Index 1. Summary... 3 2. Services provided... 3 2.1. Advisory... 3 2.2. Strategy and Architecture... 4 2.3. Cloud Application Development... 7 2.4. Cloud Service Management... 8 3. Pricing... 10 Page 2 of 10 Commercial In Confidence
1. Summary The helps clients to build a roadmap to achieve the cloud vision that s right for their organization from visualisation of IT as a service and implementation through private, public and hybrid cloud environments. CACI works with clients to set strategy, develop the business case, define the architecture, and build governance models to achieve strategic objectives and operational excellence through a cloud approach. aligns cloud strategy with IT and business strategy, clear evaluation of private, public, and hybrid cloud options based on economics, functionality, and trust. 2. Services provided The services offered under practiced at CACI Digital Solutions are described below. 2.1. Advisory CACI s Cloud Advisory Services advice government departments on technologies and best practises needed to derive the maximum benefit from cloud computing. CACI works closely with many governmental and non-governmental bodies to develop a pragmatic strategy that will allow them to adapt their business to cloud computing while safeguarding existing investments. Our experts can guide you in technology selection, product selection, hosting environments, migration constraints and opportunities and ultimately advice on the best transition strategies. CACI can also provide independent advice and consultancy support to ensure that cloud services are designed and deployed effectively. Specialising in architecture review techniques Page 3 of 10 Commercial In Confidence
for over 20 years, we deliver comprehensive cloud strategy solutions. Our consultants will work with you to deliver solutions that reduce costs, improve efficiency and deliver sustainable benefits to your business. Key deliverables of Advisory services are: - Organisational readiness for Cloud - Cost Benefit Analysis - Strategic evaluation of existing IT strategy against business strategy - IT portfolio study - Cloud Transformation 2.2. Strategy and Architecture CACI has proven models to assess and develop cloud strategies for any organisation. Once strategies are communicated, CACI can put an architecture and implementation plan together to deliver those strategic objectives. CACI offers a proof of concept to assess the organisations cloud readiness and advice on any architectural changes required to achieve the strategic objectives. The assessment and proof of concept considers: - Security - Data Management - DR - Business Continuity - Application development framework - IT portfolio management - Infrastructure design Key deliverables of this service are: - Cloud Strategy - Evaluation of existing Cloud Strategy and advice for future - Cloud Architecture - Evaluation of existing Cloud Architecture and advice for future - Aligning Cloud Architecture with Enterprise Architecture - IT transformation and change process - Architect and choose most appropriate Private, public or hybrid Cloud environment CACI Cloud architecture will look at the overall impact of Cloud within the organisation. The design patterns followed by the architects are industry standard and defined by Cloudpatterns.org. Below are some of the standard patterns followed to architect an organisations cloud based IT systems. Page 4 of 10 Commercial In Confidence
- Automated Administration: "How can common administrative tasks be carried out consistently and automatically in response to pre-defined events?" - Bare-Metal Provisioning: "How can operating systems be remotely deployed on baremetal servers?" - Broad Access: "How can cloud services be made accessible to a diverse range of cloud service consumers?" - Centralized Remote Administration: "How can diverse administrative tasks and controls be consolidated for central remote access by cloud consumers?" - Cross-Storage Device Vertical Tiering: "How can the vertical scaling of data processing be carried out dynamically?" - Direct I/O Access: "How can a virtual server overcome data transfer capacity thresholds imposed by its surrounding virtualization environment?" - Direct LUN Access: "How can a virtual server overcome performance limitations imposed by emulated file-based storage?" - Dynamic Data Normalization: "How can redundant data within cloud storage devices be automatically avoided?" - Dynamic Failure Detection and Recovery: "How can the notification and recovery of IT resource failure be automated?" - Dynamic Scalability: "How can IT resources be scaled automatically in response to fluctuating demand?" - Elastic Disk Provisioning: "How can the billing of cloud storage be based on actual, fluctuating storage consumption?" - Elastic Network Capacity: "How can network bandwidth be allocated to align with actual usage requirements?" - Elastic Resource Capacity: "How can the processing capacity of virtual servers be dynamically scaled in response to fluctuating IT resource usage requirements?" - Hypervisor Clustering: "How can a virtual server survive the failure of its hosting hypervisor or physical server?" - Intra-Storage Device Vertical Data Tiering: "How can the dynamic vertical