DIGITAL MARKETPLACE (G CLOUD 7) OFFERING. Sopra Steria Infrastructure on Command. Introduction. Sopra Steria in the public sector

Transcription

1 DIGITAL MARKETPLACE (G CLOUD 7) OFFERING Sopra Steria Infrastructure on Command Sopra Steria in the public sector Organisations across the public sector choose Sopra Steria to deliver transformation programmes that blend strategic, technical and commercial innovation, to solve their most complex and critical business challenges. Partnering to improve outcomes in a demanding world Delivering expertise and simplicity in a complex world Blending agility and dependability in a fast changing world Collaborating with stakeholders in a networked world G Cloud Contact Details Please soprasteria gcloud@soprasteria.com For further details Introduction Infrastructure on Command, an Infrastructure as a Service (IaaS), provides customers with on demand, scalable, flexible and cost efficient compute resources. Disaster tolerant and fully aligned with the CESG 14 Cloud Security Principles, it is the ideal service for all data classified at OFFICIAL (including OFFICIAL SENSITIVE) and legacy IL0 IL4 solutions. Exceptional value, with prices from 1p per hour for Test and Development environments and from 2p per hour for workloads requiring predictable performance, Infrastructure on Command provides customers with a virtual data centre in which to build, configure and manage their virtual machines (VMs). Our Infrastructure on Command service is an IaaS offering which provides a flexible, reliable and resilient Virtual Environment on a pay as you use basis. We offer multiple service levels and VM sizes; 99.99% availability; low cost, consumption based pricing and Assured security (IL2 and IL3 accredited). Sopra Steria, in partnership with Skyscape Cloud Services (Skyscape), provides a range of Service Levels up to 99.99% availability allowing Customers the ability to match their application / user needs to an appropriate level and cost. Infrastructure on Command provides a range of configurations to provide maximum flexibility for both production environments and test and development environments to meet your needs. These range from Micro, Tiny, Small and Medium, level VM configurations through to end high memory large VM configurations. This flexibility together with configuration options for connectivity, disaster recovery and storage, enables customers to implement the right environment to meet specific customer needs whether it is for an isolated piece of testing or a large scale business critical production system. Infrastructure on Command, operates as a commodity service that can be tailored to service needs. The service has multiple layers of operational and physical security to ensure the integrity and safety of customer data. The architecture allows the customer to manage their VMs as required including the installation of operating systems and applications and the transfer of data onto and from the platform. Customers can buy Infrastructure on Command to host their own applications or can take advantage of the other available Sopra Steria Cloud offerings. Equally, customers can use the VMs in their basic form and can install the operating system and application stack of their choice or can ask Sopra Steria to perform some or all of those activities for them using our G Cloud Lot 2 service Platform on Command.

2 Benefits of Infrastructure on Command The benefits of Infrastructure on Command are summarised below: Benefit Managed Flexibility Responsive Value for Money Low Risk Reliable Security Disaster Tolerant Green Industry standard Justification Customers can flex the number of Virtual Machines up or down as their needs change, as well as add, remove or change your solution via the Portal or our fully documented API. Pricing is based on the number of VMs deployed customers only pay for what they actually use Immediately available zero delay to your project. Rapid provisioning gives responsiveness to customer needs as they arise no longer do users have to wait weeks for a new server environment No capital expenditure is required as the platform is provided on an hourly pay as you use cloud basis enabling significant cost savings if VMs are turned off when not needed and restarted when they are. Tried and trusted infrastructure components from an experienced services provider Industry standard virtualisation components are used to ensure that Infrastructure on Command is always available when needed Optimised for OFFICIAL extensive independent validation (including CESG PGA), it fully aligns with the CESG 14 Cloud Security Principles, making it the ideal service for all data classified at OFFICIAL (including OFFICIAL SENSITIVE) and legacy IL0 IL4 solutions Hosted in two tier 3 secure data centres separated by more than 100km and securely connected by high bandwidth, low latency dedicated connectivity enabling synchronous replication The IOC service is based in UK Sovereign data centres which offer market leading efficiency around power and cooling. The platform is built using industry standard cloud technologies powered by VMware, giving you confidence in the stability and supportability of your cloud solutions. Predefined VMs in Test & Dev and Production for data classified as OFFICIAL and OFFICIAL SENSITIVE 2GHz vcpu RAM (GB) Micro 1 (500MHz) 0.5GB Micro comes with a fixed 10GB allocation which cannot be expanded Tiny 1 vcpu 2GB All Service Levels = 60GB Small 2 vcpu 4GB All Service Levels = 60GB Medium 4 vcpu 8GB All Service Levels = 60GB Medium All VMs (except Micro) come with 60GB of storage by default included in the price, additional storage can simply be added as required and is bought on a per GB per basis. Technical Features Infrastructure on Command offers consumers full management of their environment through a secure web portal or an API which will enable organisations to: Stop, start, clone and delete VMs 4 vcpu 16GB All Service Levels = 60GB Large 8 vcpu 16GB All Service Levels = 60GB Large Small Tier One Medium Tier One Large Tier One 8 vcpu 32GB All Service Levels = 60GB 8 vcpu 48GB All Service Levels = 60GB 8 vcpu 64GB All Service Levels = 60GB 8 vcpu 96GB All Service Levels = 60GB Manage firewall security rules and load balancer policies Service Definition Infrastructure on Command is a simple to use service that provides flexible configurations which can be assembled to meet the various different scenarios that a consumer may require. Sopra Steria provides a service that can meet both production and test / development requirements, with the following VM configurations:

