CISILION LIMITED

Cisilion FinOps Reporting (Azure & Microsoft 365)

Cisilion provides Azure FinOps Reporting supported by proactive monitoring, trend analysis, and detailed consumption insights to optimise cloud utilisation and spend. Extended capability includes light Microsoft 365 FinOps Reporting, providing visibility into licensing consumption and tenant usage to support cost governance

Features

• Azure cost analysis with proactive insight reporting
• Consumption trend tracking and utilisation intelligence dashboards
• Monthly FinOps reporting aligned to service review cycles
• Azure resource optimisation recommendations based on usage.
• Compliance to contracted scope of Azure assets
• Service delivery using delegated secure access models
• Microsoft CSP integration for applicable Azure billing visibility
• Microsoft 365 licence usage analysis and optimisation.
• M365 consumption dashboards aligned to FinOps best practice
• Incident, request, and change workflows via ITIL‑aligned processes

Benefits

• Improved visibility of Azure spend through structured monthly consumption reporting
• Identification of under‑utilised or over‑sized Azure resources
• Reduced cloud overspend through actionable optimisation recommendations
• Clear alignment to incident, request, and change processes
• Integrated service management via Client Success Manager and service review
• Enhanced oversight of Microsoft 365 licensing utilisation, reducing unused licence
• Better stakeholder decision‑making through consolidated Azure + M365

• Education pricing available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at drichardson@cisilion.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

116647957601801

Contact

Debbie Richardson
01372 201145
drichardson@cisilion.com

About your service

• Service categories:

  Systems Infrastructure Software

  Cloud Financial Management

  • Cloud Financial Management (FinOps)
• Multi cloud support: Yes

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: Your service primarily extends Microsoft’s ecosystem, including Microsoft 365, Office 365, Exchange Online, SharePoint Online, Azure, Windows Server, Dynamics 365, Power Platform, Power BI, and Enterprise Mobility + Security (EMS), enabling enhanced management, support, and optimisation across these platforms
• Cloud deployment model: Public cloud
• Service constraints: Our service includes planned maintenance windows, typically scheduled outside business hours to minimise disruption. Managed Services for on-premises hardware require a valid vendor-backed maintenance agreement, and support is limited to devices listed in the agreed inventory. Certain advanced management actions, such as vulnerability management, may require clients to purchase higher service tiers. Hardware replacement and troubleshooting follow SLA terms, and clients must maintain suitable environmental conditions for supported equipment to ensure compliance and service continuity.
• System requirements:
  • Provide accurate list of Azure resources and servers in scope
  • Grant delegated access, e.g., Azure Lighthouse, for visibility
  • Enable delegated admin or reporting access for M365 reporting
  • Dependencies include network, authentication systems, cloud configuration details.

