Cirdan

Cirdan Tutor

Tutor is a cloud-based digital pathology education platform that facilitates the development and distribution of online virtual microscopy courses, examinations and competency assessments.

Features

• Easy access via web browsers on a range of devices.
• Wide range of industry standard image formats supported.
• Online teaching, online testing, digital slide viewer, annotations.
• Highly performant image viewer
• Broad suite of annotation tools.
• Secure and SSO compatible.
• User permissions and content fully customisable.

Benefits

• Readily scalable – user licences and storage.
• Highly secure for data at rest or in transit
• Resilient system with >99.9% availability.
• Decentralised learning 24/7, 365.
• Fully customisable for content and user permissions.
• Flexible to meet changing workload patterns.
• Allows teaching and examination anywhere via web browser.
• Tools available to enhance student learning experience.

£60 to £450 a user a year

• Free trial available

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at presales@cirdan.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

179429077016112

Contact

Presales Team
02892660880
presales@cirdan.com

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Private cloud
• Service constraints: Supported browsers
• System requirements: Supported browsers: Chrome, Firefox, Safari, Edge

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Customers can email a request for support 24/7/365 via support@cirdan.com. Support requests received via email will be entered into the Cirdan Support System with email replies to customers auto generated from the Cirdan Support System as the ticket is progressed.; ; Responses are categorised by priority, based on Urgency and Impact. Customers specify the type of ticket and initial category : ; Priority 1: < 1hrs; Priority 2: < 2 hrs; Priority 3: < 1 working days; Priority 4: < 5 working days; ; Note: Response times are during business hours only, Monday - Friday 09:00 - 17:30 (UK time).
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: The Tutor Managed Service Desk provides a technical and operational support service, which is included in the licence costs. This provides comprehensive ITIL aligned support provision during UK business hours, including access to experts who can diagnose and resolve issues, as well as give advice on Tutor’s diverse features. The Service Desk provides a single point of contact 24/7/365 and can be contacted by using the online Cirdan Support Portal.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Training is provided online or on-site and supported by user documentation.
• Service documentation: Yes
• Documentation formats:
  • PDF
  • Other
• Other documentation formats: Moodle training
• End-of-contract data extraction: Cirdan can offer the following options as part of the transition out services.; 1. Provide the customer with a copy of the SQL Server database.; 2. Ensure the customer has access to download their catalog of virtual slides, for an agreed period of time.
• End-of-contract process: The customer is offered an opportunity to receive their data and image files. At the end of the contract the customer loses access to the cloud-hosted platform.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Viewing content and digital slides are supported on tablet devices.
• Service interface: No
• User support accessibility: None or don’t know
• API: No
• Customisation available: Yes
• Description of customisation: - Login screens can be customised on request and at additional cost.; - Date and time formats can be customised; - Password complexity, expiration and maximum login attempts can all be configured.

Scaling

• Independence of resources: We carefully monitor the underlying infrastructure and capacity management is part of our standard review process, should the physical platform require scaling, then this will be actioned proactively and fully managed by us. Should additional hardware capacity be required we have the ability to add new hardware nodes to the design at any time with 72 hours’ notice.

Analytics

• Service usage metrics: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: Less than once a year
• Penetration testing approach: In-house
• Protecting data at rest: Encryption of all physical media
• Data sanitisation process: No
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: Data is stored on a SQL Server database, backup files can be provided if required.
• Data export formats: Other
• Other data export formats: SQL Server backup file
• Data import formats: Other
• Other data import formats: None

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: The Tutor platform is backed up to a Disaster Recover (DR) environment in a secondary secure data centre. All databases, files and virtual slides are copied on a nightly basis to the DR SAN. ; In the event of a catastrophic failure to the production environment, the system fully operational on the DR infrastructure within 24 hours. The DR environment is fully tested annually to ensure the failover process and backup/restore is successful.
• Approach to resilience: The Tutor platform is backed up to a Disaster Recover (DR) environment in a secondary secure data centre. All databases, files and virtual slides are copied on a nightly basis to the DR SAN. In the event of a catastrophic failure to the production environment, the system fully operational on the DR infrastructure within 24 hours. The DR environment is fully tested annually to ensure the failover process and backup/restore is successful.
• Outage reporting: Dashboards and email alerts can be configured to alert any system outages. The system is also monitored by Cirdan directly as part of the managed service agreement to ensure a prompt and appropriate response.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: In a cloud deployment access is granted via RBAC using a least privilege model. RBAC defined within the application allows definition of access levels for an individual, or groups of individuals, that includes cross discipline as well as discipline specific functionality. Self-service password resets available. ; The system allows for individual, unique user accounts and passwords with RBAC applied. Local Client policy and procedure should ensure this facility is used - Active Directory integration is also available.
• Access restriction testing frequency: Less than once a year
• Management access authentication:
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

• Access to user activity audit information: No audit information available
• Access to supplier activity audit information: No audit information available
• How long system logs are stored for: Between 1 month and 6 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: NQA
• ISO/IEC 27001 accreditation date: 22/11/2021
• What the ISO/IEC 27001 doesn’t cover: Nothing specified as not covered.
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: Yes
• Any other security certifications:
  • ICO Certificate
  • ISO 9001:2015

