Cobry

Google Workspace

Google Workspace is Google’s secure productivity and collaboration platform, giving teams of all sizes the tools they need to get everything done, all in one place.

The cloud based IT system means your teams can work and collaborate effectively no matter where they are.

Features

• Email
• Calendar
• Instant Messaging
• Video Conferencing
• File Storage
• Documents
• Slides
• Spreadsheets and Forms
• Device and Identity Management

Benefits

• Real Time Collaboration
• Secure Email and File Storage
• No Malware/Ransomware
• Secure Access to data from anywhere
• Choose your preferred data-regions

£4.60 to £23 a licence a month

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

• Modern Slavery statement

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at ryan@cobry.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

304602620437684

Contact

Ryan McKenna
01413432443
ryan@cobry.co.uk

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Hybrid cloud
• Service constraints: N/A
• System requirements: Minimum Recommended internet Speed: 2.6Mbps

User support

• Email or online ticketing support: Yes, at extra cost
• Support response times: We offer different retainer levels with different SLAs, ranging from 2 hours to 8 hours for response times. No weekend service unless separately arranged for specific projects.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Web chat
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: None or don’t know
• How the web chat support is accessible: Users can get support from our team on logged tickets via Google Chat.
• Web chat accessibility testing: N/A
• Onsite support: Yes, at extra cost
• Support levels: We provide 3 different levels of support; Bronze, Silver & Gold. The cost of these services vary depending on the size of the organisation we are supporting, as that will impact the amount of work involved.; ; Services include:; Google Workspace Administration; Onboarding & offboarding support; Helpdesk support; Security management; Innovation council and transformation labs; Training webinars; General technology advice; ; All of our retainer customers have a technical account manager.; 3rd party tool deployment and support
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: We provide bespoke Change Management services to help organisations get off to the best start with Google Workspace.; ; This includes training for end users (on-site & remote), Innovation Councils, Transformation Labs, highly detailed communications and best practice guidance.
• Service documentation: No
• End-of-contract data extraction: Users can bulk export all data, or migrate to another system.
• End-of-contract process: Customers can let their contracts expire with a 30 day notice period, or renew on a flexible term or new commitment term.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Full Functionality optimised for mobile use.
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: Admin console to manage all aspects of the system.
• Accessibility standards: None or don’t know
• Description of accessibility: Google Workspace (formerly G Suite) is Google’s secure productivity and collaboration platform which gives teams of all sizes the tools they need to get everything done, all in one place.; ; The cloud based IT system was designed specifically for businesses and it’s flexibility means your teams can work and collaborate effectively no matter where they are.
• Accessibility testing: Assistive aspects can be found here: https://support.google.com/a/answer/1631886?hl=en
• API: Yes
• What users can and can't do using the API: There is a broad scope of features that could be configured and integrated with the various workspace apps.
• API documentation: No
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Custom workflows and templates.

Scaling

• Independence of resources: Google Workspace has a 99.9% uptime guarantee and is hosted on Google's own cloud servers, allowing for huge scaling for increased use without detriment to other users.

Analytics

• Service usage metrics: Yes
• Metrics types: Data from the Google admin console such as data volumes, active users, audit logs of activity and security items.
• Reporting types: Reports on request

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: Google

Staff security

• Staff security clearance: Staff screening not performed
• Government security clearance: Up to Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest: Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: No
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Users can export their data in various formats mainly CSV files but can also connect a migration tool to move data to another platform.
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Google Workspace has a 99.9% uptime guarantee in any calendar month. If Google does not meet the SLA, then customers are eligible to receive service credits to make up for this. More info can be found via the link below.; ; https://workspace.google.com/terms/sla.html
• Approach to resilience: Google started in the cloud and runs on the cloud, so it's no surprise that we fully understand the security implications of powering your business in the cloud. Because Google and our enterprise services run on the same infrastructure, your organisation will benefit from the protections that we've built and use every day. Our robust global infrastructure, along with dedicated security professionals and our drive to innovate, enables Google to stay ahead of the curve and offer a highly secure, reliable and compliant environment.; ; Find out more via the link below.; ; https://workspace.google.com/intl/en_uk/security/?secure-by-design_activeEl=data-centers
• Outage reporting: Email alerts, public dashboard and an RRS feed.; ; https://www.google.com/appsstatus/dashboard/

