Redinet Ltd

Virtual Machine and Network Infrastructure

Virtual machines sized exactly to your requirements. Built to order within hours. Redinet also manage the surrounding network so can help you to design the network, IP addressing and security.

Features

  • Fully supported by Redinet Ltd technical support
  • Based on VMware and Hewlett Packard Infrastructure
  • Completely bespoke builds for your organisation
  • Choose to self-manage or have Redinet manage
  • Choice of connectivity and security options
  • Use of Microsoft, Citrix, Veeam and Kaspersky SPLA programs

Benefits

  • Equipment and storage is owned and managed by Redinet
  • 24/7 full user support available
  • Pay for the exact size of Server you need

Pricing

£10 per person per month

  • Education pricing available
  • Free trial available

Service documents

Framework

G-Cloud 11

Service ID

5 6 4 2 7 5 4 8 7 1 3 7 5 8 1

Contact

Redinet Ltd

Colin Bridle

02082497000

sales@redinet.co.uk

Service scope

Service constraints
No designed constraints.
System requirements
N/A

User support

Email or online ticketing support
Email or online ticketing
Support response times
Within one hour
User can manage status and priority of support tickets
Yes
Online ticketing support accessibility
None or don’t know
Phone support
Yes
Phone support availability
24 hours, 7 days a week
Web chat support
No
Onsite support
Yes, at extra cost
Support levels
We provide support from Monday to Friday 9am to 5pm remote support through to our of hours on site support. Cost will vary depending on the package the buyer requires.

£50 per hour workshop time.
£650 per day per onsite engineer
24/7 support is available on request

Please see our SFIA rate card for further detail
Support available to third parties
Yes

Onboarding and offboarding

Getting started
Depending on the customer requirements, we can help during the initial on-boarding process by providing a technical discovery and implementation process, project management etc, and post-on-boarding help provided by onsite, or remote assistance etc.
Service documentation
Yes
Documentation formats
PDF
End-of-contract data extraction
We can provide an off boarding service to assist users. The process of data extraction can be discussed, as there are a number of methods available, depending on the customer requirements.
End-of-contract process
Off boarding can be included in any contract

Using the service

Web browser interface
No
API
No
Command line interface
No

Scaling

Scaling available
No
Independence of resources
We use dynamic resource scheduling on the hypervisor platform, and guard-railing within the storage environment, for example.
Usage notifications
Yes
Usage reporting
  • Email
  • Other

Analytics

Infrastructure or application metrics
No

Resellers

Supplier type
Not a reseller

Staff security

Staff security clearance
Other security clearance
Government security clearance
Up to Developed Vetting (DV)

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
United Kingdom
User control over data storage and processing locations
No
Datacentre security standards
Complies with a recognised standard (for example CSA CCM version 3.0)
Penetration testing frequency
At least once a year
Penetration testing approach
‘IT Health Check’ performed by a CHECK service provider
Protecting data at rest
Physical access control, complying with another standard
Data sanitisation process
Yes
Data sanitisation type
Explicit overwriting of storage before reallocation
Equipment disposal approach
Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Backup and recovery

Backup and recovery
Yes
What’s backed up
  • Files
  • Virtual machines
  • Emails
  • Databases
Backup controls
Users can specify what they would like backed up and how often and for how long they would like backed up data held.
Datacentre setup
Single datacentre with multiple copies
Scheduling backups
Supplier controls the whole backup schedule
Backup recovery
Users contact the support team

Data-in-transit protection

Data protection between buyer and supplier networks
  • Private network or public sector network
  • IPsec or TLS VPN gateway
Data protection within supplier network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Other
Other protection within supplier network
Dedicated firewalls, VLANs etc., also work to protect each user environment.

Availability and resilience

Guaranteed availability
Our Standard SLA is a Valid 1 Hr response to all issues. Helpdesk tickets are not just logged but validated, given an onwer and responded to within 1 Hour

SLAs for uptime depend on the Services supplied. Our Datacentre is a Tier3 datacentre and currently has a 100% uptime on services we use within it.