User support

• Email or online ticketing support: Yes
• Support response times: Cisilion Support responds to critical incidents within 60 minutes during business hours, with high-priority cases in two hours and medium within four. Low-priority requests are addressed within six hours. Weekend and out-of-hours support is available only by prior agreement and may involve extended response times or additional charges
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 AA
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Cisilion offers tiered support levels to meet diverse client needs. Basic provides remote monitoring and incident logging, ideal for stable environments. Enhanced adds proactive monitoring and remote technical assistance, plus one on-site engineer day per month. Premium delivers full on-site troubleshooting, proactive monitoring, and priority escalation for complex issues. All tiers include 24x7 Service Desk access, ITIL-aligned processes, and Smart Portal visibility for ticket tracking and SLA reporting. Costs vary by level: Basic is the most economical, Enhanced adds a moderate uplift for proactive services, and Premium commands a higher rate for comprehensive coverage and field engineering. Pricing is tailored per device count and SLA requirements, ensuring flexibility for budgets and operational priorities. For strategic guidance, Premium clients benefit from a Technical Account Manager (TAM) who oversees service performance and improvement plans. Cloud-focused engagements can include a Cloud Support Engineer for advanced troubleshooting and optimisation of Azure, M365, and hybrid environments. These roles ensure expert oversight and alignment with business objectives
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Cisilion will onboard the service by confirming the Azure resources, servers, devices, or asset volumes defined in the contract. A Service Architect will validate the correct service tier and ensure supported Azure environments and Microsoft 365 tenants are clearly identified. Delegated access models (e.g., Azure Lighthouse) will be established, and reporting schedules agreed. Any optional add‑on components will be explicitly identified in the proposal and contract.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: On termination of service, delegated access will be removed, reporting outputs will be provided up to the final service month, and any outstanding incidents, problems, or changes will be managed to closure or handed back to the client. Cisilion will supply a summary of historic FinOps insights upon request.
• End-of-contract process: At the end of the contract, services are terminated in line with agreed terms, and any remaining deliverables or documentation are handed over to the client. Included in the price are professional services such as design, installation, consultancy, and project management, along with agreed hardware or software deliverables. Reasonable expenses are invoiced at cost. Additional costs may apply for late cancellations, scope changes, extra consultancy days beyond the agreed Statement of Work, or failure to meet client responsibilities (e.g., site access). Hardware or software purchased outside the original scope and expedited changes are also chargeable
• Documentation accessibility standard: WCAG 2.2 AA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The mobile service offers a streamlined interface optimised for smaller screens, enabling quick access to core features such as viewing files, joining conversations, and using voice commands for hands-free interaction. Desktop provides full functionality, including advanced configuration, reporting, and integration with enterprise tools like SharePoint and Power BI. While mobile prioritises convenience and portability, desktop supports complex workflows and administrative tasks. Both maintain secure access and synchronisation across devices for a consistent user experience.
• Service interface: Yes
• User support accessibility: WCAG 2.2 AA
• Description of service interface: The service interface is provided through the Meraki dashboard, a secure, browser-based portal accessible via Microsoft Edge, Chrome, Firefox, and Safari. It offers intuitive navigation for configuration, monitoring, and reporting, enabling real-time visibility and control of network assets. Users can manage policies, view analytics, and apply changes without additional software installation. The interface supports role-based access, ensuring only authorised personnel can perform administrative tasks. Mobile compatibility ensures seamless management across devices for flexibility and convenience.
• Accessibility standards: WCAG 2.2 AA
• Accessibility testing: We conducted User Acceptance Testing (UAT) with diverse participants, including those using assistive technologies such as screen readers and voice input tools. Testing focused on validating accessibility compliance, ensuring navigation, form inputs, and interactive elements function correctly across devices and browsers. Users provided feedback on compatibility with Microsoft 365 productivity tools and remote access scenarios. Role-specific workflows were tested to confirm usability for critical applications. Findings were documented, and adjustments were made to meet WCAG standards, ensuring an inclusive experience for all users and minimising barriers for individuals with varying technical proficiency.
• API: Yes
• What users can and can't do using the API: What users can do; ; Set up: Generate/assign an API key to an authorised dashboard role, then programmatically onboard networks/devices (zero‑touch), link to ITSM, and register webhooks for eventing (e.g., Teams/ServiceNow). [Cisilion Response | Word]; Make changes: Use the REST API to automate configuration (SSIDs, VLANs, security policies), query telemetry, and update monitoring thresholds; integrate with monitoring (e.g., ScienceLogic) via our managed API connection. [Cisilion Response | Word], [APM - Clie...anual v1.2 | Word], [SD Minor - Meraki | Word]; ; Limitations / guardrails; ; API keys require appropriate dashboard permissions; some sensitive actions may be restricted to change windows and ITIL change control (Manage tier) rather than ad‑hoc API calls. [Service De...ki Service | Word]; Vendor rate limits and endpoint coverage apply; a small subset of settings may only be available in the GUI or via approved runbooks. [Service De...ki Service | Word]; Stable connectivity to the vendor cloud is required; unsupported third‑party systems and break/fix are out of scope for API automation.
• API documentation: Yes
• API documentation formats:
  • HTML
  • PDF
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: Users can customise network policies, security rules, branding, and access controls. Customisation is performed through the service interface for configuration changes, Intune policies for device-level adjustments, or API integration for automation and advanced tasks. Only administrators and authorised technical teams with appropriate permissions can make changes, following ITIL-aligned change control processes. This ensures flexibility while maintaining compliance and security across all environments.

Scaling

• Independence of resources: We guarantee service stability through robust multi-tenant architecture and proactive resource management. Capacity planning ensures sufficient compute, storage, and network resources to handle peak demand without impacting other users. Automated load balancing distributes workloads evenly, while performance monitoring identifies potential bottlenecks early. Service Level Agreements (SLAs) define minimum availability and response times, supported by vendor-backed maintenance and escalation processes. This approach ensures consistent performance, resilience, and compliance with agreed KPIs, regardless of concurrent user activity.

Analytics

• Service usage metrics: Yes
• Metrics types: The Fin Opps Reporting service provides detailed usage metrics to support financial governance and optimisation. Key metrics include total Azure spend, forecasted costs, and budget versus actual analysis. Reports highlight top cost contributors and savings achieved through optimisation actions. Monthly dashboards and tailored reports offer insights into consumption trends, cost anomalies, and utilisation patterns. These metrics enable proactive management, accurate forecasting, and identification of cost-saving opportunities, ensuring alignment of cloud expenditure with business priorities.
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: Yes
• FOCUS resource tagging: Yes

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: Microsoft

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CHECK service provider
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Physical access control, complying with another standard
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Data Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase

