Fincore Limited

Finworks - Asset Management System

Finworks Asset Management Platform allows organisations to create, operate and maintain effective asset management processes for a variety of asset types such as highways and street works, environmental services, buildings or facilities, equipment, software, intellectual property, contractual rights and financial instruments/assets. The solution provides for proactive management throughout their lifecycle.

Features

• Powerful platform with user-configurable workflows, forms, rules and data attributes
• Collaboration capabilities for complex multi-organisational workflows
• Intelligent data discovery providing a simple solution to manage assets
• Smart, automated data onboarding with quality assurance processes
• Supports accelerated data modelling, “Big Data” mining and querying
• Extensive KPI management, reporting, dashboards and audit trail capabilities
• Secure data distribution to downstream applications, processes and platforms
• Secure collaboration with suppliers and other agencies
• Compliant to Government and Central Banking security standards
• Open APIs for easy integration to other systems

Benefits

• Protect asset value, manage risks and optimise utilisation
• Operational process acceleration through workload monitoring with associated cost reduction
• Brings transparency to decision-making, licence management, vendor management and audits
• Easy to configure, providing quality information to effectively manage assets
• Reliable data stewardship and data governance
• Cloud agnostic (public, private or hybrid) – yours or ours
• No need for specialist Big Data or IT development skills
• Secure access and automated notifications for external users/suppliers and agencies
• Effortless integration to other systems, including legacy data silos
• Well-established platform for mission critical deployments in the public sector

£21 a user a month

• Education pricing available

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at government@fincore.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

243443544132682

Contact

Brian Diboll
+44 (0)207 397 0620
government@fincore.com

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Community cloud
  • Hybrid cloud
• Service constraints: Please see our Service Definition document for details of the service. This includes a section on customer technical requirements and also details support and maintenance arrangements.
• System requirements:
  • Browser as per our browser specifications
  • Reasonably modern PC/mobile device
  • Sufficient bandwidth to access the service
  • Sufficient bandwidth to process data if in separate data centre

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: In accordance with an agreed support SLA. Normally within 1 Hour on weekdays during normal UK office hours but can cover 24/7/365.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.1 AAA
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Yes, at an extra cost
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: WCAG 2.1 AAA
• Web chat accessibility testing: Tested with standard browsers and to meet accessibility standards.
• Onsite support: Yes, at extra cost
• Support levels: We customise our support arrangements according to your individual needs. Support can be provided on either an SLA or capped effort basis, with support hours and SLA terms agreed according to your specific requirements. Support is provided by an expert team, and we have a reputation for building systems that are easy to use and require little support. Please see our Service Definition document and Pricing for further details of our support arrangements.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Our service is designed to be extremely easy to use, to the extent that some customers do not feel any need to train their staff to use it. We can however provide training, train-the-trainer support for in-house training, and relevant documentation as needed. We can also provide a full range of onboarding, configuration and other implementation services. Please see our Service Definition and Pricing documents for details.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • ODF
  • PDF
• End-of-contract data extraction: Finworks can provide an extract of the database in XML, CSV, ODF and JSON format and any stored files in their provided document format. Alternatively, users can directly extract all customer data and files using the service's API.
• End-of-contract process: Please see the Exit Plan section of our Service Definition document.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Our mobile service is provided through responsive design. All core features can be used on mobile devices that meet the browser requirements, but certain functions (e.g. where large amounts of data need to be viewed on screen) are best undertaken on a PC or tablet with a suitable screen size.
• Service interface: Yes
• User support accessibility: WCAG 2.1 AAA
• Description of service interface: All key capabilities can be accessed and integrated through our service interface. This allows seamless integration with other services, platforms, websites, apps and applications.
• Accessibility standards: WCAG 2.1 AAA
• Accessibility testing: Tested with standard browsers and audited through a third-party company.
• API: Yes
• What users can and can't do using the API: The service provides a RESTful Application Programming Interface (API) which allows programmatic control of any user and service management function. This includes creating, updating and extracting data (all customer data can be extracted or input using the APIs); (ii) creating and modifying queries, process flows, triggers, transformations, layouts and other objects important to system and user experience; and (iii) programmatic control of system and user management including operational monitoring. All the API calls are documented in a repository with HTML views and pdf print capabilities, with relevant sample calls and example code to aid comprehension . A test suite, or 'sandbox', can be made available as needed.
• API documentation: Yes
• API documentation formats:
  • Open API (also known as Swagger)
  • HTML
  • ODF
  • PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: The service provides broad data management capabilities that can be very extensively configured and customised by users.

