G-CLOUD SPECIALIST CLOUD SERVICES

ITSUS CONSULTING G-CLOUD SPECIALIST CLOUD SERVICES Page 1 of 13

SPECIALIST CLOUD SERVICES ITSUS is a specialist network consultancy which delivers that crucial combination of security and efficiency, both expertly and cost-effectively, to clients in the most demanding environments. Its highly-experienced and agile team designs, integrates, tests and implements innovative and tailored network solutions for defence and government. Offering its own expertise, and working with top-name technology partners, ITSUS delivers very specific answers to the hardest network communications questions posed by industry and government. In doing so it builds confidence and trust among those whose networks can t afford to fail. Test Our consultants are passionate about cloud technology and communicate to non-technical business leaders the role and value of the cloud, driving the business case for technology investment. We inspire and support your technical team as they embrace innovative cloud technologies to deliver mobility, collaboration, real time video, network security and service management tools. With an acute awareness of business processes, legal and regulatory governance structures; ITSUS consultants undertake stakeholder engagement across key business units, ensuring the adoption of cloud technologies appropriate to the business context. Our recommended approach to the delivery of our services is through a 5 day initial engagement activity. Our consultants have significant industry experience and possess a high level of professional and academic qualifications in addition to government SC/DV clearance. All deliverables are aligned with your format; maximising efficiency. Section 1 RESEARCH AND TECHNOLOGY VENDOR & INDUSTRY PARTNERSHIPS NETWORK ARCHITECTURE SERVICES INFRASTRUCTURE ARCHITECTURE SERVICES ENTERPRISE INFORMATION ASSURANCE ARCHITECTURE SERVICES SECURITY & INFORMATION RISK ADVISOR SERVICES CYBER TEST STRATEGY SERVICES CLOUD TEST STRATEGY SERVICES CASE STUDY SOUTH WALES FIRE & RESCUE SERVICE RATE CARD DISCOUNT CARD CONTACT US ISO-9001 Page 2 of 13

RESEARCH AND TECHNOLOGY ITSUS has developed a firm reputation for innovation and thought leadership within the communications network industry. This stems from its culture of imaginative thinking at every level demonstrated by its pioneering projects with the Centre for Defence (CDE) and the C4ISTAR (CSIIS) consortia. Strong academic ties with the University of South Wales (USW) and Massachusetts Institute of Technology (MIT) allow ITSUS consultants to take on the most technical challenges facing the industry. Supported by Welsh Government, Knowledge Transfer Partnerships (KTPs) and the Technology Board (TSB), our expert consultants consistently apply original thinking to the delivery of advanced services in the areas of cyber security, system integration, test and evaluation. Page 3 of 13

VENDOR & INDUSTRY PARTNERSHIPS ITSUS consistent success is based not just on the calibre of its people but also on the wide range of prestigious partnerships the firm has forged. This includes technology partnerships with developers of the highest quality hardware and software, providing ready access to the most advanced products on the market to support the solutions devised by ITSUS consultants. ITSUS are proud to work with trusted specialist partners, Hex Security Limited and HYTSIO ABOA Limited, to deliver bespoke solutions to meet our clients exacting needs. Additionally, ITSUS are among only a handful of consultancies to enjoy a brand relationship with QinetiQ, who are trusted advisers to the UK Ministry of Defence; ITSUS also has strong relationships with Cisco and Spirent as both licensed suppliers and supporters of their highly-respected product ranges. The capabilities of ITSUS consultants are also recognised by the CGI Group. Our partnership, via CGI s SME Accelerate programme, utilises ITSUS expertise and agility to deliver solutions to CGI s world renowned clients. The credentials of the ITSUS team are underlined by the fact that the firm has been appointed by the MoD to its latest Framework Agreement for Technical Support (FATS4). ITSUS is actively involved in Niteworks, a partnership between the MoD, the Defence Science and Technology Laboratory (DSTL) and industry, which works to enhance military capability through collaboration. This close involvement at the heart of military innovation is further extended by ITSUS membership of The Edge UK; an initiative created by leading defence contractor General Dynamics to bring Britain s most progressive enterprises together to support the MoD s innovation strategy. Page 4 of 13

