Hybrid Cloud Management, Orchestration and Billing Services (Cisco CloudCenter, formerly CliQr) copy
We are a Cisco CloudCenter Software partner. We engage, collaborate and deliver complete end to end Hybrid Cloud Management, Orchestration and Billing solutions including managed service options for internal and external cloud and vm support. Remove Shadow IT and grasp power and agility within internal cloud and public cloud offerings.
Features
- The ability to benchmark applications against all providers.
- Optimise the placing of applications to the Cloud.
- Optimized application sizing.
- Deploy multiple variations of a single applications to one Cloud.
- Control and understand costs with your Cloud environments.
- Move applications within minutes from one Cloud to another.
Benefits
- Forecast and Model; choose the correct Cloud for each application.
- Provision; Drag and Drop applications, don't worry about APIs.
- Billing; Ensure billing is correct at a granular level.
- Managed Service; Cost effective application management.
- Control and remove Shadow IT costs and usage.
- Low Service modelling maintenance to ensure agility.
- Integrate into front-end workstreams process to reduce complexity.
Pricing
£0.01 to £5.00 a virtual machine a month
- Education pricing available
- Free trial available
Service documents
Request an accessible format
Framework
G-Cloud 10
Service ID
5 3 5 5 6 4 2 8 5 6 4 2 2 4 4
Contact
Cloud Digital Limited
Jonathan Palmer
Telephone: 02033940114
Email: jonathan@clouddigital.io
Service scope
- Software add-on or extension
- No
- Cloud deployment model
- Hybrid cloud
- Service constraints
- No.
- System requirements
-
- Network connectivity between the on-premise networks and public Cloud/s.
- User account with administrative privileges in VMware and public Cloud.
- Installation of virtual appliances into the on-premises VMware datacentre.
- Initially, two CentOS7 or RHEL7 VMs (2cpu, 4GB, 50GB disk).
- Windows 2012 Server R2 and RHEL7 VMs in VMware/public Clouds.
User support
- Email or online ticketing support
- Yes, at extra cost
- Support response times
- Dependent upon SLA. Contract 24x7, 365 day support agreement with guaranteed response no later than 4 hours.
- User can manage status and priority of support tickets
- Yes
- Online ticketing support accessibility
- None or don’t know
- Phone support
- Yes
- Phone support availability
- 24 hours, 7 days a week
- Web chat support
- Web chat
- Web chat support availability
- 24 hours, 7 days a week
- Web chat support accessibility standard
- None or don’t know
- How the web chat support is accessible
- An in system link is provided, which opens to a new browser window.
- Web chat accessibility testing
- None.
- Onsite support
- Yes, at extra cost
- Support levels
-
Basic Support for CloudCenter provides the following technical support capabilities:
Technical Assistance Center (TAC) access 7 a.m. to 7 p.m. local time, Monday through Friday.
Address cases opened only by electronic mail or Internet.
Response as follows:
Severity 1: 1 business hour
Severity 2: 4 business hours
Severity 3: 8 business hours
Severity 4: 12 business hours
For cases received outside the 12-hour local-time window, we will respond no later than the next business day.
Premium Support for CloudCenter
In addition to those activities under Basic support, Premium Support for offers the following value-added deliverables:
TAC access 24 hours per day, 7 days a week.
Address cases opened by phone, electronic mail, or Internet.
Response within 1 hour for all calls received during standard business hours and for Severity 1 and 2 calls received outside standard business hours. For Severity 3 and 4 calls received outside standard business hours, response no later than the next business day.
Solution Support for CloudCenter delivers solution-level expertise for centralised interoperability troubleshooting, issue isolation, and case management between CloudCenter and third-party vendors in the CloudCenter solution ecosystem. This does not include support for 3rd party Vendor systems/software. - Support available to third parties
- Yes
Onboarding and offboarding
- Getting started
- We will provide various sources of on-boarding assistance including, remote tutoring, professional service installation and location specific training all supported by excellent online and printed documentation and resources.
- Service documentation
- Yes
- Documentation formats
-
- Other
- Other documentation formats
- Online
- End-of-contract data extraction
- We do not hold customer data.
