SNP ALM Integrator
Kyano ALM Integrator connects SAP Solution Manager or SAP Cloud ALM with tools such as Jira, ServiceNow, and Azure DevOps. It provides seamless, REST API-based integration of ALM processes like change, incident, and defect management, reducing manual tasks and error-prone handoffs while maintaining flexibility, configurability, and process alignment across toolchains.
Features
- Seamless integration of SAP ALM and external ALM tools
- Connects SAP Solution Manager and SAP Cloud ALM
- Integrates Jira, ServiceNow, and Azure DevOps
- Uses official REST APIs for connectivity
- Preconfigured SAP Focused Build scenarios
- Configurable custom field and attachment mapping
- No middleware required, direct secure links
- Supports on-premise and cloud tools
- Monitoring and queueing for full control
- Flexible configuration without code changes
Benefits
- Reduced manual effort in tool integration
- Improved accuracy and data consistency across tools
- Faster setup with preconfigured integration scenarios
- Consistent change and incident workflows
- Better visibility across ALM processes
- Secure, REST API-based connections
- Minimal maintenance overhead
- Supports both cloud and on-premise tooling
- Flexible configuration without development
- Enables efficient SAP focused build delivery
Pricing
Service documents
Request an accessible format
Framework
G-Cloud 15
Service ID
2 1 2 1 2 9 2 1 5 2 1 1 4 8 8
Contact
RESULTING LIMITED
Public Sector Team
Telephone: +44 1925 906 662
Email: Hello@resulting-it.com
About your service
- Service categories
-
Application Development and Deployment
Application development
- Business rules management
- Multi cloud support
- No
Service scope
- Software add-on or extension
- No
- Cloud deployment model
- Private cloud
- Service constraints
- N/A
- System requirements
- Software is loaded onto existing SAP systems
User support
- Email or online ticketing support
- Yes
- Support response times
- Service levels will be agreed with customer
- User can manage status and priority of support tickets
- Yes
- Online ticketing support accessibility
- None or don’t know
- Phone support
- Yes
- Phone support availability
- 9 to 5 (UK time), Monday to Friday
- Web chat support
- No
- Onsite support
- No
- Support levels
-
We offer tiered support to meet the diverse operational needs of our Buyers. All support levels include 24/7 access to our customer portal for ticket submission, tracking, and knowledge base resources.
Standard Support is provided at no additional cost and is suitable for non-production environments. It covers standard business hours (9.00-17.00, Monday to Friday) with a target response time of under 8 hours for critical issues. This level does not include a dedicated Technical Account Manager (TAM) or Cloud Support Engineer (CSE).
For production environments requiring more responsive support, our Professional Support level is available at a fixed monthly fee. It provides business-hours coverage with faster response times, including under 4 hours for critical issues. This tier includes access to a dedicated pool of CSE’s. Typical cost: 10–15% of annual contract value, depending on service scope.
Our premium Enterprise Support level is designed for business-critical systems requiring maximum uptime and strategic partnership. Provided at a higher fixed monthly fee, it offers 24/7/365 coverage with the most aggressive response targets, including under 1 hour for critical issues. This tier includes a dedicated, named TAM. Cost is typically 15–20% of annual contract value or as agreed at Call-Off. - Support available to third parties
- No
Onboarding and offboarding
- Getting started
-
SNP services are bespoke to individual clients, and therefore pricing, terms and conditions and invoicing details are confirmed when the scope of services has been established.
Onboarding:
Full documentation and specific SAP code is provided as a prerequisite to running SNP Products and reports, access to SAP installations is required to download and execute SNP software (see Security)
Training:
Programme Teams will be supported by SNP personnel - Service documentation
- Yes
- Documentation formats
- End-of-contract data extraction
-
Governance, Policies and Processes are followed in secure data extraction and removal.
When our customers delete data or decide to leave our Resulting IT services. We follow strict standards for deleting data securely. We execute a complete deletion of data on customer request. As part of the service, all reports are shared with the client to enable appropriate action to be taken on the findings.
This will be agreed with the customer - End-of-contract process
- We provide a close out letter and ensure that the customer agrees with contract term closure.
