ARCHITECTURE SERVICES. G-CLOUD SERVICE DEFINITION.

ARCHITECTURE SERVICES. G-CLOUD SERVICE DEFINITION.

Table of contents 1 Introduction...3 2 Architecture Services...4 2.1 Enterprise Architecture Services...5 2.2 Solution Architecture Services...6 2.3 Service Architecture...7 2.4 Infrastructure Architecture Services...7 2.5 Business Architecture Services...8 2.6 Security Architecture Services...8 2.7 Data Architecture Services...9 2.8 Application and Technology Rationalisation...9 2.9 Design Authority... 10 2.10 Architecture Management... 11 2.11 Specialist Architecture Services... 11 3 Technical Requirements... 12 4 Service Delivery... 12 4.1 Service Management... 12 4.2 Service Constraints... 12 4.3 Service Levels... 12 4.4 Information Assurance... 12 4.5 Backup/Restore & Disaster Recovery... 12 4.6 Data Restoration / Service Migration... 12 4.7 Trial Services... 12 4.8 On/Off-boarding... 12 4.9 Training... 13 5 Commercial Arrangements... 14 5.1 Architecture Services Pricing... 14 5.2 Programme Management Services Terms and Conditions... 14 5.3 Ordering and Invoicing Process... 14 5.4 Customer Responsibilities... 14 5.5 Termination Terms... 14 5.6 Financial Recompense Model for Not Meeting Service Levels... 14 6 Detica: Information Intelligence... 15 Architecture Services Page 2 of 16

1 Introduction With an increasing number of Government departments making use of Cloud-based services, a strong architecture function is critical to ensuring that solutions are coherent, interoperable and meet the business objectives of the organisation. Organisations need to plan their use of technology on a number of architectural levels to best exploit the value of the commoditised services that the G-Cloud can offer: Enterprise Architecture ensuring that the end-to-end ICT estate meets the needs of the organisation, supporting its users to do their jobs effectively and allowing change to be planned and implemented predictably. Solution Architecture drawing together systems, applications and services to provide integrated solutions that supply the IT capabilities required. Security Architecture ensuring that appropriate security controls are built into systems, applications and solutions. Infrastructure Architecture providing a resilient and performant set of hardware and software components to support the ICT estate. Service Management Architecture ensuring that a common approach to supporting applications, systems and solutions is used, providing a consistent levelof-service to users. Detica provides a range of architecture services from a fully outsourced architecture function to tactical architecture assessments and analyses. We use TOGAF9 as our standard enterprise-wide methodology for developing and planning architectures, however we have expertise in a range of other enterprise architecture approaches including MODAF and Zachman, and apply recognised standards and good practice such as ITIL and SABSA. We are experienced in applying architecture to a range of delivery and systems engineering methods including Agile, RUP, PRINCE2 and MSP. We have supplied architecture advice for our customers over the last 5 years using these approaches. Our experience of delivering successful architecture engagements is based on the following principles: Establishing the need. This sets out the business case for conducting an architecture service. We seek buy in from senior stakeholders, establish business outcomes and return on investment for the service. It is critical that the business understands the value of the architecture service and endorses its use. Developing the architecture and design documents and artefacts baseline. This establishes a single library of artefacts and documents to provide a common understanding and ensure that a credible solution can be built, delivered and supported. Establishing ownership of the architecture. We establish clear principles for the roles and responsibilities associated with architecture including requirements, design and implementation. Architecture Services Page 3 of 16