NETWORK ARCHITECTURE SERVICES ITSUS are all-to aware that a coherent network design involving cloud infrastructure is difficult to get right and costly to get wrong. The realisation of the technical architecture requires a complex mixture of equipment, technologies and protocols; all aligned with the business needs for growth, availability and flexibility in the ever changing business landscape. Through collaborative stakeholder engagement with the core project team, ITSUS identify and managing technical risks, adhere to strong engineering principles and manage a multiplicity of complex technical options to deliver the systems logical network architecture. The logical network architecture will satisfy the requirements for scalability, resilience, and performance demanded by the application and users whilst balancing the financial consideration of equipment or service purchase, support and associated through life cost. Through expert equipment knowledge and guided by industry best practices the network architecture will identify the key components of the system, define the required protocol support and approaches to implementation. The logical architecture will also identify the required approach to change management enabling future network growth. A key architectural consideration will be to minimise the impact on the organisation and facilitate a smooth transition from implementation to operational support. A collaborative approach will be used to identify potential shortfalls in process or procedures early on allowing the business time to adapt. ITSUS will present the architecture to communicate the rational behind design decisions, benefits to the business and delivery against the project goals to obtain customer commitment prior to implementation. SFIA Level SFIA Responsibility Role 2 Assist 640 4 Enable Principal 6 Initiate/ Influence Managing 895 1,050 The above pricing excludes VAT. On request, we can assess your specific circumstances and provide a price for any combination of services. Our recommended approach to the delivery of our services is through a 5 day initial engagement activity. A discount is applied for projects of duration greater than 120 days. Please refer to our Pricing & SFIA Rate Card for further details. Our consultants can help you plan, design and deliver; and Policy Hybrid Design Architectural Vision High Level Designs Low Level Designs Data Centre s Technology Roadmaps WAN Connectivity Orchestration Routing & Switching Design Virtual Private s (VPN) Design Integration Access Technologies System Interoperability Wireless Access Solutions to support BYOD/CYOD Delivery of ITSUS Consulting s will result in the following benefits for your organisation: Identification and delivery of innovative network solutions to enable the migration to cloud services Coherent architectures aligned with the IT strategy driving interoperability Reduction of risk through managing and maintaining complexity and analysing the impact of changes Ability to leverage cloud services to deliver business agility and cost savings Best practices modular design resulting in design once, design well and re-use Use of SC/DV cleared Subject Matter Experts This service is delivered in part by our trusted partners HYTSIO ABOA Limited Test Page 5 of 13

INFRASTRUCTURE ARCHITECTURE SERVICES ITSUS infrastructure architects will work with you to define a high level infrastructure design, addressing the IT needs of your organisation as it transitions to cloud hosted services. We will identify a vendor agnostic approach applicable to your environment to enable your business to realise its IT strategy. ITSUS consultants have experience of working on infrastructure projects within the public and private sectors including hosted and cloud environments. Whether a public, private or hybrid cloud approach, the infrastructure architect will apply best practice design principles to develop modular scalable architectures to enable your business to grow. ITSUS can help you to avoid the growing pains commonly associated with significant infrastructure changes. SFIA Level SFIA Responsibility Role 2 Assist 640 4 Enable Principal 6 Initiate/ Influence Managing 895 1,050 The above pricing excludes VAT. On request, we can assess your specific circumstances and provide a price for any combination of services. Our recommended approach to the delivery of our services is through a 5 day initial engagement activity. A discount is applied for projects of duration greater than 120 days. Please refer to our Pricing & SFIA Rate Card for further details. Our consultants can help you plan, design and deliver; and Policy Hybrid Design Architectural Vision High Level Designs Low Level Designs Virtualisation Technologies Management Solutions - NMS, MDM, orchestration, automation, wireless, security Unified Communications services Directory (AD) Open Source Software Virtual Desktop Server /Data Centre Security Data Centre s Software Defined ing (SDN) Function Virtualisation (NFV) Integration Delivery of ITSUS Consulting s will result in the following benefits for your organisation: Identification and delivery of innovative infrastructure solutions to enable the migration to cloud services Coherent architectures within the organisations IT strategy driving integrity Reduction of risk through managing and maintaining complexity and analysing the impact of changes Ability to leverage cloud services to deliver business agility and cost savings Best practices modular design resulting in design once, design well and re-use Use of SC/DV cleared Subject Matter Experts This service is delivered in part by our trusted partners HYTSIO ABOA Limited Test Page 6 of 13