- Documentation accessibility standard
- None or don’t know
- How the documentation is accessible
- We have agreed processes in place for onboarding and offboarding customers for any of our or our partner services. These include, but are not limited to, initial client checks (e.g. AML, creditworthiness) and then upon cessation, ensuring all deliverables, services are completed and any technology is either removed, archived or there is an agreed exit plan with the end customer
Using the service
- Web browser interface
- No
- Application to install
- Yes
- Compatible operating systems
- Windows
- Designed for use on mobile devices
- No
- Service interface
- No
- User support accessibility
- None or don’t know
- API
- No
- Customisation available
- No
Scaling
- Independence of resources
- N/A
Analytics
- Service usage metrics
- No
Resellers
- Supplier type
- Reseller (no extras)
- Organisation whose services are being resold
- SNP
Staff security
- Staff security clearance
- Conforms to BS7858:2019
- Government security clearance
- Security Clearance (SC)
Asset protection
- Knowledge of data storage and processing locations
- Yes
- Data storage and processing locations
-
- United Kingdom
- European Economic Area (EEA)
- User control over data storage and processing locations
- No
- Datacentre security standards
- Complies with a recognised standard (for example CSA CCM version 4.0)
- Penetration testing frequency
- At least once a year
- Penetration testing approach
- Another external penetration testing organisation
- Protecting data at rest
- Encryption of all physical media
- Data sanitisation process
- No
- Equipment disposal approach
- A third-party destruction service
Data importing and exporting
- Data export approach
- Governance, Policies and Processes are followed in secure data extraction and removal
- Data export formats
- CSV
- Data import formats
- Other
- Other data import formats
- Direct SAP system connections
Data-in-transit protection
- Data protection between buyer and supplier networks
-
- Private network or public sector network
- Other
- Other protection between networks
- Secure Encrypted Connection from the Client to the Application
- Data protection within supplier network
- Other
- Other protection within supplier network
- Data is in a secure and encrypted environment
Availability and resilience
- Guaranteed availability
- SLAs will be agreed with each customer
- Approach to resilience
-
Our service is architected for high resilience and continuous availability, in strict alignment with Cloud Security Principle 2: Asset Protection and Resilience. The platform is hosted on leading hyperscale cloud providers, utilising geographically separate, Tier III+ datacentres that provide redundant power, cooling, and network connectivity to eliminate single points of failure.
All production systems operate in an active-active configuration across multiple Availability Zones within a region. This design enables automatic failover and load balancing in the event of hardware or site-level failure, ensuring uninterrupted service. To protect data assets, customer data is replicated synchronously in real-time between these zones for high availability, with regular backups and integrity checks stored in secure, offsite locations to support robust disaster recovery.
Network resilience is maintained through diverse routing, advanced load balancing, and always-on DDoS protection that mitigate external threats. Service uptime and performance are continuously monitored, with metrics tracked through automated dashboards and alerting systems that trigger immediate operational response.
This resilient architecture is validated through regular testing of our BCDR processes, ensuring that defined RPO/RTO are consistently met. Detailed datacentre architecture, including specific physical security controls and resilience configurations, is available to authorised Buyers upon request. - Outage reporting
- Email notification
Identity and authentication
- User authentication needed
- Yes
- User authentication
- Username or password
- Access restrictions in management interfaces and support channels
-
We apply strict access controls to ensure only authorised users can reach management interfaces and support channels, minimising risk and maintaining appropriate operational oversight. We are Cyber Essentials certified, and our Security Policy, aligned to industry best practice, defines how roles and permissions are managed.
Access to core systems is governed through role-based permissions, enforced multi-factor authentication, network and file-level restrictions, and continuous monitoring. Administration rights are limited to our certified IT provider and a small group of nominated, authorised individuals within the business. All access controls are subject to regular review and updates to maintain security and compliance. - Access restriction testing frequency
- At least once a year
- Management access authentication
- Username or password
Audit information for users
- Access to user activity audit information
- You control when users can access audit information
- How long user audit data is stored for
- User-defined
- Access to supplier activity audit information
- You control when users can access audit information
- How long supplier audit data is stored for
- User-defined
- How long system logs are stored for
- User-defined
Security governance
- Named board-level person responsible for service security
- Yes
- Security governance certified
- Yes
- Security governance standards
-
- CSA CSM version 4.0
- ISO/IEC 27001
- Information security policies and processes
-
We operate an ISO27001-certified ISMS across the group to ensure the secure, resilient, and continuous delivery of services. The ISMS aligns with internationally recognised best practice and defines the technical and organisational controls required to protect the confidentiality, integrity, and availability of information.