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: Every Google Workspace user has their identity managed in the admin console, and we can grant access to various different channels and resources based on this. Ie. only particular users can email for services and access particular reporting dashboards.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: Between 1 month and 6 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: Between 1 month and 6 months
• How long system logs are stored for: Between 1 month and 6 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: QMS International Ltd
• ISO/IEC 27001 accreditation date: 26/01/2022
• What the ISO/IEC 27001 doesn’t cover: ISO 270001 is a management system that incorporates all aspects.
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: Yes
• Any other security certifications:
  • ISO 9001:2015
  • ISO 14001:2015

Security governance

• Named board-level person responsible for service security: No
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Our information security policies and processes are covered as part of our ISO27001 management system framework.; ; All policies covered in the ISO manual can be provided upon request.; ; We ensure we follow these policies by conducting annual internal and external audits.

Operational security

• Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Configuration and change management approach: Cobry offer a full security review and audit of customers' Google Workspace environments.; ; The audit is delivered in four stages, detailed below:; ; Initial Report - Details the existing set up of Workspace environment, with all relevant configurations, along with recommendations and reasoning. ; Consultation Call - A 60-90 minute long consultation call, to discuss the document in detail and explain the use cases for each setting/configuration.; Resulting Actions - Implementation of the required changes to the Workspace environment to align with the decisions made.; Final Report - An updated version of the report document, detailing the new set up.
• Vulnerability management type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Vulnerability management approach: All Google Workspace applications are kept up to date automatically with the latest security features, no downtime is required for deploying patches.; ; We use the Security Center in the Google admin console to access reports and alerts on suspicious activity and then take the relevant steps to resolve the issues.
• Protective monitoring type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Protective monitoring approach: The security features in the Google admin console flag up any potential threats and send email alerts to relevant stakeholders, as well as displaying on a security dashboard. ; ; Depending on severity, we email or call customers to notify them of issues and resolve them ASAP based on the SLA with the customer.
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: Users can report suspicious emails as spam, or flag files as dangerous, directly to Google, which will appear in the admin console reporting.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: No

Social Value

• Fighting climate change:

  Fighting climate change

  Google is carbon neutral today, but aiming higher: their goal is to run on carbon-free energy, 24/7, at all of our data centers by 2030. Plus, they are sharing technology, methods, and funding to enable organizations around the world to transition to more carbon-free and sustainable systems.; ; A Google data center is twice as energy efficient as a typical enterprise data center, and now delivers six times as much computing power for the same amount of electrical power, compared with five years ago. Google are sharing performance data to move the entire industry forward, and help businesses get greener.
• Covid-19 recovery:

  Covid-19 recovery

  Google provided a lot of features for free during the COVID-19 lockdown so that businesses could collaborate and communicate remotely.
• Tackling economic inequality:

  Tackling economic inequality

  Google's circular principles affect how we design products, buildings, and infrastructure, helping them make smarter use of the Earth’s resources. Google design out waste and pollution, keep materials in use, and promote more sustainable supply chains.
• Equal opportunity:

  Equal opportunity

  Google is committed to continuing to make diversity, equity, and inclusion part of everything they do—from how they build their products to how they build their workforce.; ; Google is growing to fulfill that vision. In the past few years, they’ve doubled in size—today, they have more than 100,000 employees in 170 cities spanning nearly 60 countries. Operating at this scale brings an elevated level of responsibility to everything they do—including a workforce that's more representative of their users, and a workplace that creates a sense of belonging for everyone.; ; View the diversity report via the link below:; ; https://diversity.google/annual-report/
• Wellbeing:

  Wellbeing

  As technology becomes more and more integral to everything we do, it can sometimes distract us from the things that matter most to us. Google believes technology should improve life, not distract from it. They’re committed to giving everyone the tools they need to develop their own sense of digital wellbeing. So that life, not the technology in it, stays front and center.

Pricing

• Price: £4.60 to £23 a licence a month
• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Free trials provide access to all the tools and features, but they are limited to 2 weeks.

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

• Modern Slavery statement

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at ryan@cobry.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.