ENTERPRISE INFORMATION ASSURANCE ARCHITECTURE SERVICES The cloud is extending the traditional enterprise architecture, offering additional services and resources that can be quickly deployed and easily scaled. There are numerous of benefits, including, OPerational EXpenditure (OPEX) versus CAPital EXpenditure (CAPEX) and the ability to choose from an extensive set of services to meet an organisations needs. However, this diverse range of offerings can often result in a complex set of services across a number boundaries and suppliers. The security of an integrated cloud service architecture needs to be closely managed and controlled to ensure that it delivers both the business and security benefits. We offer a range of cloud security architecture and design services to help ensure that this is achieved. SFIA Level SFIA Responsibility Role IA 2 Assist 640 4 Enable Principal 6 Initiate/ Influence Managing 895 1,050 The above pricing excludes VAT. On request, we can assess your specific circumstances and provide a price for any combination of services. Our recommended approach to the delivery of our services is through a 5 day initial engagement activity. A discount is applied for projects of duration greater than 120 days. Please refer to our Pricing & SFIA Rate Card for further details. Our consultants can help you plan, design and deliver: Security and Design Secure Configuration Reviews Security Direction Integration Conceptual Models Security Transformation and Optimisation Security and Testing Secure Mobility Design Security Architect Training Delivery of ITSUS Consulting s will result in the following benefits for your organisation: Extensive knowledge and experience of cloud security architectures and service design for G- providers, ISVs, system integrators and customers Successfully managed highly complex cloud service deployments across a range of organisations, technologies and service providers ensure consistent application of required security controls Close relationships with a diverse range of cloud service providers, customers, suppliers, and system integrators to understand how to deliver secure enterprise cloud services Technical expertise in deploying security technologies across public, private, community and hybrid cloud deployments Deep technical understanding of how to design a cloud ecosystem that operates security and efficiently across the cloud stack using defined patterns Use of SC/DV cleared Subject Matter Experts This service is delivered in part by our trusted partners Hex Security Limited Test Page 7 of 13

SECURITY & INFORMATION RISK ADVISOR SERVICES UK Central Government departments are now mandated to consider cloud-first in any IT procurement and the wider public sector is strongly recommended to take the same approach. This formal cloud-first policy is to drive wider adoption of cloud computing within the public sector to provide a quicker, cheaper and more competitive way to buy government ICT. services should be considered and fully evaluated before departments consider any other option. Departments can choose alternatives if they can demonstrate that it offers better value for money. From a security perspective cloud-based defences can benefit from more robust, scalable and cost-effective security controls, while offering significant potential to improve overall security and resilience through focused security investment, data dispersion and economies of security scale. The Government ICT enforces the shift toward cloud computing, recognising that solutions must balance the business needs with the growing security threat and need to handle sensitive information in a secure and effective manner. The transition to cloud-based services is not without challenges and risks. Organisations must understand where they can maximise the benefits and minimise the associated impacts. ITSUS work closely with organisations to determine their business goals and offer a range of IA services to help them safely transition and use cloud-based services. SFIA Level SFIA Responsibility Role 2 Assist 640 4 Enable Principal 6 Initiate/ Influence Managing 895 1,050 The above pricing excludes VAT. On request, we can assess your specific circumstances and provide a price for any combination of services. Our recommended approach to the delivery of our services is through a 5 day initial engagement activity. A discount is applied for projects of duration greater than 120 days. Please refer to our Pricing & SFIA Rate Card for further details. Our consultants can help you plan, design and deliver: Security and Accreditation Support Security Development ISO/IEC 27001 Certification Support Governance and Compliance Privacy Impact Assessments (PIA) Threat and Risk Assessment Risk Management and Accreditation Document Set (RMADS) Vulnerability Analysis ITSHC Planning and Evaluation Management Protective Monitoring Analysis Audit and Remediation Programme Management Security Processes and Procedures Security Requirements Capture Security Code of Connection Compliance Data Centre Security Business Continuity and Disaster Recovery Incident and Forensic Readiness Security Awareness and Training Delivery of ITSUS Consulting s Security and Risk Advisor will result in the following benefits for your organisation: Real experience and success in achieving G- and PSN Accreditation Over 20 years experience managing certification and accreditation across a range of industries including central and local Government, and MOD including HMG departments adopting G- services Extensive experience of producing, maintaining and reviewing Risk Management and Accreditation Document Sets (RMADS) CLAS and Lead CESG Certified Professionals with practical experience of the HMG Security Policy Framework (SPF), HMG Standards (ISs), MOD Joint Service Publications (JSPs), CESG Good Practice Guides (GPGs), Architectural Patterns, IAMM and CPNI guidance Help organisations transition from the Government Protective Marking Scheme (GPMS) to the new Government Security Classification Policy (GSCP) Use of SC/DV cleared Subject Matter Experts This service is delivered in part by our trusted partners Hex Security Limited Test Page 8 of 13