2 Architecture Services Detica offers a comprehensive set of services across the architecture domains, as shown below: Enterprise Architecture Solution Architecture Enterprise Modelling Portfolio Assurance Enterprise Roadmap Solution Design & Integration Solution Assurance Design Change Management Business Architecture Architecture Management Operating Model Design Data Architecture Process Architecture People Architecture Infrastructure Architecture Availability Design & Assurance Data Analysis Entity Modelling Database Design Platform Design Network Design Component Capacity Planning Information Architecture Service Management Architecture Service Definition Service Design Service Modelling & Estimation Service Assurance Disaster Recovery Design Security Architecture Security Risk Definition Architectural Security Assessment Architectural Security Planning Figure 1: Overview of BAE Systems Detica s Architecture Services BAE Systems Detica provides architecture services for specific individual domains such as data, infrastructure and service, as well as cross domain services such as solution architecture and enterprise architecture. In addition we offer specific services designed to realise benefits from architecture activities. These include: Application and Technology Rationalisation using architecture to reduce the range and complexity of end user applications in order to realise cost savings and provide a more coherent and flexible user environment. Design Authority using architecture to guide and align solutions to improve coherence, re-use and integration providing increased efficiency and business effectiveness. Plus we offer an Architecture Management service to ensure that you are provided with the right information to get the best value from your deployment of architects across the organisation and to help with exploiting this resource effectively and meeting future demand efficiently. Architecture Services Page 4 of 16

2.1 Enterprise Architecture Services The overall effectiveness and efficiency of an organisation depends on maintaining its alignment with business objectives and the ability of different components to integrate and work coherently as a whole. Describing and analysing the architecture of an enterprise can improve the effectiveness or efficiency of the business by identifying opportunities for improvement and innovation, for example: in the structure of an organisation, the centralisation or federation of business processes, the quality and timeliness of business information, or ensuring that money spent on information technology (IT) can be justified. Detica s approach to developing and exploiting an Enterprise Architecture involves creating an "architectural vision": a description of the business that represents a "target" or "future state" goal. Once this vision is well understood, a set of intermediate steps (or transition architectures) are created that illustrate the process of changing from the present situation to the target. The figure below highlights the crucial role that Enterprise Architecture has within the Enterprise. 2.1.1 Key Benefits Figure 2: Enterprise Architecture within the enterprise An effective Enterprise Architecture enables an organisation to plan changes and improvements in a coherent manner, cognisant of the elements (people, processes, information or pieces of technology) that will be affected. Having a view of the current state of the organisation and a vision for the future state allows change to be implemented in a structured fashion delivering the right things in the right order to achieve the vision. Detica s approach identifies the changes required to meet the challenges of achieving that vision. Our Enterprise Architects work across business and technology silos and are responsible for defining the programmes your organisation needs to effect change. 2.1.2 Key Deliverables Our work follows a proven process driven approach to aligning your organisation s Organisation, Processes, Information and Technology with Business Strategy. Typical deliverables include an Architecture Roadmap, Requests for Information / Proposal and Architecture Services Page 5 of 16

architectural standards. The specific deliverables will be defined in conjunction with the customer. 2.2 Solution Architecture Services Solution Architecture addresses how different elements are drawn together to meet a particular business need or requirement. A Solution Architect will direct and manage the production of documentation describing the structure and behaviour of their solution articulated through a set of views including business, infrastructure, data and service management architectures. Figure 3: Relationship of Solution Architecture to Enterprise Architecture One of the key tenets of solution architecture is solution verification and validation - the governance and quality assurance capability used during the design, development and implementation of systems integration projects. Solution verification and validation is a technical and business inspection of a solution at multiple points though its lifecycle. Spotting the issues which arise during these assessments earlier in the lifecycle significantly improves the chance of project delivery to time and budget. At a high level its purpose is to answer the questions: What are the key business functional and non-functional requirements? Can it be implemented successfully? Will it meet organisation requirements? What are the total lifetime costs of the solution? 2.2.1 Key Benefits An effective Solution Architecture service ensures that programmes and projects deliver the right technology components, integrated in the right way to provide the intended benefits. Often, this involves reusing existing investment in technology or services and helps an organisation standardise on a common set of technologies, reducing the cost of licencing and support. Architecture Services Page 6 of 16

