01

How a managed estate is run

Signals from every layer, alerts with a first action, tickets in your ITSM, and recovery that is drilled.

Managed Cloud Operations
telemetrytracesalarmsticketescalatebackupsdrillsAWS CloudWorkload accountsObserve · metrics, logs, tracesDetect and routeProtect and recoverService management · the customer's ITSMNGT operations teamImprove · every monthAmazon EC2Amazon EKSAmazon Aurora / RDSfor PostgreSQLOpenTelemetrycollector and agentsAmazon CloudWatchAWS X-RayManaged PrometheusdashboardsAlert rulesfirst action on eachNotificationchannelsor EventBridgeAWS Security HubfindingsAWS Cost ExploreranomaliesAWS BackupPartner DR solutionAWS Systems ManagerServiceNowor the customer's ITSMTeam channelTeams or SlackRunbooksone per alertProblem and changeroot cause, then fixL1 / L2 operationson callL3 engineerscloud and app expertsRecovery drillstabletop to zone drainCost reviewrates, trends, savingsService reportSLA, incidents, trendsPost-incident reviewblameless

Point at a component to light its links; select it for what it does here and the practice that makes it right on AWS.

Point at a component to see what it does; select it for the best practice.Open the architecture
02

What the managed service covers

Eight areas. Customers choose the ones they need; the rest stay with their own teams.

03

Reference service levels

NGT's reference SLA: the starting point, agreed per customer.

PriorityTypical caseResponseResolution
P1 · CriticalProduction down with no workaround, or financial closing blocked30 minutes4 hours
P2 · HighProduction degraded with a workaround, or a critical non-production system down4 working hours1 working day
P3 · MediumNon-critical degradation; one function failing1 business day3 business days
P4 · LowMinimal impact, not time-sensitive3 business days5 business days
Compliance frameworks we work to

ISO 27001, HIPAA/HITRUST, PCI DSS, GDPR, CIS benchmarks and OWASP: the customer's frameworks we implement and operate, not certifications held by NGT.

04

Observability: hear about incidents before users do

Open standards from the application to the dashboard, so the stack can change without losing history.

  1. 01InstrumentOpenTelemetry in the application and agents on hosts: metrics, logs and traces from one standard.OpenTelemetryAPMReal user monitoringSynthetics
  2. 02Collect and enrichA telemetry pipeline adds context and routes each signal to the right store.Collector pipelineEnrichmentMulti-tenant routing
  3. 03StoreMetrics, logs and traces in back ends built on object storage, queried together.PrometheusGrafana LokiGrafana TempoDatadogSplunk
  4. 04Show and alertRED dashboards per service; each alert routed with its first action written on it.GrafanaService dashboardsRunbook linksOn-call routing
Golden Signals for users · RED for services · USE for infrastructure
05

Backup and DR, tested rather than assumed

A backup job that reports success is not a recovery plan. Every link in the chain is checked.

  • Targets per systemRecovery point and time objectives come from the business owner, system by system.
  • Verify the backup chainAlert on a broken chain, not only a failed job; restore, time it, record the gap.
  • Drill in tiersTabletop, then an isolated restore in another region, then a zone drain; again after major changes.
  • Close the gap in phasesA cost ladder from backup-only to warm standby; the owner picks the step that fits.
Disaster Recovery to the Cloud
replicationbackup copiesfailoverdrillalarmsSecond sitePrimary siteOperations teamAWS CloudRecovery RegionBackup accountStaging area subnetIsolated VPC · drillsRecovery VPCShared servicesStandby serversclosed after the testApp serversDatabase serversDR runbookdrill · failover · failbackAWS Direct ConnectAWS Elastic DisasterRecoveryReplication serverslow-cost disksAWS BackupVault LockDrill serverslaunched for a drillApp serverslaunched on failoverDatabase serverslaunched on failoverDomain controlleralways runningIAM Identity Centeremergency accessAmazon Route 53names fail overAmazon CloudWatch

Point at a component to light its links; select it for what it does here and the practice that makes it right on AWS.

Point at a component to see what it does; select it for the best practice.Open the architecture
SourcesNGT Service Offering v2.0 (Mar 2025)NGT Service Offering v3.2 (Jul 2026)NGT DevOps–AI Service Offering (Oct 2026)NGT Azure Service Offering v1.0 (Dec 2024)NGT Google Cloud Service Offering v0.1NGT Cloud Operation Service Offering v0.2 (Jan 2025)FPT Software AWS Cloud Journey Service Offering V3FPT Software Cloud Transformation Capabilities (2024)FleziLift method and runbook (Oct 2026)