The Board of Directors is ultimately accountable for information security and assures itself that effective systems of control, risk management, and governance are in place. Day-to-day oversight is provided by the Information Security Officer, who reports directly to the Board and chairs the Information Security Steering Group responsible for risk assessment, policy oversight, and continual improvement. All ISMS policies are Board-approved, communicated to staff, and reviewed at least annually or following material change.
The Data Protection Officer, monitors compliance with UK GDPR, provides guidance and training, and acts as the primary contact with the ICO.
The ISMS applies to all systems, people, and processes within the certified scope, including employees, suppliers, and third parties. All users are required to comply with comprehensive information security policies, complete mandatory training, and report incidents.
Assurance is provided through role-based access controls, multi-factor authentication, regular access reviews, internal audits, vulnerability scanning, penetration testing, and formal incident management with defined corrective actions. - Software Security Code of Practice
- Yes
Operational security
- Configuration and change management standard
- Supplier-defined controls
- Configuration and change management approach
- The Organisation operates a Configuration Management Policy to reduce cyber-security risk across its ICT infrastructure, including hardware, software, cloud services, networks, and end-user devices. All new components must be securely configured prior to deployment, with existing configurations reviewed regularly to ensure continued compliance. Standard, version-controlled configuration templates are used where possible, informed by vendor guidance, recognised cyber-security authorities, and internal security policies. Configuration standards apply to endpoints, servers, network devices, and cloud infrastructure and are treated as sensitive information. Compliance is monitored through periodic reviews, automated audit tools, and, where feasible, Infrastructure as Code (IaC) to enforce secure, consistent configurations.
- Vulnerability management type
- Supplier-defined controls
- Vulnerability management approach
- Resulting operates a structured vulnerability management process across all devices and cloud services in scope. Potential threats are assessed through vendor security advisories, Microsoft 365 security notifications, and automated update mechanisms built into supported operating systems and applications. High-risk or critical vulnerabilities are remediated within 14 days in line with Cyber Essentials requirements, using automated OS and application updates where possible. Our external IT support partner monitors patch status and applies updates proactively, with suspected compromises triggering immediate investigation and remediation. All updates, actions, and risks are logged and reviewed regularly.
- Protective monitoring type
- Supplier-defined controls
- Protective monitoring approach
- Resulting maintains continuous protective monitoring across devices, cloud services and our network boundary. Firewall activity is continuously monitored by our managed service provider to identify anomalies, with access restricted to trusted IPs under a formal agreement. Potential indicators of compromise trigger immediate investigation and mitigation actions, consistent with our incident response procedures and Cyber Essentials controls, which require prompt action where compromise is suspected. High-risk system and application vulnerabilities are addressed within 14 days in line with CE requirements. All monitoring outcomes are logged, reviewed, and used to improve future controls.
- Incident management type
- Supplier-defined controls
- Incident management approach
-
Resulting operates a defined Information Security Incident Management process, supported by our Information Security Policy. We have established procedures to ensure all information security events are consistently recorded, assessed, and managed. Incidents are reported through our support channels, where they are logged, monitored, and handled in line with policy requirements. Outcomes are documented to support future risk assessments and strengthen preventive and detective controls.
We maintain annual Cyber Essentials certification and are progressing towards ISO 27001 accreditation, reinforcing our governance and continual improvement approach. All incident response activity is regularly reviewed to ensure effective mitigation, service resilience, and ongoing enhancement. - Post-quantum cryptography secure
- No
Secure development
- Approach to secure software development best practice
- Supplier-defined process
Public sector networks
- Connection to public sector networks
- No
Pricing
- Discount for educational organisations
- No
- Free trial available
- No
Discount percentage by annual call-off contract value (excluding VAT)
- Less than £250,000
- 2%
- Between £250,000 and £500,000
- 3%
- Between £500,001 and £1,000,000
- 5%
- Between £1,000,001 and £2,500,000
- 10%
- Between £2,500,001 and £5,000,000
- 15%
- Over £5,000,001
- 25%
Non-mandatory Standards and certifications
- ISO/IEC 27001 certification
- No
- ISO 28000:2022 certification
- No
- ISO 9001 certification
- No
- Quality management systems (QMS)
- Yes
- CSA STAR certification
- No
- PCI certification
- No
- Cyber essentials
- Yes
- Please provide your Cyber Essentials Certificate Number
- 65968965-147e-42f4-a2b1-9c9d472a5fc2
- Cyber essentials plus
- Yes
- Please provide your Cyber Essentials Plus Certificate Number
- 9a531d88-41d6-4aeb-a79a-14f6057570fa
- Other security certifications
- No
Social value
- Section B - Commitment for Future: Delivery
-
-
Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.
Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority
- New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
- Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
- Plans to engage the contract workforce in deciding the most important workplace issues to address
- Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
- Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
- Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
- Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
- Activities to cascade good practice on fair working conditions throughout the supply chain
- Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
- Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
- Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
- Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
- Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
- Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas
- Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
- Volunteering opportunities for staff
- Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
- Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
- Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling
- How to ensure business decisions re: price/cost, short lead times, payment timescales do not create modern slavery risks in the supply chain
- Means of influencing staff, suppliers, customers, communities and/or any other appropriate stakeholders with respect to modern slavery risks relating to the contract
-
Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.
Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.
- Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
- Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
- Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering
- Delivery of apprenticeships, supported internships and T Level industry placement opportunities (Level 2, 3 and 4+) in relation to the contract
-
Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.
Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises
- Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
- Plans for engaging a diverse range of businesses in engagement activities prior to appointing subcontractors (including activities prior to award of the main contract and during the contract term)
- Activities that demonstrate a collaborative way to work with a diverse range of businesses as part of the supply chain
- Advertising of supply chain opportunities openly and to ensure they are accessible to a diverse range of businesses, including advertising all subcontracting opportunities on Contracts Finder
- Ensuring accessibility to contracting and subcontracting opportunities for disabled business owners and employees
- Structuring of the supply chain selection process to ensure fairness (e.g. anti-corruption) and encourages participation by a diverse range of businesses, including with regard to new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutual
- Understanding of local demographics, needs and opportunities for the co-design of the goods, services and works to be delivered under the contract
- Methods for engaging with different parts of the community (including the education system and charities representing the community) and how communities come together to inform decisions, strategy and projects to leave a positive legacy for future generations
- Measures to involve local stakeholders and/or users in design (e.g. in the design of services, systems, products or buildings)
- Plans for positive actions with community groups.
- Measures for making facilities used in the delivery of the contract available for community groups, education or training
- Measures to engage users and communities and build relationships to increase community integration build trust and influence how the contract is delivered
- Plans to respond flexibly and adapt approaches to community engagement and initiatives
- Support for community-led initiatives relevant to the contract. Illustrative examples: improving transport links; reducing loneliness; helping with English language proficiency; and facilitating social mixing among people with different backgrounds
- Collaborating with anchor institutions and community groups to make facilities available for education, training or community events
-
Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero
Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.
- Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
- Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
- Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
- Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
- Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it
-
Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain
Policy Outcome 6: Employment and training: For those who face barriers to employment
- Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
- Creation of employment opportunities particularly for those who face barriers to employment, such as prison leavers, care leavers and/or who are located in deprived areas, and for people in industries with known skills shortages or in high growth sectors
- Delivery of training schemes and programmes to address any identified skills gaps and under-representation in the workforce for the contract (e.g. prison leavers, care leavers, kinship carers, disabled people)
- Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort
- Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
- Collection of the views and expertise of disabled people and their representative organisations on successfully supporting disabled employees or applicants
- Inclusive and accessible recruitment practices, and retention-focused activities, including those provided in the Guide for line managers on recruiting, managing and developing people with a disability or health condition
- Introducing transparency to pay and reward processes
- Offering a range of quality opportunities with routes of progression if appropriate, e.g. T Level industry placements, students supported into higher level apprenticeships.
- Working conditions which promote an inclusive working environment and promote retention and progression
- Other measures to provide equality of opportunity for disabled people and those with health conditions into employment, including becoming a Disability Confident employer and inclusion of supported businesses in the contract supply chain
- Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce
- Inclusive and accessible development practices, including guidance for line managers on recruiting, managing and developing people with a disability or health condition
-
Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain
Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.
- Understanding of the issues affecting the development of new skills by target cohort
- Understanding of the underlying factors affecting improvements to reduce barriers to entry and training schemes for the target cohort(s) related to the contract workforce
- Other measures to offer development opportunities for the target cohort(s) in the contract workforce
- Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort
- Understanding of issues relating to entering the contract workforce
- Creation of outreach activities to create a pipeline of employees for the future contract delivery
- Content of the outreach activity is designed to suit the target cohort
- Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort
-
Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.
Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.
- Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
- Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion
- Inclusive and accessible recruitment practices, development practices and retention policies that support-focused activities including those provided in the Guide for line managers on recruiting, managing and developing which support people with a disability or health condition
- Actions to invest in the physical and mental health and wellbeing of the contract workforce
-