3 Reconfigure virtual hardware on the fly changing memory, processors, network and storage as and when needed Set and control access, user profiles and capabilities Upload own VM images, applications and data, or alternatively select from the catalogue of template based standard OS configurations Control the environment via an easy to use self service portal or programmatically through a documented API Connect via a variety of networks; PSN, internet, N3, legacy networks and HybridConnect options The platform uses VMware vsphere as the hypervisor for this IaaS service. This gives consumers the widest choice of supported operating systems within their VM s including a large selection of open source platforms A Virtual Firewall is provided as part of the service. The performance characteristics are outlined in the Technical Requirements section. If consumers require more advanced or specific features, they are recommended to deploy (and license) their own appliance Service Options Consumers are advised to consider their requirements and how to design cloud ready solutions Sopra Steria can provide assistance and architectural support as required. Typical Use cases Availability (ly) excluding planned maintenance Compute Environment Location Disaster Recovery between DCs Test & Dev / Essential Basic Standard Enhanced Short term testing and development projects Lower priority workloads, such as temporary applications, data processing or system modelling tasks Digital or true cloud applications designed for failure Short term pilots and PoCs When disposable compute resources are required Enterprise and production environments requiring the additional protection of automated backup % 99.99% 99.99% 99.99% Single UK DC Single UK DC Single UK DC Dual UK DC No No No Yes Solutions requiring a highly resilient environment with continuous replication of live VMs to a second data centre in real time. Enabling near zero RPO ability to help customers with their disaster avoidance plans. Performance of VM Contended Uncontended Uncontended Uncontended Automated VM Backup Optional Not available please purchase Standard Included remote included (GB) [1] Included local and remote Options Standard Standard Standard Standard Protective Monitoring DDoS Protection Optimised Optimised Optimised Included for the Assured and Elevated OFFICIAL Domains at the hypervisor layer and below. Specialist DDoS mitigation service included for services accessed over the internet [1] Standard storage [2] Micro VMs are limited to a 10GB storage allocation

4 Software The VM templates offer the customer a default configuration operating system, allowing them to configure it how they require. VM templates do not have third party applications such as Java or Adobe for example. It remains the customers responsibility to manage, license and install these. Key Operating systems licences (Microsoft Windows and Red Hat Linux) can be provided and are billed per hour. Anti virus is not included. Sopra Steria recommend customers deploy an appropriate Antivirus solution as part of their Assurance Plan Infrastructure on Command services can be deployed utilising a mix of the following: Standard Optimised Cloud Overview Scalable storage utilised by the Compute services Provides an enhanced performance profile. Availability Included as standard Available on request and subject to availability Use Cases Systems with human interactions Solid state systems with predictable work patterns Data warehouses fast transaction databases randomly executing workloads Provides Object based storage Optional Consolidation of multiple data sets Multimedia storage Archiving and backup Backup / Recovery, Disaster Recovery and Availability As standard, localised component failures are tolerated within the infrastructure by eliminating all single points of failure (including physical server failure or disk failure). Customers are advised to consider building in high availability and fault tolerance at the Virtual Machine level (e.g. load balancing across multiple virtual machines). In this way, service will be automatically restored in most situations. TEST & DEVELOPMENT BASIC STANDARD ENHANCED Backup Availability Optional Cost Optional Cost Inclusive Inclusive Default Retention Period 14 days 14 days 14 days 14 days 28 day Retention Period Optional Cost Optional Cost Optional Cost Optional Cost Replicated Backup No No No Yes Backup Location Remote DC Remote DC Remote DC Local and Remote DC Backup Frequency Once every 24 hours Once every 24 hours Once every 24 hours Once every 24 hours Recovery Via Service Request Via Service Request Via Service Request Via Service Request

