Creative Networks

Backup-as-a-Service – BaaS

N-able's BaaS provides automated, secure backups for businesses, safeguarding critical data from loss or corruption. With features like continuous protection and flexible scheduling, it ensures minimal downtime and easy recovery options, offering peace of mind for businesses of all sizes.

Features

• Continuous data protection: Near-instantaneous backups for ongoing data security.
• Flexible scheduling: Tailor backup routines to specific business needs effortlessly.
• Secure encryption: Safeguard data during transmission and storage effectively.
• Automated recovery options: Streamline data restoration processes for efficiency.
• Cross-platform compatibility: Works seamlessly across operating systems and devices.
• Incremental backups: Minimise bandwidth usage and storage requirements effectively.
• Centralised management: Control and monitor backups from a single interface.
• Scalable infrastructure: Accommodate growing data volumes with ease and reliability.
• Advanced monitoring and alerts: Stay informed about backup statuses/issues.
• Multi-cloud support: Back up data across multiple cloud platforms .

Benefits

• Enhanced data security: Safeguard critical information effectively against loss/breaches.
• Streamlined operations: Simplify backup processes for increased efficiency and productivity.
• Reduced downtime: Minimise business disruptions with fast reliable data recovery.
• Cost savings: Eliminate need for expensive hardware and infrastructure investments.
• Improved compliance: Meet regulatory requirements effortlessly with robust backup solutions.
• Greater flexibility: Access and restore data from anywhere, anytime.
• Scalable solutions: Adapt to changing data needs as business grows.
• Peace of mind: Assured knowing data is safe and recoverable.
• Simplified management: Centralise backup tasks for easier monitoring and control.
• Competitive advantage: Stay ahead with reliable data protection/uninterrupted operations.

£25.00 to £75.00 a device a month

• Education pricing available

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at aj@creative-n.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

143086142458667

Contact

Azeem Javed
03303337337
aj@creative-n.com

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Community cloud
• Service constraints: Planned maintenance for core product.
• System requirements:
  • PC, Laptop, Server, NAS drive or VM
  • Windows
  • Linux
  • Mac

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: 08:30 - 18:00 Weekdays, excluding Bank Holidays. Out of hours support available where necessary. 30 minutes to 8 hour response dependent on priority call, P1 - 30 mins, P2 - 1 hour, P3 - 4 hours, and P4 - 8 hours.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.1 A
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Web chat
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: WCAG 2.1 AA or EN 301 549
• Web chat accessibility testing: No web chat testing has been done with assistive technology users by Creative Networks.
• Onsite support: Onsite support
• Support levels: End-user support and training can be provided at an ad hoc cost. We provide a UK based Service Desk for support. Out of hours support is available. Additional support can be provided from our satellite office in Nottingham. Our helpdesk is made up of 1st line, 2nd and 3rd Line technical expertise. A Technical Account Manager will be assigned as standard as a part of our standard and premium IT Support, see our pricing schedule and SFIA Rate Card for details.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: We assist users in adopting our service through a variety of resources tailored to their needs. Our user documentation offers step-by-step guides, FAQs, and troubleshooting tips for independent learning. Additionally, we provide interactive online training sessions and webinars led by experienced instructors to guide users through setup and configuration processes effectively. For those preferring personalised assistance, optional onsite training sessions can be arranged to address specific organisational requirements. Our dedicated technical support team is readily available to assist users with any inquiries or challenges they may encounter, offering prompt resolution via email, phone, or online chat. With these resources and support channels in place, we aim to ensure a smooth onboarding experience and empower users to harness the full capabilities of the service for their communication needs.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: Exported upon request. Contact the Support Helpdesk or Technical Account Manager.
• End-of-contract process: At the end of the contract services will continue on a rolling 30 day agreement until either party serves notice. If it is decided the client will exit, Creative Networks will assist in transitioning and migration of services ensuring continuity and a smooth handover. We will, where applicable deliver an Exit Plan which sets out the proposed methodology for achieving an orderly transition of Services on the expiry or termination of the contract. The Exit Plan will contain at minimum: Separate mechanisms for dealing with Ordinary Exit and Emergency Exit. The management structure to be employed during both transfer and cessation of the services and a detailed description of both the transfer and cessation processes, including a timetable. Document how the Services will transfer including details of the processes, documentation, data transfer, systems migration, security and the segregation of technology components. Specify the scope of the Termination Services that may be required and any charges that would be payable for the provision of such Termination Services and detail how such services would be provided. Provide a timetable and identify critical issues and set out the management structure to be put in place and employed during the Termination Assistance Period.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: Yes
• Compatible operating systems:
  • Linux or Unix
  • MacOS
  • Windows
• Designed for use on mobile devices: No
• Service interface: No
• User support accessibility: None or don’t know
• API: Yes
• What users can and can't do using the API: Through the N-able BaaS API, users can automate setup processes by creating backup policies, defining schedules, and specifying data sources programmatically. They can also modify existing backup policies, adjust schedules, add or remove data sources, and update configuration settings using API endpoints. Additionally, users can trigger backup and restore operations via API calls, facilitating automation and integration with other systems or workflows. Monitoring capabilities allow users to retrieve information about ongoing backup operations, check logs, and receive status updates through API responses. However, certain limitations exist. Advanced settings or configurations may not be accessible via the API, necessitating manual intervention through the web interface. Additionally, some administrative tasks, like user management, may be restricted for security reasons. The availability of features or endpoints can also depend on the API version being used, potentially limiting functionality for users of older versions. Despite these limitations, the API offers powerful capabilities for automating backup tasks, enhancing efficiency and integration possibilities for users.
• API documentation: Yes
• API documentation formats: PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Custom branding on support request methods, wait time alerts, emails, applets, the applet file name, post-session surveys, and more to help you reinforce your value; ; Customisable Terms of Service to help you modify your agreements to meet your business’s needs; ; Changeable applet fields to help save time by routing requests to the right technician automatically; ; The ability to customise the support request website URL to help further reinforce your brand; ; Flexible technician creation, particularly around user permissions, to help control access and keep your system safe

Scaling

• Independence of resources: Hosted by N-Able and they scale.