Scaling

• Independence of resources: Customers have a dedicated instance of our service and a dedicated virtual machine(s), network and storage resources which can be adjusted as needed by the customer. Monitoring and planning services are available to assist with adapting to changing resource requirements. All transactions are queued to allow the system to regulate service quality. Individual transactions can also be limited to a maximum resource requirements usage. Users and user groups can also be limited to resource quotas.

Analytics

• Service usage metrics: Yes
• Metrics types: Finworks has standard service metrics which can be amended to or customised to specific requirements. The service metrics can be defined by the customers to suit their KPIs. We can extract a very broad range of data from: (i) our application; (ii) our hosting environments; and (iii) our support systems. For example, our workflow system provides visualisation of process cycle times and bottlenecks.
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CHECK service provider
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v3.0
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Physical access control, complying with another standard
  • Encryption of all physical media
  • Other
• Other data at rest protection approach: We apply a defence in depth approach to the hosting environments we provide.
• Data sanitisation process: Yes
• Data sanitisation type:
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Our application has extensive data export capabilities that can be used to export all customer data and files. There is also an extensive API suite that provides similar capabilities.
• Data export formats:
  • CSV
  • ODF
  • Other
• Other data export formats:
  • XML
  • PDF
  • JSON
  • SPARK PARQUET FILES
  • TXT
  • DOC
  • DOCX
  • XLS
  • XLSX
  • JPG & PNG
• Data import formats:
  • CSV
  • ODF
  • Other
• Other data import formats:
  • XML
  • TXT
  • PDF
  • JPG
  • PNG
  • DOC
  • DOCX
  • XLS
  • XLSX
  • JSON

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Other
• Other protection between networks: IP address whitelisting can be applied to customers. Where applicable, highly sensitive data could also be shipped in an encrypted format (in addition to transmission using TLS).
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Other
• Other protection within supplier network: We apply a defence in depth approach within the hosting environments we provide.

Availability and resilience

• Guaranteed availability: Depending on the hosting and support arrangements in place, we can offer SLA-governed availability levels of up to 99.9% (excluding scheduled downtime).
• Approach to resilience: We offer a range of resilience options. Please see our Service Definition document.
• Outage reporting: We agree outage reporting arrangements in the service level agreement (SLA) with individual customers to fit in with their own processes on a per contract basis.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Dedicated link (for example VPN)
  • Username or password
  • Other
• Other user authentication: Access over government networks could also easily be provided; all the necessary security provisions are already in place. Likewise, identity federation would be easy to provide and is on our roadmap for delivery over the G-Cloud 12 framework period.
• Access restrictions in management interfaces and support channels: Our preferred platform is AWS however our solutions are cloud agnostic and we would be happy to provide the software on any cloud platform. For our standard service, the AWS Management Console is used to manage the AWS accounts and requires 2 factor authentication. Support access to the AWS infrastructure and servers is via 2-factor authentication across a VPN connection. This VPN is established using public key authentication. Username and password are required for access into the active directory domain. Where hosting with an alternative cloud provider or on premise is requested, access arrangements will be agreed with the customer.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Limited access network (for example PSN)
  • Dedicated link (for example VPN)
  • Username or password
  • Other
• Description of management access authentication: We have an extensive range of authentication services as indicated above.

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: Peers Quality Assurance Ltd
• ISO/IEC 27001 accreditation date: 19/11/2021
• What the ISO/IEC 27001 doesn’t cover: All Fincore's activities are covered, including all activities under our Finworks trading name.
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: Yes
• Any other security certifications: ISO 9001:2015

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards:
  • ISO/IEC 27001
  • Other
• Other security governance standards: Cyber Essentials scheme and Data Security and Protection toolkit.
• Information security policies and processes: Fincore is accredited to the ISO27001 ISMS standard, with a regular programme of internal and external (independent) audit to monitor and maintain compliance. Fincore is also accredited to the ISO9001 quality management standard, and is registered with the Information Commissioner's Office for data protection.