5 Automated VM Backups include the whole Virtual Machine (crash consistent snapshot) and so partial backups are not supported. Automated VM Backups do not include the Virtual Data Centre configuration (e.g. firewall rules, load balancing configuration, etc). Automated VM Backups of virtual machines utilising the Shared Disk option are not available consumers using this option must backup their systems themselves. Sopra Steria does not guarantee how quickly a restore can occur as this is based on the amount of data. A restore of a VM from backup will incur additional (hourly) charges based on the resources consumed i.e. it will be treated as another VM. Disaster Recovery For consumers choosing the ENHANCED Service Level: The service will automatically replicate the VMs and associated data to a second UK locale which provides a robust solution for more substantial failure of the primary environment (e.g. site failure). This option is best for consumers looking to mitigate the risk of infrastructure failure such as; data centre failure (power/cooling), significant hardware failure, and similar. At the T&D, BASIC and STANDARD service levels: Customers looking to mitigate a wider variety of failures (e.g. application failure, data corruption, etc) or desiring more control and visibility relating to replication, failover, failback and DR testing can design their own DR solution. Consumers can choose to deploy independent VM s in each site and implement application level replication utilising the secure and scalable inter datacentre circuits (at additional cost). In the event of a site failure, the consumer is in control of the failover their environment to the second data centre. Alternatively, consumers can choose to have backups stored at the remote site. In the event of a major failure affecting the primary data centre, Skyscape will endeavour to allow consumers to re provision their environment within the second data centre. Consumers should note that this is subject to available capacity within the second data centre. If consumers require certainty that capacity will be available in the event of DR, it is recommended that VM s are procured at the second data centre. Remote backups are included within the STANDARD service level. For T&D and BASIC service levels, consumers can achieve a similar outcome by backing up to Cloud. Licensing Licensing of the Hypervisor is included within the service In line with Microsoft Terms & Conditions, licenses for Microsoft Windows operating systems must be provided by Skyscape. Other Microsoft licenses (e.g. applications such as Exchange, SQL, etc) on existing agreements have the potential to be used under Microsoft s License Mobility. G SPLA or Charity & Academic Licenses can be provided. Sopra Steria reserves the right to change SPLA pricing in line with Microsoft. Licenses/Subscriptions for Red Hat Enterprise Linux Operating Systems can be provided by Skyscape or by the customer. Licensing for all other software is the responsibility of the Customer. Billing If reconfiguring or resizing a VM outside the pre defined templates, pricing is based the next closest sized machine in an upwardly fashion. Billing for the service is ly in arrears. Monitoring The availability of the Infrastructure on Command platform and each VM will be monitored to ensure the Service Level Agreements are met. The operating system and applications inside of the VMs will not be monitored, this can be implemented by the customer. For VM performance, this requires VM tools to be installed on the operating system. Customer Functional Description Infrastructure on Command has been developed following discussions with key stakeholders across Government, Industry and Partner organisations to provide a cloud service based on a set of core functional components. These are summarised below: Flexible Infrastructure Services An infrastructure service that meets customers current and future needs Current economic conditions require customers to provision new services within their organisations and government departments with the minimal financial expenditure. In addition, services must allow for flexible growth, again without significant capital expenditure. Infrastructure on Command allows customers to use as little as one VM and to only be charged for what they use. Customers can flex on demand with minimal forecast planning. This flexibility is also reflected in our utility based hourly charging model. Provisioning Service Customer driven provisioning Sopra Steria recognises that customers wish to be in command of their infrastructure and this extends to flexibility requirements. The Sopra Steria Infrastructure on Command service offers the customer the opportunity to specify the configuration options for the standard service and whether they require Additional Service Options including: OFFICIAL or OFFICIAL SENSITIVE VM sizes (Micro, Tiny, Small, Medium and Large) Production or Test and Development:

6 Number of Virtual Machines (VMs) of each size Options Backup Options Operating System Options Network / Connectivity Options Duration By selecting from a menu of configuration options, the service can be defined rapidly. The time traditionally taken to discuss and agree service requirements, which delays access to the services, can be avoided. Sopra Steria recognise that not all customers requirements will be met by selecting options through an automated provisioning service. If a customer requires a tailored configuration, Sopra Steria can assist with the design one to meet the customer s precise needs. Secure Infrastructure Information Assurance The Infrastructure on Command service is suitable for OFFICIAL or OFFICIAL SENSITIVE data. UK delivered services to provide peace of mind Sopra Steria know that Government departments must minimise their security exposure when consuming cloud services and this is one of the primary drivers for the Sopra Steria Infrastructure on Command service to be delivered from within the UK. Infrastructure on Command uses the most modern data centre technologies with advanced power and cooling to help Government to realise the stringent sustainability targets that have been laid out in the Greening IT strategy. Tiered Delivery Model Operational flexibility for enhanced service delivery Information Assurance Security Assurance We offer our cloud services from UK data centres, operated by UK government security cleared staff. Customers data is therefore not subject to foreign legislation or the risk of international surveillance or disclosure. We provide services that are designed and built with clear alignment to the 14 CESG Cloud Security Principles that all UK public sector organisations use when assessing cloudhosted solutions. The Skyscape cloud benefits from extensive independent validation via certifications ranging from international standards (for example, ISO 9001, ISO 27001, ISO 20000) to UK public sector specific standards (for example, PSN, N3/HSCIC). Our cloud platforms are subject to regular, extensive IT Security Health Check (ITSHC) CHECK Tests by independent, CESG approved assessors to provide our customers with confidence in the physical and technical security controls which have been implemented to protect their valuable data assets. Connectivity Both UK data centres have resilient connections to secure UK government networks such as PSN Assured, PSN Protected and N3, as well as large scale, DDoS protected internet connectivity. Our service makes it possible for you to present your own connections (such as direct connectivity into your MPLS, or inexpensive point to point connections via leased lines); and offer a Secure Remote Access solution that allows secure VPN access to the Elevated OFFICIAL domain. CESG Listed Advisor Scheme (CLAS) Accreditation Sopra Steria recognises the importance of security and has a well established team of delivery CLAS consultants. Through all phases of design and implementation the CLAS consultants advise and check to make sure the solutions that Sopra Steria deliver are capable of meeting CESG accreditation. Sopra Steria CLAS consultants can provide support and advice to our customers and can be engaged through the Specialist Lot 4 Cloud Services on the G Cloud catalogue. Employee Clearance Levels All Sopra Steria employees are suitably cleared in accordance with CESG guidelines for the relevant Information Classification. Additional Service Options The configurations within the core Infrastructure on Command service have been designed as the fundamental building blocks to allow customers to build the infrastructure platform that they need. However, we recognise that customers may have specific needs beyond the core building blocks and so we have a number of additional service options to meet these needs. These additional options build and enhance the capabilities of the core offering and a description of the most popular options is given below. Please contact us if you wish to discuss adding these or other additional service options to your Infrastructure on Command services. Operating Systems Installation Sopra Steria know that some customers will want to install an operating system themselves and possibly even change it over time to suit their needs. As a result, the standard Infrastructure on Command service comes without an operating system installed. If customers would like to have an operating system installed and supported, Sopra Steria can provide an installation service for the following operating systems Microsoft Server Operating Systems: Windows Server 2003, Windows Server 2008, Windows Server 2008 R2, Windows Server Red Hat Linux See our Lot 2 Platform on Command for further information.