Data importing and exporting

• Data export approach: Users can export their data through the Meraki dashboard or via the API, ensuring flexibility for different operational needs. Supported formats include CSV and JSON, enabling easy integration with external systems or reporting tools. The dashboard provides manual export options for device configurations and logs, while the API supports automated extraction for large-scale or scheduled tasks. Cisilion offers guidance throughout the process to ensure secure and compliant data handling at contract end or during service transitions.
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: We guarantee 99.99% service availability, supported by robust high-availability architecture and automated failover mechanisms. Our Service Level Agreement (SLA) ensures minimal downtime, with proactive monitoring and redundancy across regions. In the unlikely event of non-compliance, customers are refunded through service credits, calculated based on the duration and severity of the outage, as defined in the SLA. This approach provides transparency and assurance that performance commitments are met. Backup and restore procedures, combined with resilient infrastructure, further reinforce reliability and continuity, ensuring critical services remain accessible and aligned with contractual obligations.
• Approach to resilience: Our service is designed for resilience through redundant architecture, high-availability configurations, and proactive monitoring. Datacentres comply with recognised standards such as CSA CCM v4.0 and SSAE-18 / ISAE 3402, ensuring robust physical and logical security. We implement geographically diverse failover sites, automated replication, and disaster recovery plans to maintain continuity during outages. Continuous health checks, predictive analytics, and ITIL-aligned processes underpin reliability. Resiliency testing is performed regularly to validate failover mechanisms. If detailed datacentre design is required, this information is available on request to maintain confidentiality while meeting compliance and assurance needs.
• Outage reporting: Our service reports outages through multiple channels to ensure transparency and timely communication. A public dashboard provides real-time visibility of service status and incident updates. Customers can also access outage information via an API, enabling integration with their monitoring tools for automated alerts. Additionally, email notifications are sent to designated contacts for immediate awareness of any service disruption. This multi-layered approach ensures clients remain informed through their preferred method, supporting proactive management and compliance with service level commitments.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Dedicated link (for example VPN)
  • Username or password
• Access restrictions in management interfaces and support channels: Access to management interfaces and support channels is strictly controlled through role-based access controls (RBAC) and enforced Multi-Factor Authentication (MFA). Privileged accounts are limited to authorised personnel and monitored continuously for compliance. All administrative actions are logged and audited to detect anomalies. Support channels require identity verification before any changes or sensitive information is shared. Segregation of duties and least-privilege principles ensure minimal exposure, while regular reviews and automated alerts maintain security and prevent unauthorised access across all environments.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: We follow an ISO27001-certified Information Security Management System (ISMS) supported by documented policies and procedures to protect confidentiality, integrity, and availability of information. Policies cover physical security, operations, incident management, and compliance with statutory and contractual requirements. All employees and subcontractors complete mandatory security awareness training annually and must report suspected breaches immediately to the Compliance Manager. Governance is enforced through a clear reporting structure, with accountability at senior management level and regular audits to ensure adherence. Breaches trigger investigation and corrective actions, with lessons integrated into continuous improvement processes.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: Our configuration and change management processes follow ITIL principles and ISO27001 standards. All service components are tracked throughout their lifecycle using a central Configuration Management Database (CMDB), ensuring accurate asset records and version control. Changes undergo formal assessment for potential security impact, including risk analysis and approval by the Change Advisory Board (CAB). Automated monitoring and audit trails validate compliance, while rollback plans mitigate risk. Regular reviews and documented workflows ensure transparency, security, and continuous improvement across all environments.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: Our vulnerability management process uses industry best practices and the NIST National Vulnerability Database for threat intelligence. We continuously review vendor advisories and CVE updates to identify critical vulnerabilities (CVSS score 9–10). Threats are assessed for severity and potential impact on supported assets, with remediation plans created for managed clients. Patches for critical vulnerabilities are prioritised and deployed promptly following testing to ensure stability. This proactive approach minimises risk and maintains compliance with ISO27001 and ITIL standards
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: Our protective monitoring processes use advanced SIEM tools and continuous log analysis to identify anomalies and potential compromises. Alerts are generated for suspicious activities, such as unauthorised access or unusual network behaviour. When a potential compromise is detected, our incident response team initiates investigation immediately, isolates affected systems, and applies remediation measures. We operate under strict SLAs, responding to critical incidents within one hour, ensuring rapid containment and recovery. Regular audits and threat intelligence updates strengthen proactive defence.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: Our incident management process follows ITIL-aligned procedures with pre-defined workflows for common events, such as service outages or security breaches. Users can report incidents via the service portal, email, or phone, ensuring rapid escalation. Each incident is logged, categorised, and prioritised for resolution. We provide detailed incident reports through the portal or email, including root cause analysis, corrective actions, and resolution timelines. Continuous improvement reviews ensure lessons learned are integrated into future processes, maintaining compliance and service reliability.
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: Yes
• Connected networks: Health and Social Care Network (HSCN)