2.2.2 Key Deliverables Typical deliverables include Solution Architecture descriptions organised into architectural viewpoints. Each view addresses a set of system concerns following the convention of its viewpoint, where a viewpoint is a specification used to express the architecture in question from the perspective of a set of stakeholders and their concerns. 2.3 Service Architecture The IT of an enterprise will typically comprise many different systems and platforms, often in different geographic locations. Service Architecture develops the approach to ensuring that these systems perform as expected by unifying the control of operational procedures and service management. It also assesses the performance of the IT infrastructure and services. The Service Architecture activities and processes cover: Service Level Management Availability Management IT Service Continuity Management Supplier Management Information Security Management Capacity Management Service Catalogue Management 2.3.1 Key Benefits Effective service architecture typically improves end-user experience and assures service quality across the infrastructure. It provides the ability to understand how applications, networks, and infrastructure components affect service quality. 2.3.2 Key Deliverables Service Architecture typically provides the following deliverables: Design of service solutions Design of service portfolio (and supporting systems) Design of technology architectures and management systems Design of service processes Design of measurement systems, methods and metrics 2.4 Infrastructure Architecture Services Detica s Infrastructure Architecture services are designed to help establish an appropriately resilient and performant set of hardware and software components to support the ICT estate. This includes consideration of different technologies to determine the most appropriate fit to requirements, and ensuring that the ICT estate is not overspecified (and therefore costing too much). Our Infrastructure Architects are experienced Architecture Services Page 7 of 16

at integrating different technologies, ensuring that common problems do not undermine project delivery. 2.4.1 Key Benefits Infrastructure architecture services will result in the development of a structured, standardised, and consolidated set of infrastructure services that support business processes and applications. This prevents overlapping and diversity of services, and reduces complexity of managed services and life-cycle management. Improved alignment with operational services which in combination with standardisation and consolidation, reduces the complexity of service-level management and operational services too. 2.4.2 Key Deliverables Deliverables typically include overviews of the existing infrastructure services which provide a transparent and structured assessment of current capability, and development of target state infrastructure architectures capable of meeting current and future requirements. 2.5 Business Architecture Services Business architecture services provide an operating model and business design for the enterprise that provides a common understanding of the organisation, and its people, structures, processes and information. It is used to align strategic objectives and tactical demands and forms a component of the overall Enterprise Architecture. For further details please refer to the BAE Systems Detica Advisory Services Service Definition on CloudStore. These encompass services for business strategy, IT strategy, customer experience strategy, business case and benefits management, organisation design and people development, change management and business transformation, and process design. 2.6 Security Architecture Services Detica s Security Architecture service supports customers by creating appropriate architectures and designs, tailored to the customer s specific business requirements and risk appetite. Our security architecture team has deep expertise in the application of a range of world recognised architectural frameworks including SABSA, Zachman and TOGAF, and we can apply and customise these frameworks to suit your enterprise, to define the current state and your future security needs aligned with business objectives of your enterprise. The outcomes of our enterprise security architecture engagements provide traceability from your business strategy to the security of underlying technologies enabling your business. For further details please refer to the BAE Systems Detica Security and Risk Advisory Services Service Definition on CloudStore. Architecture Services Page 8 of 16

2.7 Data Architecture Services Our data architecture services provide a number of data reference architectures that act as templates, and which accelerate the design and development phases of cloud based data / Business Intelligence solution delivery. Beyond the high-level reference architectures, we also have Design Patterns for common components to further support the delivery lifecycle. We design, build and manage mission-critical Business Intelligence (BI) capabilities for our customers across both Government and commercial sectors (e.g. HMRC, MoD, Home Office, HSBC, Aspen Re, Vodafone, and Virgin Media), and are experienced in building data solutions for regulatory / compliance domains. For further details please refer to the BAE Systems Detica Data Design and Management Services Service Definition on CloudStore. 2.8 Application and Technology Rationalisation As an organisation grows and merges with others, the number of applications and technology platforms in use can multiply, creating an ICT estate that is complicated and costly to manage. Often, there are many different applications used for the same purpose and trying to integrate these can be a costly and nugatory exercise. BAE Systems Detica provides services to rationalise the applications and technology platforms in use within an organisation, reducing this complexity and providing users with a more coherent set of tools to support them. The activities involve analysis of all applications from the following perspectives: Business use Performance and scalability Reliability and availability Application lifecycle stage Technological risks Number of instances 2.8.1 Key Benefits Reducing the complexity of the application estate or technology platform estate can significantly reduce the cost of maintaining and supporting the overall ICT estate. Not only does this reduce the licencing and service costs, it also reduces the: Infrastructure costs underpinning a more diverse set of applications and platforms; particularly where a Cloud-based service can be used in place of one or more locally-hosted services; Development skills costs associated with having to support a diverse technology portfolio. 2.8.2 Key Deliverables The analysis identifies applications that need a range of changes from change in deployment strategy for fragmented applications to a total replacement for applications at Architecture Services Page 9 of 16