- End-of-contract process
- The application is simply uninstalled and/or deleted.
Using the service
- Web browser interface
- No
- Application to install
- Yes
- Compatible operating systems
-
- Linux or Unix
- Windows
- Designed for use on mobile devices
- No
- Accessibility standards
- None or don’t know
- Description of accessibility
- The Software is available as a Service directly through their own system, via a Service Desk such as Cherwell or ServiceNow, or as a managed service via a portal through Cloud Digital.
- Accessibility testing
- N/A.
- API
- Yes
- What users can and can't do using the API
-
The service is set up by Cloud Digital 'as a service'.
Service users can model and deploy applications through the API and run programs automatically subject to governance levels. - API documentation
- Yes
- API documentation formats
- Other
- API sandbox or test environment
- Yes
- Customisation available
- Yes
- Description of customisation
-
Users can:
Install Workers.
Configure Clouds.
Create Instance Types.
Create Deployment environments.
Set up role-based access control.
Create User specific branding.
Create Multi-tenancies.
Setup plans for each tenant showing costs and usage with an option to roll-up.
Policy management - Provide age policies to set-up or shutdown VMs and Clouds - set scaling preferences to include bursting provisions - provide action notification settings.
Security/Governance - provide automatic updating of security controls for individual or groups of users - automate security patches as part of ongoing VM and application maintenance and deployment.
Scaling
- Independence of resources
- CloudCenter only operates to carry out an action or stop an action. The applications and their subsisting data reside within a VM. If CloudCenter is inoperable the applications are not. Each CloudCenter deployment is separate from any other and deployed to client specific VMs.
Analytics
- Service usage metrics
- Yes
- Metrics types
- User defined reports are available at a granular level, as well as a suite of existing reports. These cover both spend and usage, as well as Cloud performance.
- Reporting types
-
- API access
- Real-time dashboards
- Regular reports
- Reports on request
Resellers
- Supplier type
- Reseller providing extra features and support
- Organisation whose services are being resold
- Cisco, Phishme, ShieldX, AWS, Google, Cronus, Cynet, SureDatum, 8MAN
Staff security
- Staff security clearance
- Other security clearance
- Government security clearance
- Up to Developed Vetting (DV)
Asset protection
- Knowledge of data storage and processing locations
- Yes
- Data storage and processing locations
-
- United Kingdom
- European Economic Area (EEA)
- User control over data storage and processing locations
- Yes
- Datacentre security standards
- Managed by a third party
- Penetration testing frequency
- At least every 6 months
- Penetration testing approach
- ‘IT Health Check’ performed by a Tigerscheme qualified provider or a CREST-approved service provider
- Protecting data at rest
-
- Physical access control, complying with CSA CCM v3.0
- Physical access control, complying with SSAE-16 / ISAE 3402
- Physical access control, complying with another standard
- Encryption of all physical media
- Scale, obfuscating techniques, or data storage sharding
- Data sanitisation process
- Yes
- Data sanitisation type
- Deleted data can’t be directly accessed
- Equipment disposal approach
- A third-party destruction service
Data importing and exporting
- Data export approach
- Not applicable. We do not hold data.
- Data export formats
- Other
- Other data export formats
- Not applicable. We do not hold data.
- Data import formats
- Other
- Other data import formats
- Not applicable. We do not hold data.
Data-in-transit protection
- Data protection between buyer and supplier networks
-
- Private network or public sector network
- TLS (version 1.2 or above)
- Data protection within supplier network
-
- TLS (version 1.2 or above)
- Other
- Other protection within supplier network
- Users usually the level of security required, or we will advise on this point.
Availability and resilience
- Guaranteed availability
- The software is deployed to a user specific vm or combination of vm's and save for patches and upgrades will be operational continuously and in any event we work on all products to have a 98% availability.
- Approach to resilience
- N/A
- Outage reporting
- Via a service desk or front desk application users are notified directly to their inbox and additionally can have a scripted notification via a dashboard.