7 Disaster Recovery One of the benefits of cloud technologies is the ability to handle system failures. Sopra Steria Infrastructure on Command Service includes a number of standard Skyscape outof the box solutions for DR, such as the ENHANCED service and inclusive backups. If customers would like support and guidance in the development and implementation of DR solutions then See our Lot 2 Platform on Command for further information. Data Migration Support with secure data migration to and from Infrastructure on Command using government approved products and methods. Connectivity Consumers will require appropriate network connectivity such as internet access or accredited connectivity to the Skyscape Cloud Platforms. Connectivity via the internet, a government secure network for example PSN A (assured) and PSN P (Protected), N3 or private leased line is available but may incur additional charges. Where required, consumers are responsible for procuring and managing appropriate devices or software to meet the requirement for data security over the various forms of connectivity. Skyscape s cloud is resiliently connected to a variety of government, public and private networks, including: DDoS protected internet connections PSN A (Assured) and PSN P (Protected); customers can access legacy GCF networks such as PNN and CJX utilising the PSN P connection. N3 Skyscape is one of a small number of N3 aggregators allowed to carry out compliance auditing on behalf of HSCIC, removing reliance on third parties to get onto the N3 HybridConnect allows customers to install their own dedicated leased lines into the platform Security Services To further enhance the security of the standard service offering, Sopra Steria can apply additional security services including the following: Penetration and Vulnerability Protection The core Infrastructure on Command service includes a defined level of security protection. Border firewall management Internal firewall management Intrusion Prevention software can be installed if required Virtual Firewall Customers are offered a Virtual Firewall which is included as part of the service. Customers can request additional instances of this firewall but should note that each instance has the following performance limitations. Consumers should consider deploying alternative firewalls if needed. Max SSL VPN sessions: 5 Max IPSEC VPNs: Support up to 64 tunnels Firewall concurrent connections maximum 750,000 Firewall performance 7.2Gbps (Note that this includes traffic between tiers within the cloud environment) Load balancer concurrent connections maximum of 6000 Load Balancing Load balancing between VMs can be provided if required. Service Management As a true Cloud service aligned to the NIST definition of IaaS, the service is designed to be self managed via the secure online portal (or API) which provides common Service Management functionality and addresses standard requirements. Sopra Steria can provide customers with a managed service if required via our Platform on Command service. The Sopra Steria support services provided to customers as part of the standard Infrastructure on Command service include the following: A single point of contact for all incidents through the provided portal. Service governance to ensure that the overall service is meeting all service requirements and provides basic Service Reporting Contract assurance to ensure that delivery and financial management are aligned to contractual terms Delivery of incident management service to standard SLAs Service Levels If the service level falls below the stated availability percentage (excluding Planned and Emergency Maintenance periods), customers will be eligible for Service Credits on affected VMs only. Service Credits will be calculated as a percentage of the fees for the affected services for the ly billing period during which the failure occurred (to be applied at the end of the billing cycle). Infrastructure on Command provide both an Availability SLA as per the following table. Availability (ly*) Service credits Test & Dev / Basic Standard Enhanced Essential 99.95% 99.99% 99.99% 99.99% 3% of the affected VMs ly spend 5% of the affected VMs ly spend 10% of the affected VMs ly spend 15% of the affected VMs ly spend