the end of their technology or functionality lifecycle. This typically results in one or more of the following reports: Application / platform category assessment Application / platform usage review Strategic application / platform definition Legacy application / platform migration approach 2.9 Design Authority Where an end-to-end solution depends on a number of solutions or service components, whether in the Cloud or from conventional sources, the Design Authority maintains alignment of both the solutions components and their overall fit with business requirements. The Design Authority acts as a gatekeeper for technical design decisions during procurement, implementation and live operation. Activities involve reviewing and approving designs and changes, assessing compliance with strategic principles and technology stacks, and helping technical and business teams manage dependencies and constraints. Unlike an assurance role, design authority activities help to shape the solution and directly support the delivery of business outcomes. These functions are particularly important in helping organisations manage project portfolios and work with multiple suppliers or partners towards realising their strategic IT objectives. 2.9.1 Key Benefits At a strategic level, the Design Authority addresses IT projects holistically by encompassing business requirements specification, technical architecture review and design through to vendor selection and management where required. 2.9.2 Key Deliverables The outputs typically include development, maintenance and communication of a set of technical standards that support IT activities. This also may include quality assurance of IT requirements to allow projects themselves to develop a clear set of deliverables backed up by a design that is achievable and fit for purpose, and highlighting any interdependencies that exist within existing and proposed systems to ensure interoperability. Figure 4 Design Authority role Architecture Services Page 10 of 16

2.10 Architecture Management In the event that your organisation commissions a large volume of architecture services, potentially in a multi-supplier environment, we are able to provide an architecture management service, which provides good practice guidance, frameworks, and oversight across the architecture services deployed in the organisation. We provide support in demand and change management, performance reporting and management information monitoring timeliness and quality of delivery against a standard set of KPIs, enabling you to manage quality and consistency across projects and address and resolve any issues. This can be combined with our Information Assurance service (on CloudStore as BAE Systems Detica Information Assurance Service) to form a single oversight function, with common reporting, if desired. We will size the management team to the volume of work anticipated. If desired, this function can also extend to architecture policy, standards and framework development and compliance. 2.10.1 Key Benefits Improved management control; quality and consistency across architecture services, management of demand and planning of architecture activities and resources, prioritisation of architecture development and maintenance against requirements and target benefits. 2.10.2 Key Deliverables Service outputs will depend on scope as agreed with the customer during the order stage. 2.11 Specialist Architecture Services Detica s position at the forefront of deriving full benefits from Information Technology means that we are able to bring leading edge technical and business thinking in emerging strategic areas. Our Specialist Architecture Services extend into such areas and we would be please to assist you with any of the following: Big Data and Business Intelligence Architecture Secure Mobile Data Networks and Devices Fraud and Risk Solutions and Privacy by Design Digital Media and Secure Online Transactional Solutions Performance by Design Backup / Restore and Disaster Recovery Architecture Services Page 11 of 16

3 Technical Requirements No specific services have been offered within these definitions for the provision of a technical environment that will enable the delivery of Architecture services. These details and any additional costs will need to be defined on a case by case basis with each customer as the requirements for networking, tooling, licencing, connectivity, infrastructure and facilities will vary for different project. 4 Service Delivery 4.1 Service Management Not applicable. 4.2 Service Constraints Not applicable. 4.3 Service Levels Not applicable. 4.4 Information Assurance All of our staff working for Government customers hold appropriate levels of security clearance. At a minimum this is SC and a significant number hold DV. We have extensive experience in scoping, designing, delivering and supporting systems at all Impact Levels from IL0 to IL6+. We are also highly experienced in gaining appropriate accreditation for such systems. At the heart of our capability is our team of CLAS consultants, one of the largest such pools of CLAS consultants in the UK. Our Information Assurance capabilities support both our internal requirements for appropriate security controls and those of our customers. Backup/Restore & Disaster Recovery 4.5 Backup/Restore & Disaster Recovery Whilst this is not applicable directly to the services offered within this Service Definition, we can provide comprehensive services (including architecture) for Backup/Restore and Disaster Recovery, such as Infrastructure Assessment and Disaster Recovery Audits, and are often called upon to deliver these. 4.6 Data Restoration / Service Migration Not applicable. 4.7 Trial Services Not applicable 4.8 On/Off-boarding On/off-boarding can be incorporated as part of the overall specification for the work. Architecture Services Page 12 of 16