Operational security

• Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Configuration and change management approach: Every customer fully controls the configuration of their service-instances. When Finworks makes changes on behalf of customers: a business analyst will capture requirements which will be implemented by trained specialists; a solution architect and our QA team review requirements prior to design, then review and test proposed detail configuration changes prior to deployment ensuring functional, SLA, and information-security quality criteria are met. Change management processes for configuration changes are agreed with customers. For software development, our SaaS development process follows best practice standards for robust, secure trusted cloud software. The change process is recorded in a centralised change management portal.
• Vulnerability management type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Vulnerability management approach: We undertake threat reviews when we make changes to our software or infrastructure and when new threats are made public. We carry out regular penetration testing and our CSO monitors security information sources. Our DevOps team are responsible for addressing public threats and the system architects would address any vulnerabilities identified based on the area of the threat. The speed of patching is proportionate to the level of threat identified.
• Protective monitoring type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Protective monitoring approach: We have an IDS/IPS in place with anti-virus and anti-malware software on all Windows servers. We collate log files centrally from all relevant system components, and these are reviewed daily by the DevOps team. When unusual activity is identified, it is escalated to our system architects who, in consultation with our CISO, will determine the appropriate course of action. DarkTrace and Cisco Firepower are used for monitoring the network activity.
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: When incidents occur, they are triaged by a Service Manager who co-ordinates the response in accordance with our ISO27001 policies and procedures. Our team and customers may report incidents by phone, email or directly and all incidents are logged in our centralised incident management portal. Major incidents will be escalated immediately to senior management level. The Service Manager provides regular updates and an incident report on resolution.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: Yes
• Connected networks:
  • Public Services Network (PSN)
  • NHS Network (N3)
  • Health and Social Care Network (HSCN)

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  Workflow software and data management software serve as powerful tools in the fight against climate change by facilitating effective stewardship of the environment. Through a range of activities, these software solutions enable organisations to deliver additional environmental benefits in the performance of contracts, while also influencing stakeholders to support environmental protection and improvement.; ; One significant impact of workflow and data management software is their ability to streamline processes and optimise resource utilisation, thereby reducing carbon emissions and other harmful environmental impacts associated with business operations. By automating tasks, minimising waste, and optimising energy usage, organisations can lower their carbon footprint and work towards achieving net-zero greenhouse gas emissions in the performance of their contracts.; ; Moreover, these software solutions enable organisations to track and monitor environmental performance metrics, such as energy consumption, waste generation, and carbon emissions, in real-time. By centralising and analysing data, organisations can identify areas for improvement and implement targeted initiatives to enhance environmental stewardship throughout their operations. This data-driven approach helps organisations to set and achieve ambitious sustainability goals, while also fostering transparency and accountability in their environmental practices.; ; Furthermore, workflow and data management software play a crucial role in influencing staff, suppliers, customers, and communities to support environmental protection and improvement. Through the delivery of contracts, organisations can leverage these software solutions to communicate their commitment to sustainability and engage stakeholders in collaborative efforts to mitigate climate change. By providing stakeholders with access to information and resources related to environmental best practices, organisations can inspire positive behaviour change and foster a culture of environmental responsibility across their networks.

  Covid-19 recovery

  In the wake of the COVID-19 pandemic, the integration of workflow and data management software has emerged as a crucial asset in aiding local communities, organisations, and businesses to manage and recover from the profound impacts of the crisis. These software solutions play a pivotal role in facilitating the adaptation of new operational paradigms necessitated by the pandemic while concurrently fostering social value and supporting the broader recovery effort.; ; One of the primary contributions of workflow software lies in its ability to streamline processes and enhance operational efficiency, thereby enabling local communities to navigate the complexities of the pandemic more effectively. By automating tasks, coordinating resources, and optimising workflows, this software empowers organisations to deliver essential services with greater agility and responsiveness, ultimately bolstering community resilience and well-being.; ; Furthermore, data management software serves as a critical tool in harnessing the power of data to inform decision-making and resource allocation in the context of COVID-19 recovery. By centralising and analysing disparate data sources, these platforms provide valuable insights into evolving community needs, emerging trends, and effective intervention strategies, enabling stakeholders to allocate resources more strategically and mitigate the socioeconomic impacts of the pandemic more comprehensively.; ; Finworks software solutions aid in the adoption of new work modalities, such as remote working and social distancing measures, which are essential for ensuring workplace safety and continuity. By enabling seamless collaboration, communication, and task management across distributed teams, these technologies empower organisations to adapt to the evolving dynamics of the pandemic while safeguarding the health and well-being of their workforce.; ; Additionally, by promoting sustainable travel solutions and reducing the need for physical presence in traditional workplace settings, these software solutions contribute to the mitigation of environmental impacts associated with commuting and office-based work, thereby advancing broader sustainability objectives in tandem with the COVID-19 recovery effort.