8 In addition, there is Availability Service Level Target on the Portal and API i.e. the ability to login to manage your environment via portal, create support tickets and use other functions. Access to the API allows direct commands to be sent to the environment for programmatic control of the Infrastructure on Command Service. Maintenance Windows Target Availability (ly*) Client Portal and API 99.90% Availability (ly) Service credits 1% of ly spend for each 1% below service level target or part thereof Planned Maintenance means any pre planned maintenance of any of the infrastructure relating to the Service. In accordance with our design principles, Planned Maintenance will have no impact on the availability of the virtual machines running on the Service. However, the Planned Maintenance activity may result in short periods of degraded service (for example, temporary performance degradation). In such cases, Customers will be provided with at least fourteen (14) days advance notice of the Planned Maintenance. If during Planned Maintenance there is a loss of availability to virtual machines on Infrastructure on Command, an SLA event will be triggered and for affected Customers this time shall be included in the availability calculation and ly service reporting related to Infrastructure on Command. Emergency Maintenance means any emergency maintenance of any of the infrastructure relating to the Service. Whenever possible, Skyscape shall: a) provide affected Customers with at least six (6) hours advance notice and b) carry out the emergency maintenance between the hours of 00:00 and 06:00 (UK local time) Monday to Sunday or between the hours of 08:00 and 12:00 (UK local time) on Saturday or Sunday unless there is an identified and demonstrable immediate risk to Customer environment(s). Emergency maintenance may result in periods of degradation or loss of availability depending on the nature of the activity required. If during Emergency Maintenance there is a loss of availability to virtual machines on Infrastructure on Command, an SLA event will be triggered. However, this time shall be excluded in the availability calculation but will be included in ly service reporting related to Infrastructure on Command. Customer Portal & API Planned Maintenance means any pre planned maintenance of any of the infrastructure relating to the administrative components of the Services (i.e. the Customer Portal and API). Planned Maintenance activity may require short periods of downtime or degraded service (for example, loss of ability to manage or change the Services via the Customer Portal and API). In such cases, affected Customers will be provided with at least fourteen (14) days advance notice of the Planned Maintenance. If during Planned Maintenance there is a loss of availability to the Customer Portal & API, an SLA event will be triggered. However, this time shall be excluded in the availability calculation but will be included in ly service reporting related to the Customer Portal & API service. Emergency Maintenance means any emergency maintenance of any of the infrastructure relating to the Services. Whenever possible: a) affected Customers will be provided with at least six (6) hours advance notice and b) carry out the emergency maintenance between the hours of 00:00 and 06:00 (UK local time) Monday to Sunday or between the hours of 08:00 and 12:00 (UK local time) on Saturday or Sunday unless there is an identified and demonstrable immediate risk to Customer environment(s). Emergency maintenance may result in periods of degradation or loss of availability depending on the nature of the activity required. If during Emergency Maintenance there is a loss of availability to the Customer Portal & API, an SLA event will be triggered. However, this time shall be excluded in the availability calculation but will be included in ly service reporting related to the Customer Portal & API service. Extended Support Services The standard Infrastructure on Command service comes with standard service management as outlined above. However, we recognise that some customers may wish to have enhanced service management in certain areas including: Enhanced Service Desk and/or SLAs Proactive Management Additional service reporting Sopra Steria can offer additional support services including our ITIL v3 Service Desk. This can include extended service hours, enhanced SLAs and a range of other support options to augment the service management provided as standard for Infrastructure on Command. Partners Sopra Steria have partnered with Skyscape to provide Infrastructure on Command services. Customer Responsibilities The control and management of access and responsibilities for end users including appropriate connectivity, security and accreditation if required. Where access is required over Government Secure Networks such as N3 or PSN, the consumer is responsible for adhering to the Code of Connection and assigning appropriate IP addresses from their own allocation to their services hosted on the Skyscape platform. Management and administration of layers above the Hypervisor (e.g. OS patching, application performance monitoring, user administration, etc). As a core benefit of the Cloud Platform, consumers are expected to self manage the environment including provisioning, stopping/starting virtual machines, AV, patching, etc. Where customers license operation systems through Skyscape, they will have access to update repositories.

