB per GB Unmetered data transfer per ,888.89

18 Assured Inter Data centre Connectivity Assured inter data centre connectivity will utilise Skyscape s internet facing inter data centre circuits. Customer can use a site-tosite VPN to suitably encrypt data if required. VM replication bandwidth is included in the price VM s. Price is based on the actual volume of data transferred (bidirectional) per. Per GB 0.04 Assured Inter Data centre Connectivity Alternatively, where there are more complex or performance sensitive cross-dc requirements, Consumers can pay for allocated bandwidth to Skyscape s Assured accredited resilient multigigabit inter data centre connectivity. The bandwidth is set and managed by Skyscape based on usage tiers. Price is based on the actual volume of data transferred (bidirectional) per. Starter Pack (250GB) per 251GB to 1TB per GB 1TB to 20TB per GB Above 20TB per GB HybridConnect Line to be ordered and managed by the Consumer directly with a Skyscape approved Telco. Connection terminated on a Skyscape router. If customers require inter data centre connectivity, they must procure the same speed as their Leased Line, otherwise speed will be capped. Per Data Centre Charge: one off setup per installation No recurring 2, Cloud Enablement To enable customers to access the Skyscape Cloud, customers can colocate encryption or access devices per setup / additional installation per data centre per per data centre 2,

19 Connectivity Options Elevated OFFICIAL PSN (Protected) connectivity Encrypted access to the PSN Protected service (using the IPED) via Skyscape s resilient, scalable PSN Protected connectivity on a shared bandwidth model Pricing is based on the actual volume of data transferred (outbound) per Starter Pack (250GB) per 251GB to 1TB per GB Above 1TB to 20TB per GB Above 20TB per GB Unmetered data transfer , Elevated Inter Data Centre Connectivity Consumers pay for bandwidth to Skyscape s Elevated, accredited & resilient multigigabit inter data centre connectivity. Price is based on the actual volume of data transferred (bidirectional) per. Starter Pack (250GB) per 251GB to 1TB per GB 1TB to 20TB per GB Above 20TB per GB 0.17 HybridConnect Elevated OFFICIAL VPN Solution Line to be ordered and managed by the Consumer directly with a Skyscape approved Telco. Connection terminated on a Skyscape router. If customers require inter data centre connectivity, they must procure the same speed as their Leased Line, otherwise speed will be capped. CAPS approved or appropriate CPA assured solutions to be ordered and managed by the Consumer directly, requiring VPN devices to be hosted within the Skyscape data centre(s). Per Data Centre Charge: one off setup per installation No recurring Per Data Centre Charge: one off setup per install Per Month 2, ,