  Tackling economic inequality

  The integration of workflow and data management software holds immense potential for tackling economic inequality by fostering the creation of new businesses, jobs, and skills while simultaneously enhancing supply chain resilience and capacity. ; ; Firstly, workflow software enables the optimisation of operational processes, thereby creating employment and training opportunities for individuals, particularly those in industries facing skills shortages or within high-growth sectors. By automating routine tasks and facilitating resource allocation, this software empowers businesses to expand their workforce and upskill employees, thereby narrowing the skills gap and fostering social mobility.; ; Moreover, data management software plays a pivotal role in supporting innovation and disruptive technologies throughout the supply chain, thereby enabling businesses to deliver lower-cost and higher-quality goods and services. By centralising and analysing data, organisations can identify emerging opportunities, thereby fostering the development of scalable and future-proofed methods to modernise delivery and increase productivity.; ; Furthermore, the promotion of collaboration and responsible practices throughout the supply chain is facilitated by workflow and data management software, thereby fostering a diverse and inclusive business ecosystem. By supporting new businesses, entrepreneurs, start-ups, SMEs, VCSEs, and mutuals, these technologies contribute to the creation of a more resilient and equitable supply chain, while also mitigating cyber security risks and ensuring the integrity of operations.; ; Additionally, the influence of staff, suppliers, customers, and communities through the delivery of contracts serves to strengthen resilience and capacity within the supply chain. By fostering transparency, accountability, and ethical practices, organisations can enhance trust and cooperation among stakeholders, thereby creating a more robust and sustainable business environment.; ; By fostering innovation, collaboration, and responsible practices throughout the supply chain, workflow and data management software empower businesses to create meaningful opportunities for employment, skills development, and socio-economic advancement, thereby laying the groundwork for a more equitable and prosperous future.

  Equal opportunity

  Workflow software and data management software play a crucial role in promoting social value by addressing workforce inequality and fostering equal opportunities for all individuals, including those from disadvantaged or minority groups. These software solutions empower organisations to implement activities that support in-work progression, enabling individuals to acquire new skills relevant to their contracts and move into higher-paid positions.; ; One way in which workflow and data management software contribute to equal opportunity is by facilitating personalised skill development programs tailored to the specific needs and capabilities of employees. Through data analysis and workforce optimisation tools, organisations can identify skill gaps and areas for improvement among their workforce. By leveraging workflow software, they can design customised training modules and learning pathways that enable individuals, including those from marginalised backgrounds, to acquire the skills necessary for advancement within the organisation.; ; Moreover, data management software enables organisations to track and monitor the progress of employees as they undergo skill development programs. By analysing performance metrics and feedback data, organisations can assess the effectiveness of their training initiatives and make data-driven adjustments to ensure equitable access to learning opportunities. This approach helps to mitigate biases and systemic barriers that may hinder the advancement of individuals from disadvantaged or underrepresented groups, thereby promoting equal opportunity and workforce equality.; ; Overall, the integration of workflow and data management software enables organisations to implement targeted initiatives that promote equal opportunity and address workforce inequality. By facilitating in-work progression and skill development for individuals from disadvantaged or minority groups, these software solutions contribute to a more inclusive and equitable workplace, where all employees have the opportunity to thrive and advance in their careers.

  Wellbeing

  Workflow software and data management software have a significant impact on social value by improving health and mental well-being in the contract workforce and fostering community integration.; ; Firstly, these software solutions enable organisations to demonstrate action in supporting the health and well-being, encompassing both physical and mental health, of their contract workforce. By leveraging workflow software, organisations can implement initiatives such as flexible scheduling, remote work options, and access to wellness programs. Data management software facilitates the tracking of health-related metrics and the analysis of trends, allowing organisations to identify areas for improvement and tailor interventions to meet the specific needs of their workforce. This proactive approach not only enhances the physical and mental well-being of employees but also fosters a supportive and inclusive work environment.; ; Furthermore, workflow and data management software play a crucial role in influencing staff, suppliers, customers, and communities to support health and well-being initiatives. Through the delivery of contracts, organisations can leverage these software solutions to promote health-conscious practices and encourage stakeholders to prioritise their physical and mental well-being. By providing access to resources, information, and support networks, organisations can empower individuals to take proactive steps towards improving their health and well-being, thereby creating a positive ripple effect throughout the community.; ; Additionally, these software solutions contribute to social value by improving community integration through collaboration with users and communities in the co-design and delivery of contracts. By engaging stakeholders in the decision-making process and soliciting feedback on service delivery, organisations can foster a sense of ownership and belonging within the community. Moreover, by influencing staff, suppliers, customers, and communities to support strong, integrated communities, organisations can build trust, resilience, and social cohesion, ultimately contributing to the overall well-being and prosperity of society.

Pricing

• Price: £21 a user a month
• Discount for educational organisations: Yes
• Free trial available: No

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at government@fincore.com. Tell them what format you need. It will help if you say what assistive technology you use.