Pricing

• Discount for educational organisations: Yes
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 2%
• Between £500,001 and £1,000,000: 2.5%
• Between £1,000,001 and £2,500,000: 3.5%
• Between £2,500,001 and £5,000,000: 4%
• Over £5,000,001: 4.5%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: British Assessment Bureau
• ISO/IEC 27001 accreditation date: Tuesday 2 September 2025
• What the ISO/IEC 27001 doesn’t cover: Ur ISO/IEC 27001 certification covers the design, support, and delivery of IT solutions within the defined scope of our Statement of Applicability. However, it does not extend to every element of our operations or third-party services. Specifically, outsourced cloud platforms such as Microsoft Azure or other vendor-hosted environments fall outside our certification boundary, although these providers maintain their own ISO certifications. Additionally, ISO/IEC 27001 audits are not designed to detect or prevent criminal activity or guarantee immunity from breaches; they confirm compliance with an Information Security Management System, not absolute security. The certification also excludes any services or processes not listed in the approved scope, such as certain subcontractor activities or bespoke client systems. While we maintain rigorous controls internally, gaps are mitigated by requiring partners to hold equivalent certifications and by implementing contractual security obligations. This layered approach ensures comprehensive coverage while acknowledging the limitations inherent in the standard.
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: British Assessment Bureau
• ISO 9001 accreditation date: Tuesday 9 September 2025
• What the ISO 9001 doesn’t cover: CopilotOur ISO 9001 certification applies to the quality management system governing our core services and processes within the defined scope. However, it does not cover every aspect of our operations. Specifically, activities outside the documented scope, such as bespoke client solutions developed under separate agreements, fall outside certification boundaries. Third-party services and subcontractor activities are also excluded, although we require them to maintain equivalent quality standards contractually. ISO 9001 does not guarantee product performance or compliance with external regulations; it focuses on process consistency and continual improvement rather than technical specifications. Additionally, non-operational functions such as marketing or certain administrative tasks may not be included in the certified scope. While these exclusions exist, we mitigate risks through robust supplier management, internal audits, and adherence to best practices across all areas. This ensures that even non-certified elements align with our commitment to quality, delivering reliable outcomes and maintaining customer satisfaction
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 625ce49e-bafe-4222-8e24-8f43e5e0dc48
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 17f5ab9f-5b07-4bab-a2a1-458a07801692
• Other security certifications: Yes
• Any other security certifications: Cisco Advanced Security Architecture Specialisation

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • New apprenticeships on the contract workforce in the relevant area that meet the criteria set out in MAC 1b
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Plans to engage the contract workforce in deciding the most important workplace issues to address
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Activities to cascade good practice on fair working conditions throughout the supply chain
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
    • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
    • Plans for an appropriate income replacement policy for staff who are required to spend time away from work to care for a sick dependent or close relative
    • Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Volunteering opportunities for staff
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
    • Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
    • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling
    • How these flow down the supply chain and are monitored Illustrative examples include reporting, site visits, audits, etc.
    • How to ensure business decisions re: price/cost, short lead times, payment timescales do not create modern slavery risks in the supply chain
    • Means of influencing staff, suppliers, customers, communities and/or any other appropriate stakeholders with respect to modern slavery risks relating to the contract

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering
    • Delivery of apprenticeships, supported internships and T Level industry placement opportunities (Level 2, 3 and 4+) in relation to the contract

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Activities to identify opportunities to open up sub-contracts under the prime contract to a diverse range of businesses, including new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Plans for engaging a diverse range of businesses in engagement activities prior to appointing subcontractors (including activities prior to award of the main contract and during the contract term)
    • Activities that demonstrate a collaborative way to work with a diverse range of businesses as part of the supply chain
    • Advertising of supply chain opportunities openly and to ensure they are accessible to a diverse range of businesses, including advertising all subcontracting opportunities on Contracts Finder

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
    • Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
    • Creation of employment opportunities particularly for those who face barriers to employment, such as prison leavers, care leavers and/or who are located in deprived areas, and for people in industries with known skills shortages or in high growth sectors
    • Delivery of training schemes and programmes to address any identified skills gaps and under-representation in the workforce for the contract (e.g. prison leavers, care leavers, kinship carers, disabled people)
    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort
    • Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Collection of the views and expertise of disabled people and their representative organisations on successfully supporting disabled employees or applicants
    • Inclusive and accessible recruitment practices, and retention-focused activities, including those provided in the Guide for line managers on recruiting, managing and developing people with a disability or health condition
    • Other measures to provide equality of opportunity for disabled people and those with health conditions into employment, including becoming a Disability Confident employer and inclusion of supported businesses in the contract supply chain

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at drichardson@cisilion.com. Tell them what format you need. It will help if you say what assistive technology you use.