Advanced Business Solutions

Financials

Fully integrated proven financial solution available in the cloud based on a template designed for rapid and good practice adoption. Highly scalable, robust, available 24/7. Solution is modular to allow organisations to adopt the elements that will deliver the best returns/outcomes but also support evolving business needs

Features

• Fully managed SaaS solution delivered in the Cloud
• Available 24/7 Fully integrated suite of Financial Management modules
• Providing multi-company/entity/currency capabilities for current and future growth
• Powerful enquiry and reporting options
• Controls to ensure users get access to the right information
• Device independence providing access via a range of client devices
• Single sign-on to access all authorised modules/components

Benefits

• Out of the box template
• Completely scalable solution to address current and evolving business needs
• Modular approach so can adopt modules to address business needs
• Reduced internal IT costs
• Rapid implementation
• Delivering the system to the user whilst on the go
• Based on proven platform with market knowledgeable consultants
• Adoption of streamlined good business practices/processes

£116 to £4,761 a user a year

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at bidmanagementteam@oneadvanced.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

217545301921629

Contact

Bid Support
0330 343 8000
bidmanagementteam@oneadvanced.com

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: Not Applicable
• System requirements: Please ask for latest technical specification on application

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Priority 1 - Target within 1 hour; Priority 2 - Target within 4 hour; Priority 3 - Target within 8 hour
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: No
• Support levels: Support is provided around a priority and escalation system. When an incident is reported, a priority level is established based upon the information provided, understanding business impact is essential. Target service levels and response times are assigned based on an initial appraisal of the problem but can be revisited at any time by the client. The escalation procedure is designed to progress each call as efficiently as possible. OLA's are in place for escalations beyond support into the development and professional service teams.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Advanced helps users start using the service via a delivery mechanism that features the implementation as a series of design configuration workshops supported by a strong cadence of system familiarisation (testing). When implementing Financials, we work closely with the customer subject matter experts to identify requirements and outcomes, following by rapid configuration and continuous finessing of the configured solution.; ; The implementation service is enabled through the OneAdvanced Professional Services Project Methodology (ACM) framework.; ; Professional Services are provided to support the implementation in the following activities: -; ; 1. Project Mobilisation (Role: Leading); 2. Solution Design (Role: Leading); 3. System Configuration and Data Migration (Role: Supporting); 4. System Training (Role: Leading); 5. System Familiarisation (Role: Supporting); 6. Solution Deployment / Go Live (Role: Supporting); 7. Project Closure (Role: Supporting); ; OneAdvanced supports users, using a number of change management assets including: -; ; 1. Virtual or face to face training ; 2. eLearning; 3. Quick reference guides; 4. Knowledge base; 5. Help Docs; 6. Online Help; 7. Webinars
• Service documentation: Yes
• Documentation formats:
  • PDF
  • Other
• Other documentation formats:
  • Microsoft Word
  • Online help
  • Help Docs
• End-of-contract data extraction: We provide a backup of data. However, If a customer wants the data in a more easily accessible format, they can extract it themselves or purchase Services from us to do that. We will destroy the data 90 days after the end of the contract unless the customer contracts with us to keep it available as we have to do this for GDPR. This is per our Ts &Cs. We have a standard subscription contract calling for a 5 user read only subscription at £25k per annum.
• End-of-contract process: Our contract calls for customers to have a copy of their data in a machine readable format e.g. backup. Please also refer to the response provided above.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: REST WEB services are available via our optional Business Process Manager component and specific APIs
• Accessibility standards: None or don’t know
• Description of accessibility: Through an HTML interface that can be configured to optimise user experience.
• Accessibility testing: None
• API: Yes
• What users can and can't do using the API: Create, Read, Update, Delete functions are available.
• API documentation: Yes
• API documentation formats: Other
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: Configurable controls and policy settings.

Scaling

• Independence of resources: The server infrastructure is based on a virtualised infrastructure which is monitored 24x7. Services are automatically migrated across the virtual infrastructure to automatically load balance the entire infrastructure. This ensures that no one service is unduely impacted by load placed on the infrastructure by other users. If another service is using a large amount of resources, other services are automatically migrated to other servers in the virtual infrastructure that are being utilised to a lesser extent.

Analytics

• Service usage metrics: Yes
• Metrics types: System access reports are available from within the system. Infrastructure is monitored in real time with proactive monitoring ahead of agreed thresholds being breached, whereby incident management action is triggered.
• Reporting types: Real-time dashboards

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: In-house
• Protecting data at rest: Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type: Explicit overwriting of storage before reallocation
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: There are options to export through: a) provided export processes b) reports c) download function for listed data into Excel and macros
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • JSON
  • XML
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • Via an Import Toolkit
  • XML
  • Spreadsheet upload functions from Excel are also supported

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • Other
• Other protection between networks: All data through the application is delivered over a secure connection (as a web site - password protected, API through token authentication - OAUTH2). No data stores are publicly accessible and are protected by multiple security layers.
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • Other
• Other protection within supplier network: No data is moved into the corporate network and only resides in the private cloud. All access to the cloud environment is restricted to security checked personal. Multi factor authentication is used to secure access. Access to the cloud servers is only via the corporate network. If not directly on the corporate network an IPSEC MFA connection is required to the corporate network to gain access.

