One operating environment, many places

Applications may operate across:

  • Data centres
  • Private cloud
  • Public cloud
  • Branch offices
  • Edge computers
  • Remote sites
  • Mobile assets
  • Field devices
  • User endpoints

Networks connect these environments.

Cybersecurity must be enforced across every layer.

Monitoring must provide visibility across infrastructure, applications and devices.

Complex ICT systems succeed when architecture, equipment, software, networks, installation, integration, testing and operations are engineered together.

Aerial view of a large data-centre roof with rows of cooling units and backup generators
Distributed ICT environmentCentral platforms (data centres, private cloud, public cloud) and distributed locations (branch offices, edge computers, remote sites, mobile assets, field devices, user endpoints) are all connected by a network. A security boundary encloses every layer and a monitoring band observes infrastructure, applications and devices.Cybersecurity enforced across every layerCentral platformsApplications run across theseNetworkData centresPrivate cloudPublic cloudDistributed locationsBranch officesEdge computersRemote sitesMobile assetsField devicesUser endpointsMonitoringVisibility across infrastructure, applications and devices: servers, storage, networks, interfaces, edge devices and field equipment
How the capabilities relate. Central platforms and distributed locations share one network. Security is enforced across every layer, and monitoring observes all of it.

Where the work happens

The same engineering discipline applies in a data hall, a network room, a street cabinet and a security operations room.

Rear of a server rack with rows of rack-mounted units and white Ethernet cables dressed down the side
Open roadside fibre street cabinet showing rows of green termination modules
Technician working at the front of a wall-mounted network rack with a switch and patched cabling
A curved video wall of status displays above a long curved bank of operator consoles in a large facility control room.

The nine capability areas

Each area has its own page. Each also depends on the others, which is why they are designed, delivered and operated together.

Capability 1

Data Centre Infrastructure

The core platform on which enterprise applications, databases, analytics workloads and private cloud run. Its power, cooling, network and recovery design set the availability ceiling for everything above it.

Role in the whole: Provides the compute, storage and recovery platform that applications and private cloud run on.

Read the capability
Capability 2

Cloud and Platform Infrastructure

The layer that turns data-centre and public-cloud capacity into governed, self-service platforms, with identity, networking, security and cost control defined once and applied consistently.

Role in the whole: Extends that platform into private, hybrid and public environments under common governance.

Read the capability
Capability 3

Enterprise Networking

The connective layer between users, applications, data centres, cloud, branches and field sites. Bandwidth, latency, segmentation and redundancy decisions made here determine how every other layer behaves under load and fault.

Role in the whole: Connects every location and environment, and carries the segmentation that security depends on.

Read the capability
Capability 4

Cybersecurity Infrastructure

Security controls built into every layer — network, identity, endpoint, application, data and backup — together with the monitoring and recovery capability to detect an event and restore service after one.

Role in the whole: Applies controls at each layer and provides the recovery capability when a layer is compromised.

Read the capability
Capability 5

Edge and Field Systems

ICT systems deployed where the operation happens — roadside, on vehicles, in stations and utility sites — engineered for power, enclosure, climate, connectivity and maintenance conditions that a data centre never faces.

Role in the whole: Puts processing and devices where the operation happens, under power, climate and connectivity limits.

Read the capability
Capability 6

Enterprise Applications

Application platforms implemented together with the servers, databases, identity services, networks and integrations they depend on, so that performance and availability are engineered across the whole stack.

Role in the whole: Delivers the business and operational platforms that depend on all of the layers beneath them.

Read the capability
Capability 7

Integration and Interoperability

The defined, tested, monitored connections between applications, devices, databases, clouds and external agencies, so that independently built systems exchange data reliably and securely.

Role in the whole: Joins applications, devices and external systems through defined and tested interfaces.

Read the capability
Capability 8

Monitoring and Observability

Operational visibility designed with the system, not after it: what is measured, how signals are collected and correlated, who is alerted, and what each audience needs to see.

Role in the whole: Provides visibility across infrastructure, applications and devices so that conditions can be managed.

Read the capability
Capability 9

Managed Operations and Maintenance

The ongoing operating responsibility: service desk, incidents, problems, changes, preventive maintenance, assets, spares, field support and reporting.

Role in the whole: Keeps the whole system performing after go-live through service management, maintenance and lifecycle planning.

Read the capability

How to read these pages

Each capability page sets out the scope of work, the engineering considerations that shape design, and a diagram of the technical concept. Method pages explain how we work across all of them.

Discuss an ICT Requirement

Describe the requirement, the locations involved and where the project stands. We will respond with the technical questions that need answering first.

Discuss an ICT Requirement