scaling of data be carried out within a storage device?" - Load Balanced Virtual Server Instances: "How can a workload be balanced across virtual servers and their physical hosts?" - Load Balanced Virtual Switches: "How can workloads be dynamically balanced on physical network connections to prevent bandwidth bottlenecks?" - Multipath Resource Access: "How can an IT resource be accessed when its pre-defined path is lost or becomes unavailable?" - Non-Disruptive Service Relocation: "How can cloud service activity be temporarily or permanently relocated without causing service interruption?" - Pay-as-You-Go: "How can a cloud consumer be billed accurately for the actual amount of its IT resource usage?" - Persistent Virtual Network Configuration: "How can a virtual server maintain its network connection when it is migrated to a new physical host?" - Platform Provisioning: "How can cloud consumers build and deploy cloud solutions without the burden of having to create and manage the underlying infrastructure?" Page 5 of 10 Commercial In Confidence
- Rapid Provisioning: "How can the provisioning of IT resources be automated and made available to cloud consumers on-demand?" - Realtime Resource Availability: "How can cloud consumers access current availability status information for IT resources?" - Redundant Physical Connection for Virtual Servers: "How can a virtual server be kept connected when its physical connection fails?" - Redundant Storage: "How can the reliability and availability of cloud storage devices survive failure conditions?" - Resource Management: "How can a cloud consumer safely manage an IT resource without impacting neighboring IT resources?" - Resource Pooling: "How can IT resources be organized to support dynamic sharing?" - Resource Reservation: "How can shared IT resources be protected from conflicts that can arise from concurrent access?" - Self-Provisioning: "How can cloud consumers be empowered to have IT resources provisioned on-demand?" - Service Load Balancing: "How can a cloud service accommodate increasing workloads?" - Service State Management: "How can stateful cloud services be optimized to minimize runtime IT resource consumption?" - Shared Resources: "How can the capacity of physical IT resources be used to its potential?" - Storage Maintenance Window: "How can access to data in a cloud storage device be preserved during a maintenance outage?" - Storage Workload Management: "How can storage processing workloads be dynamically distributed across multiple storage devices?" - Synchronized Operating State: "How can the availability and reliability of virtual servers be ensured when high availability and clustering technology is unavailable?" - Usage Monitoring: "How can IT resource usage be measured?" - Workload Distribution: "How can IT resource over-utilization be avoided?" - Zero Downtime: "How can we accomplish a zero down time when both virtual and physical servers failures occur?" As defined by NIST (National Institute for Standard and Technology) CACI has experience in developing architectures in whole or in parts based on client needs. This below diagram illustrates the key high level components. Page 6 of 10 Commercial In Confidence
2.3. Cloud Application Development CACI Cloud Application delivery service will cover everything from design to transformation. This offering covers the detailed design of either new applications, the transformation of existing applications to be moved to cloud, or the design for integration with a vendor Software as a Service offering. It then delivers the application to the new cloud environment. CACI design and develop websites which are based on Open Source CMS s providing you with as much control over your own system as you like. We are well experienced in systems integrations, migrations and dealing with large amounts of users and content. We specialise in the Drupal CMS. CACI also specialises in Data-driven application development using agile methodologies. Key deliverables of this service are: - Cloud Application design - Selection of development tools and technologies for application development - Create teams for development - Project manage the application development - Assess Cloud readiness of the application developed - Deploy the application in the chosen cloud environment Overall CACI development approach uses readily available components, together with trusted processes which will de-risk the delivery and ensure a quality outcome. CACI employs a Disciplined Agile methodology that has been honed and refined during many successful delivery projects. It couples a structured RUP based approach to technical risk management with iterative agile development practices (based on SCRUM). This methodology has been used by CACI for all its major project deliveries, including our supporting references. Depending on the skills, preferences and resources of the client, there may be a different emphasis from one project to the next. Page 7 of 10 Commercial In Confidence