Availability and resilience

• Guaranteed availability: 99.5% (Based on Monday to Friday - 8 - 6pm, excluding public holidays)
• Approach to resilience: Cloud Financials utilises a highly resilient configuration which allows the environment to be robust without single points of failure. This approach is consistent across all application tiers and ensures that a single server or a whole data-centre becoming unavailable will have minimal impact on service availability i.e if one server fails, the traffic will be automatically routed a different server in a separate region which will minimise downtime to Cloud Financials.
• Outage reporting: The Advanced Event Management service will monitor the environment and provide: Proactive monitoring and alerting of thresholds and events, Root Cause Analysis of identified problems, Reporting and trend analysis System and application-specific knowledge and tasks. When thresholds are breached within the PaaS environment, staff nominated to receive alerts will be informed via email or SMS. Advanced will respond to alerts and remediate any issues within the supported environment.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Username or password
• Access restrictions in management interfaces and support channels: Through keycloak based role access.
• Access restriction testing frequency: At least every 6 months
• Management access authentication: Other
• Description of management access authentication: We use Keycloak as the basis of identity manager so configurable options are available. For example: 2FA, X.509 client certificate user authentication, identity federation, user name & password, LDAP etc.

Audit information for users

• Access to user activity audit information: You control when users can access audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: You control when users can access audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: BSI
• ISO/IEC 27001 accreditation date: 30/06/2021
• What the ISO/IEC 27001 doesn’t cover: All activity on G-Cloud is covered by our ISO 27001 Certification
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Advanced Information information and security policies align to ISO 27001:2013.

Operational security

• Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Configuration and change management approach: The configuration and change management process ensures operational systems, services and application software are subject to change control. All staff are responsible for submitting completed change requests to the change authorisation board (CAB) using the change request form. Change requests forms, before submission to the CAB must be peer reviewed and pre-authorised by the appropriate system service owners and or business stake holder. All changes are recorded, tested and verified prior to implementation, (where possible), and are communicated to relevant members of staff and users as appropriate.
• Vulnerability management type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Vulnerability management approach: Vulnerability management is an essential component of Advanced Information Security Program and the process of vulnerability assessment is vital to effective vulnerability management. The vulnerability assessment process provides visibility into the vulnerability of critical assets deployed in the IT Infrastructure. The process comprises of identifying critical systems, their corresponding owners, vulnerability scanning on regular basis, determining and assessing potential vulnerabilities, documenting and establishing a time line to remediate critical vulnerabilities.
• Protective monitoring type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Protective monitoring approach: Advanced complies with protecitce monitoring in line with GPG 13.
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: Incident management control objectives are defined within our ISO 27001:2013 certified Information Security Management System and the procedures for Incident management are aligned to ITIL v3 industry best practice.

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  We are committed to building a better tomorrow for our staff, customers and wider community through outstanding environmental sustainability performance. Our vision is underpinned by five core principles: ; ; To protect the environment by reducing our carbon footprint ; To reduce the environmental impact of our operational activities through effective management of our estate ; To create and maintain a positive environmental sustainability culture ; To maximise the positive impact of our sustainability actions through effective communication, collaboration and partnership ; To fulfil all environmental compliance obligations and seek to exceed regulatory requirements ; ; To achieve this vision, we continuously invest in and develop our ESG strategy to provide a structured and meaningful approach to our climate activity. Our success also relies on effective engagement with staff, utilising and developing their skills, knowledge and understanding. ; ; We have launched a number of initiatives to reduce our GHG emissions on an annual basis, since 2018 we have seen a reduction in 36% in our total GHG emissions. ; ; We are proactive in the property management of our offices, maintaining pressure on landlords and staff to ensure energy efficiency. Home working is facilitated and encouraged, and unnecessary travel is minimised by the delivery of consultancy, training and implementation services remotely, where appropriate. Reducing the amount of paper we generate is a key focus, and we use recycled paper - which we then recycle ourselves. We have also taken steps to recycle other materials such as plastics, food and cardboard. We comply with WEEE regulations and recycle our electrical items. All our UK based offices are entirely using green electricity and we have undertaken an office consolidation project to minimise unnecessary carbon expenditure. ; ; We are focused on our transition to a Cloud service company ensuring our customers have solutions which are future proofed and don’t require costly or energy inefficient hardware.

