CenturyLink Disaster Recovery Service G-Cloud V Lot 4 (Specialist Cloud Services)
Overview of the Service To help public sector organisations be prepared in the event of a disaster, CenturyLink Technology Solutions provides a comprehensive portfolio of Disaster Recovery Services that span understanding and evaluating your current environment, to designing and deploying a robust DR Strategy and Technology Enablement Program, to providing ongoing operations support. We focus on understanding your business and application services landscape, and architecting an enterprise-level Disaster Recovery solution that helps meet the needs of your Business Impact Analysis (BIA) and financial constraints. Our DR strategy consulting team partners with your organization to define a DR program to protect your key critical business functions and supporting technologies. We build a program and target state architecture supported by clearly defined governance and policy- based decision making models so that all current and new business applications are reviewed and assessed for candidacy for DR protection. In addition, our Right Placement Cost Model evaluates the best DR solution and pricing based on a tailored portfolio of technology solutions that helps meet your specific financial and recovery needs. As a global leader in cloud infrastructure and hosted IT solutions, CenturyLink Technology Solutions has the expertise and resources to help your organization architect and enable a cost-effective Disaster Recovery plan that minimizes the impact of unplanned events and keeps your business operational. Our skilled service operations and management teams provide ongoing support to the synchronization and integrity of your investment by checking that all changes to your application and infrastructure service environments are applied and reflected to your Disaster Recovery Environment. Key Service Attributes Service Name Service Layer Lot 4 Deployment Model Government Accreditation Networks to which the service is connected (directly)? 'API' access available documented and supported? Services available to other suppliers so they can use them to provide services to government? This service shall be available to 3rd party suppliers such as ISVs in order for them to deliver platform or software services to government. Data Centre Tier Minimum Contract/Billing Period? ISO27001 certification Free option? Trial Option? Professional service; direct engagement with the customer No 2
Use Cases A local council has invested in a dedicated, traditional DR solution with a mixture of Hot Standby and Warm Standby infrastructure. As the infrastructure grew, the cost to maintain this architecture and the complexity of scaling up and down to replicate the continual shift in computing requirements proved challenging. CenturyLink Technology Solutions ran 2 initial 2 workshops, provided a proof of concept environment for the citizen facing web-tier and back-end line of business databases, comprising 30 servers, based on our Disaster Recovery as a Service offer. The POC was successful, and the installed solution had a monthly recurring cost ( MRC ) of 10,000. The next phase of the engagement is the expansion of the DRaaS solution to the entire IT infrastructure. Product Features and Benefits CenturyLink Technology Solutions DR Strategy and Technology Enablement Services Modules Disaster Recovery Strategy and Planning The cornerstone of any successful Disaster Recovery Program and Solution is a comprehensive strategy based on four key tenets: Features Governance Customer Benefit By establishing clear governance and processes on what must be protected and at what cost, the appropriate level of DR protection is provided based on the critical functions and application services that must be restored. Application Service Behavior The key to the successful restoration of your business is to recognize that multiple software components and services can represent a business function. In addition, each application in the grouping must be analyzed to define the best configuration of the DR Solution to meet performance and capacity objectives. Our application service-focused design is applied to understand and map all key internal and external dependencies that are too often missed in the planning stages. Optimized DR Target State Cost Optimization By aligning the appropriatet tiers of technology (SAN, Network & Compute) to the application service behavior and business requirements, we aim to establish a scalable and cost- effective target state architecture for DR. CenturyLink Technology Solutions offers a range of technology products and services to enable your DR Environment to maintain service reliability in the event of an outage. In addition, CenturyLink Technology Solutions identifies effective enablement tools to further secure the synchronization and protecting of your Disaster Recovery Environment The lack of funding is often a leading factor in failed recovery attempts. At CenturyLink Technology Solutions our goal is to leverage proven products and solutions that align to your technology strategy to minimize your cost 3
investment while maximizing your recovery targets within agreed service levels. A key component of your DR Strategy and Planning Solution is the development of a business case that aligns to your internal financial approval cycle and the creation of a Right Placement Cost Model. Delivered by a highly experienced team, including many who are members of the CESG Listed Adviser Scheme (CLAS) and/or ISO 27001 lead auditors. Alignment to ISO 27001. Assurance of quality. For customers who wish to achieve certification to ISO 27001, the principles of which are contained in the HMG Security Policy Framework. 4