Identity and authentication
- User authentication needed
- Yes
- User authentication
- Username or password
- Access restrictions in management interfaces and support channels
- Our software provides specific user or user group restrictions that are user-defined and can cover not only access but also cost, spend and performance analysis.
- Access restriction testing frequency
- At least every 6 months
- Management access authentication
- Other
Audit information for users
- Access to user activity audit information
- You control when users can access audit information
- How long user audit data is stored for
- User-defined
- Access to supplier activity audit information
- You control when users can access audit information
- How long supplier audit data is stored for
- User-defined
- How long system logs are stored for
- User-defined
Standards and certifications
- ISO/IEC 27001 certification
- No
- ISO 28000:2007 certification
- No
- CSA STAR certification
- No
- PCI certification
- No
- Other security certifications
- Yes
- Any other security certifications
- CyberEssentials
Security governance
- Named board-level person responsible for service security
- Yes
- Security governance certified
- Yes
- Security governance standards
-
- CSA CCM version 3.0
- ISO/IEC 27001
- Information security policies and processes
-
We operate to an internal security information policy process which adheres to applicable legislation and regulatory requirements, This covers personal, sensitive, critical and business data. Our standards are in excess of those set out in Data Protection Legislation, including GDPR.
Our information head is our operations director who is responsible for company wide governance.
Regular, at least annual audits are carried out.
We do not, however, hold any customer sensitive personal data.
Our information head is our operations director who is responsible for company wide governance.
Regular, at least annual audits are carried out.
We do not, however, hold any customer data.
Operational security
- Configuration and change management standard
- Supplier-defined controls
- Configuration and change management approach
-
We follow a 5 step process:
1 Version Control: All changes are recorded, and we maintain full version history.
2 Baseline and release information: Last version released, what it contains, as well as deploy time.
3 Audits & Review: Audit of configuration management and versioning system properly, correctly, consistently.
4 Documented Process: An agreed upon process by all team members to ensure compliance in actual implementation.
5 Build, Integrate and Deploy Scripts: Common, standard scripts that automate the work of building, testing, integrating, deploying, and removing manual errors from the process. - Vulnerability management type
- Supplier-defined controls
- Vulnerability management approach
-
INITIAL
This stage of our vulnerability management contains minimal processes and procedures. Vulnerability scans are done by a third-party vendor.
MANAGED
This stage is in-house. We define a set of procedures for vulnerability scanning which are carried out weekly or monthly.
DEFINED
This stage the information security team has support from the executive management as well as the system administrator.
QUANTITATIVELY MANAGED
This stage the specific attributes of a program are quantifiable and metrics are provided to the management team.
OPTIMIZED
This stage, metrics are targeted for improvement which ensures that the program continuously reduces the attack surface. - Protective monitoring type
- Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
- Protective monitoring approach
-
Comprehensive 24 x 7 monitoring and alerting. We collect log data on the activities of both systems and users, and review and audit it in near real-time. Coupled with intelligent baselining and effective prioritisation, which enables critical alerts to be raised to the right people at the right time.
We decipher the information generated through monitoring, keep security informed around the reason the output was generated.
We provide regular reports and reviews to ensure the service continues to deliver at the expected levels. This means no issues are missed, and alerts can be analysed and understood after the event. - Incident management type
- Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
- Incident management approach
-
The process follows pre-defined stages:
Incident identification - logged by user or internal operative
Incident logging - user loggin
Incident categorization
Incident prioritization
Initial diagnosis
Escalation, as necessary
Incident resolution
Incident closure
Communication with the user community throughout the life of the incident.
Incident management is not expected to perform root cause analysis to identify why an incident occurred as the focus is on doing whatever is necessary to restore the service. This often requires the use of a temporary fix, or workaround.
Secure development
- Approach to secure software development best practice
- Supplier-defined process
Public sector networks
- Connection to public sector networks
- No
Pricing
- Price
- £0.01 to £5.00 a virtual machine a month
- Discount for educational organisations
- Yes
- Free trial available
- Yes
- Description of free trial
- This is normally by way of a Proof of Concept where Cloud Digital will deploy an instance of CloudCenter and install applications on behalf of the User to test and scale.