9 Consumers must be aware of the variable nature of the billing based on usage. The consumer is also responsible for ensuring only appropriate data is stored and processed by applications on this environment and that they comply with the Skyscape Security Operating Procedures (SyOps) and other information assurance requirements such as Protective Monitoring or as specified in Skyscape System Interconnect and Security Policy (SISP) and associated accreditation documentation sets. Details of Customer responsibilities can be found in the Service Specific terms document. On Boarding / Off Boarding Processes On Boarding Processes Sopra Steria operate a standard, repeatable on boarding process for our Cloud offerings to minimise the time taken from a customer forming a requirement to being able to use the service. The Sopra Steria on boarding process will commence upon receipt of a valid order from the customer. For most Infrastructure on Command offerings, this will simply be an order form requesting one or more of the standard VMs (Micro, Tiny, Small, Medium or Large) configurations, as part of the order, the customer will complete a questionnaire specifying their configuration options as outlined above. Once received, Sopra Steria will confirm that there are no issues with the order and assuming there are none, will commence Build and Deployment of the Virtual Data Centre (VDC). The typical lead times for new and existing customers taking a standard service, can be seen in the table below. As can be seen, an existing customer is able to order and deploy additional VMs very quickly. Activity New Customer Existing Customer Ordering and 2 days 1 day processing Deployment 3 days 1 day On receipt of a valid order, Sopra Steria will advise of the lead times that can be expected for the order. The lead times above are indicative and may vary for a number of factors including the completeness of the order questionnaire and the complexity of configuration requested. Once the order is accepted a Customers Primary Administrator account will be created and sent as part of the customer Welcome Pack. This also includes the URL for the Skyscape Customer Portal and associated authentication details. The consumer s Administrator is then able to raise a support request to add Services. Via the portal the Administrator can create additional user accounts and allocate roles and privileges for users within their project. Off Boarding Process Off boarding from Infrastructure on Command is equally straightforward. On expiry of the agreement or notice of a customer stopping using the service, the service will be withdrawn. Prior to terminating the contract, the customer is able to transfer all their data out of the solution (for example, using the Skyscape portal to export VMs). Activity Data Decommission Service Process Data Deletion Billing Finalisation Description If the customer anticipates re use of any of the services that they have used on Infrastructure on Command, a number of Off Boarding scenarios can be requested as additional service options including: Mothballing persistent data Mothballing VMs Snapshot, CMDB status Training Within the portal can be found a number of videos, help guides, manuals and FAQs to help train and instruct customers so that they are up and running quickly and easily. If a customer requires additional training for their users, this can be provided through Sopra Steria s Specialist Cloud Services as outlined below. Service Migration If required, Sopra Steria can provide enhanced Service Migration Services for more complex On boarding and Offboarding scenarios including where there are specific requirements arising from the transfer to or from another supplier. Specialist Cloud Services Unless requested otherwise as an additional service, the customer is responsible for secure transfer of all their data out of the solution When the customer terminates their agreement with Sopra Steria, we will ensure all of the customer s data is deleted. Once the customer has off boarded from the service, Sopra Steria will raise the final billing to cover any outstanding ly and consumption charges. Sopra Steria offers a range of Specialist Cloud Services to support Cloud implementations. These can be used either alongside this service or for other activities and are detailed in Lot 4 of the G Cloud framework. Our Specialist Cloud Services offerings can be combined to offer a number of services that support Infrastructure on Command including the following examples:

10 Integration Services Services to integrate Infrastructure on Command with other services, including integrating with other cloud offerings and with internal enterprise private cloud solutions to form Hybrid cloud services. Supplier Management and Service Aggregation If required, Sopra Steria can manage your cloud services for you. This could include the following elements: Selecting, procuring and managing services from other 3rd parties to be used in conjunction with Infrastructure on Command Integration and aggregation services to provide data and application integration between differing cloud environments Project / Programme Management To support customers with complex web projects, Sopra Steria is able to provide Project and Programme Management to help ensure that customer solutions are delivered on time and to budget. If you are interested in finding out more about these or any of Sopra Steria s other Specialist Cloud Services, please contact us at soprasteria gcloud@soprasteria.com Transition Services If required, Sopra Steria can provide enhanced Transition Services for more complex On boarding and Off boarding scenarios including where there are specific requirements arising from the transfer to or from another supplier. Sopra Steria would be pleased to discuss your particular requirements and to provide a solution to meet them. Service Desk Facilities Sopra Steria offers an ITIL V3 / 2011 Service Desk that can be used to support your Infrastructure on Command services. Sopra Steria Training Services Appropriate training is a critical element of any ICT enabled business change. Sopra Steria Learning Services, our dedicated training organisation has the experience, resources, processes, infrastructure and track record to ensure we successfully deliver all training requirements requested from our clients. This can include providing standard training courses, developing bespoke training courses and management and administration of the training function and processes. Testing Services Sopra Steria offers comprehensive testing management services that can be used to support your Infrastructure on Command services. Security Consultancy Sopra Steria is able to offer a number of security services that can ensure solution conformance to government policies. Sopra Steria Security consultancy services cover Penetration Testing, Information Assurance, CLAS Services, PSN Compliance and ISO27001 Assessment.

11 Pricing Standard Configuration Pricing Virtual Machine 2GHz vcpu Micro1 1 (500MHz ) RAM (GB) Assured Per per hour Elevated Per per hour (above included 60GB**) / 1GB / Not Available (above included 60GB): Optimised Not Available Tiny day backup retention 28 day backup retention Small Medium Medium Large Test & Dev / ESSENTIAL Large Small Medium Large

12 2GHz vcpu Micro1 1 (500MHz) RAM (GB) Assured Per per hour Elevated Per per hour (above included 60GB**) / 1GB / Not Available (above included 60GB): Optimised Not Available 14 day backup retention 28 day backup retention Tiny Small Medium Medium Large BASIC Large Small Medium Large Not Available Not Available