CYBER TEST STRATEGY SERVICES technologies are becoming highly integrated in to the business environment and are revolutionising how we operate, communicate and do business. The execution of a cyber test strategy will enable your organisation to maximise the benefits of cloud services whilst mitigating the new and significant vulnerabilities it presents. ITSUS service details the objectives, methods, technologies and schedule required to effectively validate your security architecture when utilising cloud technologies to deliver critical services. Whether services are run on a public, hybrid or private cloud, The execution of the test strategy will verify the security posture of the services. ITSUS have vast experience in testing; public facing banking applications, multinational Cyber Security Operation Centre s (CSOC), network forensics, logging solutions and the integration and test of sensors with hosted Security and Event Management (SIEM) systems. SFIA Level SFIA Responsibility Role & Evaluation 2 Assist 640 4 Enable Principal 6 Initiate/ Influence Managing 895 1,050 The above pricing excludes VAT. On request, we can assess your specific circumstances and provide a price for any combination of services. Our recommended approach to the delivery of our services is through a 5 day initial engagement activity. A discount is applied for projects of duration greater than 120 days. Please refer to our Pricing & SFIA Rate Card for further details. Our consultants can help you plan, design and deliver: Testing Security Policies Processes and Procedures Digital Forensics Forensics Security Incident & Event Management (SIEM) Penetration Testing IT Health Check Application Layer Testing Identity Lifecycle Next Generation Virtualised Firewall Auditing Delivery of ITSUS Consulting s will result in the following benefits for your organisation: Validation of the security of cloud services Reduced risk when migrating to a cloud solution Confidence that a cloud solution has been tested by experts s with experience across multiple business impact levels Rapid proof of concepts enabling you to evaluate your cloud options reducing the risk of project failure Provide expert analysis of test results Provide expert advice on next steps post testing Provide innovative testing solutions to evaluate single/multi system concepts Use of SC/DV cleared Subject Matter Experts This service is delivered in part by our trusted partners Hex Security Limited Test Page 9 of 13