  Covid-19 recovery

  In the event of a similar incident OneAdvanced has a documented Health and Safety policy regarding Covid-19 Arrangements, which focuses on handwashing, hygiene, self-isolation and social distancing. ; ; As part of our transition to hybrid working we provided all employees with the materials and processes to allow them to work at home indefinitely. In the event of a similar incident all staff are able to work from home for as long as is required. This allows them to prioritise their health and safety and avoid risk of transmission. ; ; Working from home is undoubtedly challenging and may have a negative impact on the wellbeing of our employees. We provided guidance for staff working from home to stay connected e.g., quizzes, coffee mornings and time allocated for informal catch ups. ; ; We have also made changes to our approach to visiting customers on-site. Where appropriate, training and consultancy can be provided virtually. ; ; With the increase in remote work and changes in the software landscape we have invested significantly in digital transformation and cyber security to ensure the safety of the business, employees and customers. This includes protection of personal data.

  Tackling economic inequality

  OneAdvanced is committed to tackling economic inequality. We are renowned for our recruitment processes which seek to eradicate biases that can perpetuate economic inequality. We hire for potential rather than based on experience. ; ; Our commitment to tackling economic inequality is also exemplified in our pay reporting transparency. In addition to the legal requirements to produce a Gender Pay Gap Report, we have also released our Diversity Pay Gap Report to ensure accountability and so that we can take steps to address economic inequality within our own employee base. ; ; As we develop as an organisation and embrace our role in bettering society we are building features into our products to assist us in tackling economic inequality. One example of this is our education software that is used by prisons in the UK to help educate individuals that have been in the prison system and broaden their opportunities for education. Another example is the service we provide to many NHS offices across the country which allow them to act more efficiently and see more patients each day. ; ; A focus of OneAdvanced is to commit to increasing our community outreach. As part of our strategy we are planning to implement a regular schedule of community education workshops for local schools, colleges and other groups. Examples include ‘How to get started in Tech’ and coding classes. Each employee is entitled to 1 paid day they can use to volunteer for a cause close to their heart including those that are aimed at helping those from lower socio-economic areas. ; ; Our learning and development team are in place to allow our staff the opportunity to develop their skillset and further their professional career. This can allow disadvantaged individuals to increase their opportunities to secure high paying jobs both within the software industry and outside of it.

  Equal opportunity

  Cultivating a diverse workforce and inclusive culture is a priority for OneAdvanced. Diversity of experience, age, race, ethnicity, culture, gender and sexual orientation provides a wide range of talent from entry level through to our leadership teams creating richer perspectives and a powerful frame of reference. ; ; Not only is it right to recognise and celebrate differences, and ensure everyone has the opportunity to thrive, but creating a culture that is genuinely committed to a meritocratic workplace is important to our success. Ensuring all our employees understand and engage with our values, and have the opportunity to realise their full potential, is fundamental to our business. ; ; We have published 4 Diversity Pay Gap reports that extend beyond the legal requirement for gender to ethnicity, sexuality, education, disability and socio-economic status. This data provides transparency and will aid us significantly on our journey to creating a fair and equitable workplace for all. ; ; OneAdvanced is delighted to have been announced as one of the top 100 Diversity Leaders of 2020 across UK businesses following an independent survey carried out on behalf of the Financial Times. The award assesses diversity across gender, age, ethnicity, disability and sexual orientation, and ranks organisations in Europe on the extent to which they offer diverse and inclusive workplaces. The survey focused on two broad areas, looking at the scale in which employers promoted diversity within the workforce, and identifying companies that stood out when it came to encouraging diversity and equal opportunities. ; ; OneAdvanced is renowned for its innovative recruitment process, which seeks to eradicate bias – unconscious or otherwise – when hiring. In our recruitment, we use tools that give us additional insight into intellect and attitude, and remove CVs from the interview process, so managers go in without preconceptions.

  Wellbeing

  We take wellbeing very seriously at OneAdvanced, employees have access to the following initiatives to promote wellbeing: ; ; Our Employee Assistance Program (EAP) is a 24/7 phone line where our employees can speak to a trained professional regarding any matters. Whether that is related to their current workload, or whether it is related to their finances for example. This service is 100% confidential. ; ; The Wellbeing hub on our internal website is central point for resources, such as the Thrive app to which our employees have an access code. In addition, the Hub is a link to our partnership with Perks at Work who offer discounts and classes for wellbeing, fitness, and meditation. ; ; Our offices have been made more friendly and accessible than ever before as part of our office changes brought on by the new, flexible ways of working. All our offices now contain a ‘wellbeing room’, sharp boxes for needles and free sanitary products in all bathrooms (available to guests as well as our staff). ; ; We are undertaking an exercise to update our employee value proposition and undertook research to identify what factors employees themselves want. This was done so we can provide benefits that our employees will value from the most and benefit their health and wellbeing.

Pricing

• Price: £116 to £4,761 a user a year
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at bidmanagementteam@oneadvanced.com. Tell them what format you need. It will help if you say what assistive technology you use.