13 2GHz vcpu Micro1 1 (500MHz) RAM (GB) Assured Per per hour Elevated Per per hour (above included 60GB**) / 1GB / Not Available (above included 60GB): Optimised Not Available 14 day backup retention 28 day backup retention Tiny Included 0.11 Small Medium Medium Large STANDARD Large Small Medium Large

14 2GHz vcpu Micro1 1 (500MHz) RAM (GB) Assured Per per hour Elevated Per per hour (above included 60GB**) Not Available (above included 60GB): Optimised 14 day backup retention 28 day backup retention Tiny Small Medium Medium Large Not Available 0.17 ENHANCED Large Small Medium Large Including replication and 14 day replicated backup * 500MHz ** Micro VMs are limited to a 10GB storage allocation agnostic. Cloud VM Billing; Billing is per hour, each partial hour consumed will be billed as a full hour. Whilst a VM is stopped, charges will be applied to the persistent storage/backup element. The ly charge for storage/backup will be pro rated where appropriate. If reconfiguring or resizing a VM outside the pre defined templates, pricing is based the next closest sized machine in an upwardly fashion. The VM charges above are incurred when the VM is running. When the VM is stopped the storage charges are incurred. When the VM is deleted no charges are incurred.

15 and Back up All Cloud Virtual Machines (Except Micro) come with 60GB storage which cannot be pooled. Select additional storage at the required storage level if you require more. Micro VM s are fixed at 10GB and cannot be expanded further. Dedicated Compute VMs do not come with any storage by default. The required storage allocation can be configured via the Portal and API and will be charged at our standard storage prices (i.e. a per GB per basis). STANDARD Tier Assured Elevated Upto 250TB TB to 500TB TB to 1000TB TB Micro, Tiny VM Small VM Medium VM Medium Large VM, Large, Tier One Windows SPLA Type Per Hour per VM Academic G-SPLA Academic G-SPLA Academic G-SPLA Academic G-SPLA Academic G-SPLA ENHANCED Tier Assured Elevated Upto 250TB TB to 500TB TB to 1000TB TB The storage tier is based on the average consumption at the end of the, which is based on daily average measurements. For example, if the volume of customer data peaks on one day during the at 750TB, but the average across all days in the is measured at 500TB, billing for that will be at the 251TB 500TB tier rate. O/S and Application Licences Microsoft O/S The standard terms & conditions from Microsoft state that if you want to run Windows Server operating systems in the Cloud, you must license it via the Service Provider Licence Agreement (SPLA) as per the following table. This is provided by Skyscape. Microsoft SQL Server If licensing Microsoft SQL Server through Sopra Steria /Skyscape, the following licensing charges are applicable: Tiny, Small, Medium, Medium Large, Large, Tier One SQL Enterprise Tiny, Small, Medium, Medium SQL Standard SPLA Type Per Hour per VM Academic 0.09 G-SPLA 0.17 Academic 0.17 G-SPLA 0.32 SPLA Type Academic G SPLA Per Month per VM Large, Large, Tier One Academic G SPLA Note that SQL Enterprise is bought on a ly basis. Customer must report the quantity they require each.

16 RHEL Customers can subscribe to support for RedHat one of two ways: Bring Your Own Subscriptions: Customer must have a valid subscription agreement / contract with RedHat and notify Sopra Steria / Skyscape with appropriate details of this. Customers must select the BYOS VM template form the Catalogue. Customer will receive support through their own channels. Customer must consider patching and updating this is not provided by Sopra Steria via this licensing model. Subscribe through Skyscape: Customers can buy RedHat support subscriptions on a per hour, per VM basis. Customer must select the RedHat Supported VM template from the Skyscape Catalogue. Customer must log RedHat support tickets through the portal. Patching and update services are available from Skyscape via this licensing model. Micro, Tiny, Small, Medium, Medium Large, Large, Tier One RHEL Type Per Hour per VM RHEL 0.04 RHEL 0.10 Other Operating Systems Sopra Steria do not provide licenses for other operating systems. The license conditions for many other operating systems enable customers to bring their own license but customers are advised to confirm the suitability of license agreements. If Linux distributions are not licensed through Skyscape, customers should consider how VMs can be authenticated and patches received. Connectivity Options Assured OFFICIAL Option Notes Price Internet per GB PSN Assured Connectivity (per GB) N3 Access Bandwidth, per Inbound Data Transfer Free 0.00 Outbound Data Transfer 0.04 Unmetered data transfer (per ) Access via Skyscape s resilient, scalable PSN Assured connectivity on a shared bandwidth model. Price is based on the actual volume of data transferred (outbound) per. Encrypted access to the NHS National Network (N3) via Skyscape s resilient, scalable N3 connectivity on a shared bandwidth model Pricing is based on the actual volume of data transferred (outbound) per Data Transferred Price 3, Starter Pack 1TB TB to 20TB per GB Above 20TB per GB Unmetered data transfer per Starter Pack (250GB) per , GB to 1TB TB to 20TB per GB Above 20TB per GB Unmetered data transfer per ,888.89