Pricing Structure CenturyLink Technology Solutions provides personnel for specialist information assurance services on a fixed daily rate for an agreed period of time. The day rates are based on an 8 hour working day excluding weekends and UK public holidays and are shown in the table below. Travel and subsistence are charged at the standard civil service terms and conditions. Level Definition Day Rate Technical Architect Solutions Architect Network Architect Having broad expertise or unique knowledge, uses skills to contribute to development of company objectives and principles and to achieve goals in creative and effective ways. Works on significant and unique issues where analysis of situations or data requires an evaluation of intangibles. Exercises independent judgment in methods, techniques and evaluation criteria for obtaining results. Creates formal networks involving coordination among groups. Acts independently to determine methods and procedures on new or special assignments. Typically requires a Bachelors degree or equivalent education and experience. 12+ years related experience. 8 years related experience with Masters degree. As an expert in the field, uses professional concepts in developing resolution to critical issues and broad design matters. Works on issues that impact design/selling success or address future concepts, products or technologies. Creates formal networks with key decision makers and serves as external spokesperson for the organization. Exercises wide latitude in determining objectives and approaches to critical assignments. Typically requires a Bachelors degree or equivalent education and experience. 15+ years related experience. 12 years related experience with Masters degree. Having broad expertise or unique knowledge, uses skills to contribute to development of company objectives and principles and to achieve goals in creative and effective ways. Works on significant and unique issues where analysis of situations or data requires an evaluation of intangibles. Exercises independent judgment in methods, techniques and evaluation criteria for obtaining results. Creates formal networks involving coordination among groups. Acts independently to determine methods and procedures on new or special assignments. Typically requires a Bachelors degree or equivalent education and experience. 12+ years related experience. 8 years related experience with Masters degree. 1,050 1,100 1,050 5
Information assurance Our Information Assurance (IA) specialists provide services to help ensure that the client system or services can achieve HMG accreditation. As such this service does not need to be specifically accredited. CenturyLink Technology Solutions is an ISO 27001 certified company. On-boarding and Off-boarding processes/scope On-boarding Once the customer has signed the Call Off contract, CenturyLink will initiate the service. Off-boarding The service will terminate upon delivery of the enterprise security policy documents and/or PIA. Service management details All CenturyLink Technology Solutions personnel are self-motivated specialists who are used to working with little or no supervision and are capable of liaising with all levels from top management to users within a client organisation. For larger or more complex engagements, as a leading managed service provider, we can provide a full range of Project Management and Service Management services to complement the solutions CenturyLink provide. Please refer to CenturyLink Service and Programme Management service descriptions, defined on G-Cloud V under Lot4 (Specialist Cloud Services). Service constraints & Service Levels Services will be delivered on a scope and schedule mutually agreed between the parties. Financial recompense model for not meeting service levels; Not applicable to this lot. Services will be delivered on a scope and schedule mutually agreed between the parties Training Training on various topics within Cyber Security or Information Assurance (IA) can be arranged as a bespoke engagement. Please contact us for further details. Customer responsibilities The Customer is expected to make available all information facilities and personnel reasonably required by the CenturyLink Technology Solutions specialist for them to be able to carry out their work. These shall be available in a timely manner so as not to delay the work. Unless otherwise stated in the Proposal, statement of work or quotation, the Customer shall take all steps to enable CenturyLink Technology Solutions to begin its work not later than thirty days after acceptance of the Proposal. 6
Other considerations CenturyLink Technology Solutions is providing services through G-Cloud under Lot 4 through the deployment of Specialists. These specialists shall be deployed on a per day basis for services supplied. The services that CenturyLink Technology Solutions provides generally require some background documentation to be supplied and results in the production of specific documentation, such as reports, RMADS etc. These will be accepted and supplied in a format to be agreed with the customer and will be delivered/received via a mechanism suitable for the Protective Marking of the material as agreed with the customer. Ordering and invoicing process Procurement and ordering of the services can be conducted via execution of a Service Order generated by CenturyLink. Billing of the services will be on a per calendar month basis. All EMEA based billing enquires should be directed to: emeabilling@centurylink.com (DDi) +44 (0) 118 322 6000 (ask for Billing department) (Fax) +44 (0) 118 322 6279 Schedule Bills are processed and mailed at the end of each month; they represent service for the coming month. The Billing Department receives notification once your service is activated. Your first invoice includes any one-time installation fees as well as any pro-rated charges required for partial service installed during the month. As an example, if your service was activated on July 7, pro-rating ensures you will only be billed for the 25 active days within that month. Prorated fees are calculated on a per day rate for the month of service. Terms Invoiced amounts are due in full within 30 days after the date of the invoice ("Due Date"). In addition to the Service charges, the Authority will pay all applicable Taxes. CenturyLink reserves the right to charge interest in the event of any non-payment at the lesser of 1 1/2% per month or the highest rate permitted by applicable law and attorneys' fees and costs incurred by CenturyLink in collecting such amounts. Billing for each Service shall commence on the Billing Commencement Date ("BCD"), as defined in the applicable Order Form for the Services. Except as may otherwise be set forth in the applicable Order Form, (a) monthly recurring charges ("MRCs") will be billed monthly in arrears, (b) varying or usage-based charges will be billed monthly in arrears and (c) installation or other non-recurring charges will be billed upon the Billing Commencement Date. CenturyLink reserves the right to suspend the Affected Services in accordance with the Order Form in the event of a payment default. Termination If Customer terminates all or part of the Professional Services prior to its BCD, Customer agrees to pay a cancellation fee of 25% of the affected fees set forth in the Order Form plus all out-of-pocket costs incurred by CenturyLink 7