CLOUD TEST STRATEGY SERVICES ITSUS team of experienced cloud test consultants have the depth of knowledge and experience to Verify, Validate & Test (VV&T) your system and its dependencies. ITSUS consultants use key life cycle testing methodologies such as PASS (Performance, Availability, Scalability and Security) to assess the needs of the customer in realised and non-realised forms. From performance and load testing of new applications to migration planning and trials, ITSUS have vast experience in the delivery of cloud test strategies addressing Quality of Experience (QoE) and adherence to Service Level Agreements (SLAs). Key Performance Indicator (KPI) metrics are captured with the customer and then transposed into meaningful requirements allowing the production of innovative test plans to fully validate your system and its design. SFIA Level SFIA Responsibility Role Test & Evaluation 2 Assist 640 4 Enable Principal 6 Initiate/ Influence Managing 895 1,050 The above pricing excludes VAT. On request, we can assess your specific circumstances and provide a price for any combination of services. Our recommended approach to the delivery of our services is through a 5 day initial engagement activity. A discount is applied for projects of duration greater than 120 days. Please refer to our Pricing & SFIA Rate Card for further details. Our consultants can help you plan, design and deliver: Proof Of Concept Regression Testing Test Automation Application Layer Testing Performance Testing System Field Trial Support System Acceptance Testing Test Readiness Reviews System Validation and Characterisation Migration Planning Delivery of ITSUS Consulting s Test will result in the following benefits for your organisation: Validation of the performance and functionality of cloud services Reduced risk when migrating to a cloud solution Confidence that a cloud solution has been tested by experts s with experience across multiple business impact levels Rapid proof of concepts enabling you to evaluate your cloud options reducing the risk of project failure Provide expert analysis of test results Provide expert advice on next steps post testing Provide innovative testing solutions to evaluate single/multi system concepts Generation of testing plans covering customer centric KPI s Use of SC/DV cleared Subject Matter Experts Test Page 10 of 13

CASE STUDY CUSTOMER: South Wales Fire & Rescue Service (SWFRS) The challenge SWFRS data centre architecture comprised a switching infrastructure approaching obsolescence. SWFRS identified that improved resilience and capacity were necessary and procured Cisco Nexus switches to facilitate their requirements. The initial engagement under this contract saw ITSUS supporting SWFRS on their purchase of new Cisco Nexus switching hardware via a bespoke design and training course delivered at the customer site. The solution ITSUS was employed to design and advise on implementing modern Data Centre architecture best practices and considerations to facilitate a seamless migration of Catalyst based hardware to a new Nexus environment. ITSUS and the customer worked together to accommodate legacy systems and improve on the current virtualised environment by increasing bandwidth resulting in enhanced user experience. This significantly increased resilience and disaster recovery to the business critical infrastructure. Design decisions were made to optimise the current virtual environment and uplinks to external networks such as the Public Sector Broadband Aggregation (PSBA) network. The outcome On completion of the knowledge transfer the SWFRS team went on to successfully migrate to a modern data centre infrastructure. ITSUS has enabled it s customer to effectively future proof their systems allowing easy adoption of cloud based applications and unified communications suites. SWFRS now implement a modern virtualised data centre environment with a fully meshed and resilient network infrastructure fit for growth and delivery of business critical operations. Page 11 of 13

RATE CARD SFIA Level SFIA Responsibility Role Day Rate ( ) Day Rate ( ) Day Rate ( ) Day Rate ( ) Test Day Rate ( ) Day Rate ( ) 2 Assist 640 640 640 640 640 640 4 Enable Principal 895 895 895 895 895 895 6 Initiate/Influence Managing 1,050 1,050 1,050 1,050 1,050 1,050 DISCOUNT CARD SFIA Level SFIA Responsibility Role 0-120 Days 121 240 Days 241+ Days 2 Assist 640 624 608 4 Enable Principal 895 873 850.25 Rates The applied rates are exclusive of reasonable T&S and VAT. Discounted Rates For the 1 st 120 days on task, no discount is applied. If on the same project, a further 120 days is requested, a 2.5% discount is applied to these additional 120 days. The discount can be applied to all services. s Working Day 8 hours exclusive of travel and lunch. Working Week Monday to Friday (excluding national holidays). Standard Office Hours 09:00 17:30 (Monday to Fridays, excluding national holidays). Initial Engagement Service ITSUS recommend a 5 day initial engagement service to assist the customer in scoping and planning activities. 6 Initiate/Influence Managing 1,050 1024 997.50 Discount Rate (%) 0 2.5 5 Page 12 of 13

CONTACT US ITSUS Consulting 376 Newport Road, Cardiff CF23 9AE Phone/Fax T: 02920 003 170 F: 02920 007 062 Email sales@itsusconsulting.com Page 13 of 13