Individual Service uptime SLAs are supplied by Hardware Vendors, and software suppliers as components, that build up to Services we supply
Approach to resilience
Our platform, the infrastructure, and the datacentre(s) we use are designed with resilience in mind. Further information is available on request.
Outage reporting
Email alerts, monitoring dashboard, telephone

Identity and authentication

User authentication
  • Dedicated link (for example VPN)
  • Username or password
Access restrictions in management interfaces and support channels
Access is restricted according to our ISO 27001 policy.
Access restriction testing frequency
At least every 6 months
Management access authentication
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)
  • Username or password
Devices users manage the service through
  • Dedicated device on a segregated network (providers own provision)
  • Dedicated device over multiple services or networks
  • Any device but through a bastion host (a bastion host is a server that provides access to a private network from an external network such as the internet)
  • Directly from any device which may also be used for normal business (for example web browsing or viewing external email)

Audit information for users

Access to user activity audit information
Users contact the support team to get audit information
How long user audit data is stored for
Between 1 month and 6 months
Access to supplier activity audit information
You control when users can access audit information
How long supplier audit data is stored for
Between 1 month and 6 months
How long system logs are stored for
Between 1 month and 6 months

Standards and certifications

ISO/IEC 27001 certification
Yes
Who accredited the ISO/IEC 27001
Lloyd's Register Quality Assurance Ltd
ISO/IEC 27001 accreditation date
Current Issue Date: 27 January 2017
What the ISO/IEC 27001 doesn’t cover
The scope of this approval is applicable to:
Activities including and associated with the provision of IT based server hosting, support services and
equipment reselling. Statement of Applicability V5
ISO 28000:2007 certification
No
CSA STAR certification
No
PCI certification
No
Other security certifications
No

Security governance

Named board-level person responsible for service security
Yes
Security governance certified
Yes
Security governance standards
ISO/IEC 27001
Information security policies and processes
ISO 27001

Operational security

Configuration and change management standard
Supplier-defined controls
Configuration and change management approach
We run change Control and configuration management in our ITIL framework.

Configuration and Change Control is applied to any service affecting multiple customers, and individual changes are controlled in bespoke tailoired Service as part of our Dedicated Hosting and Support Agreements
Vulnerability management type
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Vulnerability management approach
We operate within a Tier3 Datacentre, and are protected from DDoS attacks using software controlled by the datacentre

We have an Annual Penetration Test by an External Party, and we assess and fix items found regulalry

We are audited multiple times a year with our ISO 27001 accreditation, and our Internet Security group (ISG) meet monthly to assess risks, check status of actions, and research on recent and upcoming potential threats to us and our customers
Protective monitoring type
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Protective monitoring approach
Within our ISO 27001 controls we have penetration testing
We have Perimeter firewalls which are checked daily
We have monitoring and alerting setup with two different vendor COTs products to keep the teams alert.
The ISG will meet immediately upon finding of any incidents, we meet (at least) quarterly to review risks and any incidents service requests, or events that occur
Incident management type
Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
Incident management approach
We have a central incident management ledger and run Incident and problem management within our ITIL designed Service Desk

Secure development

Approach to secure software development best practice
Supplier-defined process

Separation between users

Virtualisation technology used to keep applications and users sharing the same infrastructure apart
Yes
Who implements virtualisation
Supplier
Virtualisation technologies used
VMware
How shared infrastructure is kept separate
Using software as dictated by our ISO27001 agreement

Energy efficiency

Energy-efficient datacentres
Yes
Description of energy efficient datacentres
Our PUE regularly drops below 1.2, meaning that for every 1kW used to power equipment hosted in the data centre, we use 0.2kW of power to operate all related areas of infrastructure, such as cooling, lighting, etc. These efficiencies not only allow us to benefit the world around us but to pass on savings to our clients.

Pricing

Price
£10 per person per month
Discount for educational organisations
Yes
Free trial available
Yes
Description of free trial
If a cutomer was interested in a free trial we could possibly something to suit their needs within a limited time frame. This would depend on the complexity of the service they were looking for as some services would be too costly to implement on a trial basis.

Service documents

Return to top ↑