17 Assured Inter Data centre Connectivity Assured inter data centre connectivity will utilise Skyscape s internet facing inter data centre circuits. Customer can use a site-tosite VPN to suitably encrypt data if required. VM replication bandwidth is included in the price VM s. Price is based on the actual volume of data transferred (bidirectional) per. Per GB 0.04 Assured Inter Data centre Connectivity Alternatively, where there are more complex or performance sensitive cross-dc requirements, Consumers can pay for allocated bandwidth to Skyscape s Assured accredited resilient multigigabit inter data centre connectivity. The bandwidth is set and managed by Skyscape based on usage tiers. Price is based on the actual volume of data transferred (bidirectional) per. Starter Pack (250GB) per 251GB to 1TB per GB 1TB to 20TB per GB Above 20TB per GB HybridConnect Line to be ordered and managed by the Consumer directly with a Skyscape approved Telco. Connection terminated on a Skyscape router. If customers require inter data centre connectivity, they must procure the same speed as their Leased Line, otherwise speed will be capped. Per Data Centre Charge: one off setup charge per installation No recurring charge 2, Cloud Enablement To enable customers to access the Skyscape Cloud, customers can colocate encryption or access devices per setup / additional installation per data centre per per data centre 2,

18 Connectivity Options Elevated OFFICIAL PSN (Protected) connectivity Encrypted access to the PSN Protected service (using the IPED) via Skyscape s resilient, scalable PSN Protected connectivity on a shared bandwidth model Pricing is based on the actual volume of data transferred (outbound) per Starter Pack (250GB) per 251GB to 1TB per GB Above 1TB to 20TB per GB Above 20TB per GB Unmetered data transfer , Elevated Inter Data Centre Connectivity HybridConnect Elevated OFFICIAL VPN Solution Consumers pay for bandwidth to Skyscape s Elevated, accredited & resilient multigigabit inter data centre connectivity. Price is based on the actual volume of data transferred (bidirectional) per. Line to be ordered and managed by the Consumer directly with a Skyscape approved Telco. Connection terminated on a Skyscape router. If customers require inter data centre connectivity, they must procure the same speed as their Leased Line, otherwise speed will be capped. CAPS approved or appropriate CPA assured solutions to be ordered and managed by the Consumer directly, requiring VPN devices to be hosted within the Skyscape data centre(s). Starter Pack (250GB) per 251GB to 1TB per GB 1TB to 20TB per GB Above 20TB per GB Per Data Centre Charge: one off setup charge per installation No recurring charge Per Data Centre Charge: one off setup charge per install Per Month , ,

19 Cloud Enablement To enable customers to access the Skyscape Cloud, customers can co-locate encryption or access devices per setup / additional installation per data centre 2, per per data centre Additional Services Options Pricing Pricing for the Additional Service options detailed above are available on request. Minimum Order Values The minimum order for Sopra Steria s Infrastructure on Command service is 1 x Large Configuration, 2 Medium Configurations or 4 Tiny / Small Configurations. The pricing above relates to orders for commodity Cloud services based on standard configurations with a menu of configurable options. If customers require a tailored configuration, we will be happy to design a service to meet your precise needs. In such cases, the component pricing given above is still valid but a minimum order value may apply. Please see our Service Terms for further details. Ordering and Invoicing Process Details of the ordering and invoicing process can be found in the Service Specific terms document. Termination Terms Details of the termination Terms can be found in the Service Specific terms document. Trial Services Trial services are not currently available. Discount Consumers commit to spending a specific minimum amount each for a minimum of 12 s. The discount level attained is based on the total spend committed. To achieve the discount, the consumer will fix a value that they will commit to spend for each of the term. This must be in a single PO with each as a separate line item. As Consumers can consume more than their committed amount each, they must also add an additional line item and value to cover any over spend. This must be part of the same PO. If the Consumer has an existing contract, they must accept a Contract Change Notice and set the values as outlined above. Where multiple contracts are affected any changes will be made via a Side Letter. PO Value Discount Level < 275K 0% 275K- 549K 550K- 824K 825K- 1,649k 9% 13% 16% 1,650K + 19% Points: Individual projects or departments (billing entities associated with each ly spend) can be amended during the year through discussion with and agreement from Sopra Steria; however the committed value cannot be reduced midterm. Consumers only get a discounted rate for each, up to the set ly figure i.e. not for over usage. At the end of each Sopra Steria will do one of two things. 1. If the actual usage is above the committed value, Sopra Steria will take the value from the ly commitment line item and the remaining balance from the Overspend line item. 2. If the actual usage is below the set value, Sopra Steria will bill the Consumer the committed value. At the end of the 12 s, Sopra Steria will rebate the Consumer the value of the applicable discount over the 12 period minus any over usage for the last. For example, the invoice for 12 is for the committed consumption plus any overuse at standard prices with the potential for a 12 rebate. If the Overspend PO line item value is spent prior to the 12 s, the Consumer must issue a top up PO value for the remainder of the 12 s or increase their spend and commit to a further 12 s. The Consumer will pay for any usage above the set amount at the standard rates. The discount is set based on the committed PO value, not the actual usage.