Common MS

SAP SuccessFactors Employee Central

HR needs to move beyond automating processes/reducing costs, to drive people's decisions that help grow the business. Employee Central supports this, integrated with talent it allows decisions to be based on a 360-degree view of an employee. Built for all employees to use, it is designed for business execution

Features

• Core HR/Payroll - supports all components , integrated with Talent
• Great UI - built for everyone not just HR Admins
• Actionable analytics - helps HR measure the workforce-business results
• Supports collaboration - being integrated with our Social tool
• Multi-lingual
• Easy to implement and maintain
• Built in wizards, smart business rules, org charts
• Flexible workflows
• Easily scales as business needs expand, without disruption
• Integrates with Recruitment, Learning, Performance, Succession and Compensation

Benefits

• Consumer Grade Application
• 360-degree view of employee life cycle , hire to retire
• Better people decisions, using talent, HR and core HR data
• Native Manager and Employee Self Service
• Align HR strategy better to the business objectives
• 2000+ built-in HR metrics, benchmarks to allow trending

£27.00 a user a year

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at samina.baig@commonms.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

229466049819542

Contact

Samina Baig
+44 7768581576
samina.baig@commonms.com

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: Only available as a public cloud offering
• System requirements:
  • Desktop Browser, IE 11, Edge, Firefox, Chrome, Safari
  • Mobile Browser
  • Network bandwidth Recommended connection speed 300 - 400 kbit/s
  • Screen resolution XGA 1024x768 (high color) or higher

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: SLAs are agreed with Customers. Weekend SLAs may be different but again will be agreed with Customers
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Onsite support
• Support levels: Support level are detailed in SAP Support for Cloud services policy
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Training guide and support is made available through SAP Successfactors user community
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Reporting Tools are available to enable customers to extract their data at the end of the service
• End-of-contract process: The customer will be offered the opportunity to extend their commitment , should they decide not to continue wiht the service, they must ensure that all data is extracted before the access to the service is terminated on the contract end date

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Chrome
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Currently we have more than 2,000 customers taking advantage of our mobile apps all over the world. In a multi-device, multi-screen world we think about mobile not just as a way to expand access to your most critical HR systems but also as an opportunity to enable people to work differently.We are so confident about the transformative power mobile HR can have in your organization that we want to make it really easy for customers like you to try, experiment, and see it for yourself.
• Service interface: No
• User support accessibility: WCAG 2.1 AA or EN 301 549
• API: Yes
• What users can and can't do using the API: https://api.sap.com/
• API documentation: Yes
• API documentation formats:
  • Open API (also known as Swagger)
  • HTML
  • PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Service is a SaaS offering that allows a lot of flexibility through configuration of the service. New objects can also be added as well as User Interface in order to build new business processes. (this is done via the extension center that allows to build Objects, rules, workflow and UI without coding) Extension through coding (not change of the Software but extension) via the SAP Cloud Platform which is an Platform as a Service completely integrated with SAP SuccessFactors

Scaling

• Independence of resources: SAP SuccessFactors was designed and developed, from the outset, to be a highly scalable application. SuccessFactors also uses the concept of “PODS,” from a hardware perspective. A POD is a fault tolerant cluster of application & DB servers designed, as a scalable unit, to provide core processing and data storage services for fixed increment of customers.

Analytics

• Service usage metrics: Yes
• Metrics types: Dashboards and reports are available within the customer community tools that details service up time and planned outages
• Reporting types:
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

• Supplier type: Reseller providing extra support
• Organisation whose services are being resold: SAP

Staff security

• Staff security clearance: Staff screening not performed
• Government security clearance: Up to Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v3.0
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Encryption of all physical media
  • Other
• Other data at rest protection approach: AES 256 bits encryption
• Data sanitisation process: No
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Reporting and Integration tools are available within the solution to allow admin users to export data down to field level or create data files that can be used for integration purposes
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • XML
  • Microsoft Excel
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • XML
  • Microsoft Excel

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: 99.5% System Availability percentage during each Month for productive versions Credit 2% of Monthly Subscription Fees for each 1% below SLA, not to exceed 100% of Monthly Subscription Fees
• Approach to resilience: This information is available upon request
• Outage reporting: Outages are reported using e-mail alerts as well as public dashboard available in the user community

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: Via IP Filtering, 2 Factors Authentication. and other information can be provided on request
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: LGAI Technological Center, S.A (Applus+)
• ISO/IEC 27001 accreditation date: 13/09/2019
• What the ISO/IEC 27001 doesn’t cover: N/A
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: Yes
• Any other security certifications:
  • ISO 9001 – Quality Management System
  • ISO 22301 – Business Continuity Management System
  • ISO/IEC 27018 – Code of Practice for Personally Identifiable Information
  • ISO/IEC 27001 – Security Management System
  • BS 10012 – Personal Information Management System
  • ISO/IEC 27017 Code of Practice for Cloud Service Information Security

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: This information can be provided upon request Public information are our Data processing Agreement and Security policies available here: https://www.sap.com/corporate/en/company/security.html

Operational security

• Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Configuration and change management approach: All processes and policies are defined following best industry standards. Most of those policies are internal and are audited in our SOC2 Audit which is made twice a year and available to our customer
• Vulnerability management type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Vulnerability management approach: All processes and policies are defined following best industry standards. Most of those policies are internal and are audited in our SOC2 Audit which is made twice a year and available to our customer
• Protective monitoring type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Protective monitoring approach: All processes and policies are defined following best industry standards. Most of those policies are internal and are audited in our SOC2 Audit which is made twice a year and available to our customer
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: All processes and policies are defined following best industry standards. Most of those policies are internal and are audited in our SOC2 Audit which is made twice a year and available to our customer

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: No

Social Value

• Fighting climate change:

  Fighting climate change

  N/A
• Covid-19 recovery:

  Covid-19 recovery

  N/A
• Tackling economic inequality:

  Tackling economic inequality

  N/A
• Equal opportunity:

  Equal opportunity

  N/A
• Wellbeing:

  Wellbeing

  N/A

Pricing

• Price: £27.00 a user a year
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at samina.baig@commonms.com. Tell them what format you need. It will help if you say what assistive technology you use.