The development falls into the following phases Discovery and design Iterative build and test Transition into live Stakeholder to use and evaluate Option for further design enhancements Scrum is an agile process that allows us to focus on delivering the highest business value in the shortest time. It allows us to rapidly and repeatedly inspect actual working software (typically every two weeks to one month).the business sets the priorities based on rankings in the Vision Document. Our teams are self-manage to determine the best way to deliver the highest priority features. At the end of each iteration, the stakeholders can review progress and give guidance for the next phase. The CACI methodology emphasises the following Emphasis on short iterative design and development phases Development of prototypes and other tools to receive feedback Regular reviews and interaction with the client Early visibility of end product for informal testing Confidence of delivery date by visibility of iterative progress Use of proof of concept and other techniques for effective management of technical risk Within system development (construction), we employ many agile development practices including Continuous Integration (CI; using Bamboo), automated tests at the appropriate level (unit, functional, integration, browser-based), test-driven development, and deliver working software as early as possible. 2.4. Cloud Service Management CACI Service Management provides effective management support to an organisations entire ICT service, through a framework that is aligned to ITIL2/ITIL3 and ISO 20000 standards. All services are measured against and managed to a defined Service Level Agreement (SLA). CACI will aim beyond SLA compliance, and drive continual service improvement across all suppliers. CACI SFIA rates apply, and are available on request. CACI has been using a best-practice ITIL based approach to service management for over 10 years. CACI Service Directors are SC Security Vetted. The Solution Support team at a minimum has ITIL Foundation level certification, Service Directors are ITIL V2 Service Management and ITIL V3 Expert certified, Management of Risk (MoR) certified, and PRINCE2 certified. CACI has further demonstrated its expertise in operating Managed Services by achieving the ISO20000 Service Management standard and the ISO9001 quality standard, both being externally audited on an annual basis.caci is a member of the IT Service Management Forum (itsmf). CACI has achieved the following standards: Page 8 of 10 Commercial In Confidence
ISO 9001 Quality Management standard ISO 20000 IT Service Management standard ISO 27001 Information Security Management standard ITIL is an integrated set of best-practice recommendations with common definitions and terminology. Process areas are: Service Strategy Service Design Service Transition Service Operation Continual Service Improvement Service Strategy: Provides best practice guidance on clarification and prioritisation of serviceprovider investments in services and focuses improvement and long term development. Key areas are: Service Portfolio Management; Demand Management; IT Financial Management. Service Design: Provides best practice guidance on the design of IT services, processes, and other aspects of the service management effort. Service Design addresses how a planned service solution interacts with the larger business and technical environments, service management systems required to support the service, processes which interact with the service, technology, and architecture required to support the service, and the supply chain required to support the planned service. Key areas are: Service Catalogue Management; Service Level Management; Risk Management; Capacity Management; Availability Management; IT Service Continuity Management; Information Security Management; Compliance Management; IT Architecture Management; Supplier Management Service Transition: Provides best practice on the transition of into live/operational use. Key areas are: Service Asset and Configuration Management; Service Validation and Testing; Evaluation; Release Management; Change Management; Knowledge Management Service Operation: Provides best practice guidance for delivery of agreed levels of services. Key areas are: Event Management; Incident Management; Problem Management; Request Fulfilment; Access Management. Continual Service Improvement: Provides best practice guidance for aligning and realigning IT services to changing business needs. Key areas: Service Level Management; Service Measurement and Reporting; Continual Service Improvement. Page 9 of 10 Commercial In Confidence
3. Pricing Strategy & architecture Business change Solution development & implementation Service management Procurement & management support Client interface 1. Follow 325 325 250 250 250 250 2. Assist 425 450 325 325 325 300 3. Apply 525 550 450 450 425 375 4. Enable 650 650 550 550 500 426 5. Ensure/Advice 725 725 600 600 575 475 6. Initiate/Influence 750 800 675 650 650 525 7. Set Strategy/Inspire 825 825 750 700 700 700 Standards for Consultancy Day Rate cards Consultant s Working Day 8 hours exclusive of travel and lunch. Working Week Monday to Friday excluding national holidays Office Hours - 09:00 17:00 Monday to Friday Travel and Subsistence Included in day rate within M25. Payable at department s standard T&S rates outside M25. Mileage As above Professional Indemnity Insurance included in day rate. Page 10 of 10 Commercial In Confidence