4.9 Training Training can be incorporated as part of the overall specification for the work. Architecture Services Page 13 of 16

5 Commercial Arrangements 5.1 Pricing 5.1.1 Please refer to the BAE Systems Detica Government Cloud Services SFIA Rate Card to develop pricing for the services offered in this Service Definition Document. 5.1.2 Price discounts may be available dependent upon volume and specific requirements. 5.1.3 Pricing is subject to contract and delivery in the UK geography (alternative pricing will apply for other geographies). 5.2 Architecture Services Terms and Conditions 5.2.1 The full terms and conditions for this service can be found in BAE Systems Detica Terms & Conditions v1.pdf. 5.3 Ordering and Invoicing Process 5.3.1 Please refer to the separate terms and conditions document for this service 5.4 Customer Responsibilities 5.4.1 Please refer to the separate terms and conditions document for this service. 5.5 Termination Terms 5.5.1 Please refer to the separate terms and conditions document for this service. 5.6 Financial Recompense Model for Not Meeting Service Levels Not applicable. Architecture Services Page 14 of 16

6 Detica: Information Intelligence BAE Systems Detica is an information intelligence specialist. We help government and commercial organisations exploit information to deliver critical business services more effectively and economically. We also develop solutions to strengthen national security and resilience, enabling citizens to go about their lives freely and with confidence. By combining technical innovation and domain knowledge, we integrate and deliver world-class solutions often based on our own unique intellectual property to our customers most complex operational problems. We recognise the importance of Cloud services to the realisation of HMG s IT Strategy and have optimised many of our most compelling IT service offerings for Government on G-Cloud. Through these offerings we are at the forefront of realising the full benefits of Information Technology for our customers. Below is a summary of our G-Cloud services. G-Cloud Service Advisory Service Integration and Management (SIAM) Information Security Agile Design and Delivery Architecture Data Services Programme Management Digital Media Secure Mobility & Mobile Protection NetReveal OnDemand Service Description Providing Business and IT strategy and transformation advisory services, including requirements management, organisational change, and business case & benefits management. Covering all aspects of SIAM services, from target operating model design, to service integration, enterprise architecture and programme management. Cyber security assessments, architecture and testing services; Threat detection and protective monitoring services. Services delivered using the Agile method for design and development, including Secure-by-Design services. The design of end to end architecture solutions, including infrastructure, operations, applications and service, as well as enterprise architecture. Information management, data architecture design and monitoring, and training and end user development services for data management; Provision of data discovery and analysis/assessment services.. Provision of programme management and support experts to provide delivery and/or assurance of internal and external programmes. Digital transformation, media development, including user experience, social business and mobile media. From mobile strategy, through to development of your secure mobile proposition for your user base; Cloud based protection for your user base portfolio of mobile devices. Cloud based delivery of the global leader in counter fraud software. For more details on our services for G-Cloud, visit www.baesystemsdetica.com/g-cloud or send us an email at gcloud@baesystemsdetica.com. Detica is part of BAE Systems, the premier global defence, security and aerospace company. BAE Systems delivers a full range of products and services for air, land and naval forces, as well as advanced electronics, security, information technology solutions and customer support services. Architecture Services Page 15 of 16

Detica Limited is a BAE Systems company, trading as BAE Systems Detica. Detica Limited is registered in England (No.1337451) with its registered office at Surrey Research Park, Guildford, England, GU2 7YP. Copyright BAE Systems plc 2013. All Rights Reserved. BAE SYSTEMS, DETICA and the names of the BAE Systems Detica products referenced herein are trademarks of BAE Systems plc and are registered in certain jurisdictions. Architecture Services Page 16 of 16