Analytics

• Service usage metrics: Yes
• Metrics types: Reports on request.
• Reporting types: Reports on request

Resellers

• Supplier type: Reseller providing extra support
• Organisation whose services are being resold: N-Able

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest: Physical access control, complying with another standard
• Data sanitisation process: Yes
• Data sanitisation type:
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: Exported upon request.
• Data export formats: Other
• Data import formats: Other

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: All service level agreements are as per the ones supplied by N-Able, and published by them. VPS installations are guaranteed for 97% uptime, private/hybrid cloud instances have a 100% network uptime guarantee. Any downtime during working hours is credited on a pro-rata basis.
• Approach to resilience: Hosted by N-Able, they have multiple locations and replication
• Outage reporting: Website Updates.; Email alerts.

Identity and authentication

• User authentication needed: Yes
• User authentication: 2-factor authentication
• Access restrictions in management interfaces and support channels: Supplier defined controls. Access to management interfaces restricted to designated users and controlled with user name and password protection.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • 2-factor authentication
  • Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: Less than 1 month
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: Less than 1 month
• How long system logs are stored for: Less than 1 month

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: UKAS
• ISO/IEC 27001 accreditation date: 24/10/2022
• What the ISO/IEC 27001 doesn’t cover: Areas not covered by ISO/IEC 27001 certification include specific business processes unrelated to information security, certain third-party services or suppliers, or compliance with other industry-specific regulations.
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Organisations adhering to ISO 27001 establish robust information security practices. They develop policies aligned with ISO 27001 requirements, covering areas like access control, data protection, and incident response. Through risk assessments, they identify and prioritise security risks, implementing controls to mitigate them. Employees receive training on security policies and procedures to enhance awareness and compliance. Monitoring and review processes ensure the effectiveness of security controls, with regular audits and assessments conducted. A designated individual or team oversees the implementation and maintenance of the Information Security Management System (ISMS), reporting to senior management or the board. To ensure policy adherence, organisations employ various mechanisms such as audits, reviews, and ongoing monitoring. Non-compliance issues prompt corrective actions and improvements to the ISMS. By following these practices, organisations demonstrate their commitment to information security and continuously strive to enhance their security posture in line with ISO 27001 standards.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Creative Network's have in place a Change Management Process that follows the ISO 20000 Standard. A change is proposed with the Change Manager and then added to the Changes-overview. The change is scheduled to be executed and a roll back plan is created (if necessary). Rollback is actioned immediately upon confirmation as per following the rollback matrix, resources are freed and announcements are published. Periodically, the overview of archived changes is checked.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Creative Network's have a Vulnerability Management process that implements the following: Receives information about zero day threats from the National Cyber Security Center; subscribe to newsletters from vendors and used products, in contact with special interest groups; Technical vulnerabilities are handled either using the Incident management process or the Change management process; Patches are tested following the Installation of software on operational systems.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: All devices have a monitoring agent on them which can identify potential issues and report back to our service desk. If an issue is identified we have an internal 4 hour SLA to ensure remedial actions are carried asap, the seriousness of an incident will be assessed on discovery so that any priority issues can be responded to quickly. We have multiple alert systems in place and monitor them constantly. We exclusively use Linux for phone system hosting. We automatically patch daily as and when required.
• Incident management type: Supplier-defined controls
• Incident management approach: Fully developed Business Continuity and Disaster Recovery management process developed in line with ISO 22301. Creative Network's have a pre-defined Incident Management Process in place where by an incident is reported with the Incident Manager and then added to the Incidents-overview. After which, relevant log files (from all systems affected) and evidence is gathered. The incident is corrected by implementing a patch, temporary fix or workaround. It is determine whether future occurrences of the incident can be prevented, e.g. by modifying/strengthening one or more controls. Periodically, the overview of archived incidents is checked for apparent trends and effectivity of corrections.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: Yes
• Connected networks: Other
• Other public sector networks: Internet

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Wellbeing

  Fighting climate change

  By providing efficient and reliable backup solutions, N-able BaaS helps organisations optimise their data management processes, reducing unnecessary data duplication and storage. This leads to lower energy consumption and carbon emissions associated with maintaining extensive on-premises backup infrastructure. Additionally, by enabling organisations to leverage cloud-based backups, N-able BaaS promotes the adoption of environmentally friendly cloud computing, which typically operates more energy-efficiently than traditional on-premises data centers.

  Covid-19 recovery

  During the Covid-19 pandemic, remote work became essential for business continuity. N-able BaaS supports remote work by ensuring the availability and protection of critical data, regardless of employees' locations. This facilitates seamless collaboration and productivity, contributing to organisations' resilience and recovery efforts in the face of ongoing challenges posed by the pandemic.

  Wellbeing

  Effective data protection is crucial for safeguarding sensitive information, maintaining trust with customers, and complying with regulatory requirements. N-able BaaS helps organisations ensure the confidentiality, integrity, and availability of their data, reducing the risk of data breaches, financial losses, and reputational damage. By providing peace of mind and security in an increasingly digital world, N-able BaaS promotes the wellbeing of individuals, businesses, and communities.

Pricing

• Price: £25.00 to £75.00 a device a month
• Discount for educational organisations: Yes
• Free trial available: No

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at aj@creative-n.com. Tell them what format you need. It will help if you say what assistive technology you use.