EHJ & SJ CONSULTANCY LTD

Cyber Security Consultancy Services

We provide a range of services that focus on Cyber Security disciplines relating to Cloud and Digital migration programmes, these being:

- Security Architecture as a Service
- Security Test Management Services
- Audit, Risk and Compliance
- Security based DevOps and Application Security

Features

  • Security architecture solutions for securing cloud or cloud related systems
  • Security Risk Assessments providing in-depth technical reviews
  • Security testing or automated security compliance testing
  • Cloud cyber health checks
  • Cloud security compliance reviews and assessments
  • Cloud security transformation/migration services
  • Identity and Access Management services
  • Data security services
  • Review disaster recovery and incident management procedures
  • Management of continuous security in infrastructure deployments

Benefits

  • Ensuring security by design to meet security governance
  • Risk assessments to assess risk profile to potential cyber attacks
  • Ensure vulnerabilities are identified and continuously monitored
  • Undertake security reviews of cloud infrastructure
  • Ensure compliance to PCI-DSS, ISO27001 & CCSK
  • Understand security requirements for transforming infrastructure
  • Assessment of IAM processes to integrate with cloud-based services
  • Ensure compliance to data regulations and Privacy by design
  • Ensure resilient infrastructure and incident processes exist
  • Implementation of SecDevOps approaches for cloud deployments

Pricing

£500 to £1,100 a unit a day

  • Education pricing available

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at contactus@ehjsjconsultancy.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 12

Service ID

6 1 2 1 2 0 7 2 8 0 8 8 1 4 5

Contact

EHJ & SJ CONSULTANCY LTD Evan Jones
Telephone: 07525853562
Email: contactus@ehjsjconsultancy.co.uk

Planning

Planning service
Yes
How the planning service works
Through consultation, we will assist you to define the scope of project requirements and will support your business through its transformation journey into the Cloud. Whether you require assistance with an existing project or change, or are tackling a new 'greenfield' project, our experienced team will provide expert guidance and support as required, to ensure that you maintain a robust security profile when adopting or utilising Cloud platforms.

Our portfolio of planning services is backed by our team of experienced programme/project managers who all possess certifications in PRINCE2, ITIL, TOGAF or SABSA and will assist clients in the following areas:

- Programme Management, Assurance and Intervention;
- Project Management, Assurance and Intervention;
- Risk Management & Control;
- Target Operating Model Design;
- System Architecture Design;
- Requirements Management & Control;
- Cyber Vulnerability Investigations.
Planning service works with specific services
No

Training

Training service provided
Yes
How the training service works
The service solutions provided by EHJ & SJ Consultancy Consultants/Architects are of demonstrable value to our Clients and we ensure that we document and produce artefacts that can be transferred, through an appropriate training programme, to our Clients employees.

We utilise a number of approaches to support knowledge transfer. For example, we can offer clients e-learning on aspects relating to Cloud Security and Security Governance. Alternatively, our consultants can deliver tailored training to employees using an interactive approach to improve knowledge and understanding around Security implementation within the Cloud.

We are committed to ensuring that we cement a better understanding of the importance of Cloud security and training represents the most effective vehicle. We work closely with our clients to establish training requirements and design an effective training plan to achieve the required outcomes.
Training is tied to specific services
Yes
Services the training service works with
  • AWS
  • AZURE

Setup and migration

Setup or migration service available
Yes
How the setup or migration service works
EHJ & SJ Consultancy's detailed understanding of Cloud and Data centre security principles are deployed to assist our Clients to undergo digital migrations to the Cloud or operate and maintain a hybrid Cloud setup.

Our Security Architects have extensive experience in delivering security-based solutions which align with our core ethos of delivering security by design. We adopt a security governance approach, applying our experience and skills to adopt or extend Cloud platforms. We take an Agile approach when working with clients to ensure that their changing needs and priorities are captured. This approach assists us to balance the complexities of business requirements versus cybersecurity governance, cyber defence and costs, whilst being able to fully leverage the power of the Cloud.
Setup or migration service is for specific cloud services
Yes
List of supported services
  • AWS
  • Azure
  • Google Cloud
  • OpenShift

Quality assurance and performance testing

Quality assurance and performance testing service
Yes
How the quality assurance and performance testing works
We have implemented a quality monitoring process within our business to ensure that all work undertaken by our team is peer reviewed by either of our senior security consultants or lead security architect. We utilise a set of standardised design or solution templates when referencing architecture reviews to ensure that we are benchmarking security principles to a common format thereby ensuring a common form of consistency.

Security testing

Security services
Yes
Security services type
  • Security strategy
  • Security risk management
  • Security design
  • Cyber security consultancy
  • Security testing
  • Security incident management
  • Security audit services
Certified security testers
Yes
Security testing certifications
  • CHECK
  • CREST
  • Other
Other security testing certifications
  • AWS Security Specilist
  • AZ-500
  • Cloud Security Knowledge Certification

Ongoing support

Ongoing support service
No

Service scope

Service constraints
We provide a mixture of tailored services, a majority of which is undertaken remotely whereby we can support our clients with our in-house team via common tooling to support remote diagnostics or ad-hoc consultancy based queries. Where a more hands-on or detailed set of discussions are required then we are happy to attend any clients site to allow discussions to take place face to face (Note: this will need to be assessed given the current COVID-19 situation to ensure H&S of our employees is maintained)

User support

Email or online ticketing support
Email or online ticketing
Support response times
Our defined Service Level Agreement for raising tickets for Security Consultation queries is defined as:

Weekdays: Mon-Fri - 09:30 - 17:30

SLA Defined Levels:

High Priority Queries: 4Hrs
Medium Priority Queries: 12Hrs
Low Priority Queries: 48 Hrs
User can manage status and priority of support tickets
Yes
Online ticketing support accessibility
WCAG 2.1 A
Phone support
Yes
Phone support availability
9 to 5 (UK time), Monday to Friday
Web chat support
No
Support levels
We offer a tailored services and support levels are assessed on a Client to Client basis. Once the scope has been identified we will design and deliver a solution that meets those needs. We will establish a use-case for each Client and then deliver works to a mutually defined and agreed scope, (subject to contractual documentation), once the contract has been released by the Client.

At inception our commercial manager will establish a process that allows EHJ & SJ Consultancy and the Client to identify:
- Key Roles
- Persons Contactable under the contract
- Frequency and nature of reporting
- SLAs for response to queries or change requests

Resellers

Supplier type
Not a reseller

Staff security

Staff security clearance
Conforms to BS7858:2012
Government security clearance
Up to Security Clearance (SC)

Pricing

Price
£500 to £1,100 a unit a day
Discount for educational organisations
Yes

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at contactus@ehjsjconsultancy.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.