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Cirdan are ISO 27001 accredited and this drives the content of the following policies and processes we follow:; Information Security Policy,; Office & Remote Working Policy,; Information Communication Acceptable Use Policy,; Access Control & Asset Management Policy,; Secure Development Policy,; Cryptographic Policy,; GDPR Policy.; ; These policies are audited and certified by NQA against the ISO27001:2013 standard. Audits take place annually.; ; These policies are maintained and enforced by the Head of Quality & Regulatory who reports to the Chief Executive Officer.; ; Cirdan is registered and complies with the NHS Data Security and Protection Toolkit. ODS code is 8J717, ICO registration number: ZA018472

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Proposed changes are documented and risk assessed. Roll-back processes and procedures are documented and tested. Customer is notified of risks, rollbacks and timelines for approval.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Vulnerability testing is carried out periodically using commercial tools. ; ; Patches and updates for critical vulnerabilities are applied within 24 hours of being available, or if no solution is available from a vendor, alternative action will be taken to mitigate or negate the risk.
• Protective monitoring type: Undisclosed
• Protective monitoring approach: Proactive monitoring of systems allows automated reporting of issues and unusual activity is via systems which automatically raise a ticket.
• Incident management type: Supplier-defined controls
• Incident management approach: Incident Management is controlled by a process which guides the team through the assessment of the incident, evaluation of risk, loss and services affected. ; ; Users can either phone, e-mail or report via the online service desk. All incidents are followed up with a report detailing the root cause, immediate resolution and the changes to be implemented to prevent re-occurrence.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  Cirdan encourages sustainable travel by providing bicycle racks and promoting the use of carpooling and the usage of local public transportation systems. Our head office has been located within easy walking distance of local rail and bus connections. We encourage the use of electric vehicles with 2 charge points located on-site at head office. Additionally, we also provide a hybrid working models for all employees. ; ; As most projects are located overseas, we will seek to reduce the number of on-site meetings required with the use of remote meetings technology which is made available to all employees. We continue to rationalise the number of flights taken to visit overseas customers and markets.

  Tackling economic inequality

  Cirdan has strong relationships with various local Universities and further education colleges such as Queens University Belfast and the Ulster University. We are committed to offering a minimum of 4 x 12-month placement opportunities across various skill sets with a minimum salary of £21,000 each or equivalent to the Real living wages at the time of the job offer.; ; The placements will be open to the following skillsets but not limited to:; • Computer Science ; • Artificial Intelligence ; • Data Analytics ; • Cyber Security ; • Interaction Design/ UX; • Biological Sciences ; • Microbiology ; • Biomedical Engineering; ; Each placement will have the benefit from dedicated mentorship including one to one support from specialist team members in their area of expertise which will allow them to gain valuable hands-on work experience.; ; Cirdan recognises that its people are its most valuable asset, and that organisational excellence is best attained through continuous training, development and educational activities, which build upon individual strengths.

  Equal opportunity

  At Cirdan, we recognise the importance of equality for all staff, and aim to provide an environment which supports diversity and inclusion, in line with our values. ; We want to ensure that our business recognises and delivers culturally sensitive, inclusive, accessible, and appropriate products and services, without discrimination. We are committed to ensuring that our approach to our staff is the same as our approach to our customers, being open and transparent, focused and based on our values.

  Wellbeing

  Cirdan is committed to Corporate social responsibility. “We care for each other, our community, and customers: together we can achieve great things!”. We demonstrate this in various way including the commitment to “give back to the community through involvement in social, charitable and educational initiatives.” ; Volunteering - we encourage our employees to participate in activities, supporting communities in which we operate through Corporate volunteering and individual activities. ; Through our policy, employees can use paid time off during their normal working hours for up to 3 working days each financial year. The policy is intended to help and support employees wishing to volunteer and provides a framework for good practice. ; This policy establishes a company-wide volunteering scheme which aims to: ; • Strengthen the company’s commitment to communities through the direct involvement of employees. ; • Increase employees’ commitment to the company and their pride in working here.; • Enhance internal relationships and teamwork. ; • Develop necessary abilities and skills within the company, such as collaboration, leadership and creativity.; To launch our volunteer policy earlier this year we worked in a community-based project with the National Trust where we volunteered over 240 hours to beach clean-up and preserving areas of natural heritage. In December 2023 we have committed over 100 hours of volunteering time to Cash for kids who support children and young people affected by poverty, abuse, neglect, life-limiting illness and those who have additional needs.; Cirdan also contributed to health-care related charities and community projects by sponsoring the Health and Wellbeing Award at the 2023 Aisling Awards in Belfast, celebrating the work of local charities in supporting health and well-being in the community, and is also a sponsor of the STEM category of the Blackboard Awards in Belfast which recognizes the contribution of local community teachers across the city.

Pricing

• Price: £60 to £450 a user a year
• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: Can be arranged on request and agreement. Limited access to content and test creation with a trial slide set for a set period of time.

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at presales@cirdan.com. Tell them what format you need. It will help if you say what assistive technology you use.