EASIPC SERVICES LTD

EasiPC - Google Workspace Licensing

EasiPC Google Workspace Licensing – Fundamentals and Standard editions, provides Google Workspace licensing for schools and education organisations.

Use flexible, secure tools for free with Education Fundamentals, or add the enhanced capabilities that you need with Education Standard

Features

Secure and private email with Gmail
Integrated online calendars designed for teams
Secure Team messaging and meetings with Meet
Store, access, and share your files in one secure place
Create Documents, Sheets, Presentations and Surveys
Manage users, devices, and data securely and easily

Benefits

Secure and private email with Gmail
Integrated online calendars designed for teams
Secure Team messaging and meetings with Meet
Store, access, and share your files in one secure place
Create Documents, Sheets, Presentations and Surveys
Manage users, devices, and data securely and easily

£28.60 to £168 a user a year

Education pricing available

Service documents

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at bids@easipc.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

Contact

EASIPC SERVICES LTD Rob Lloyd
Telephone: 01604286682
Email: bids@easipc.co.uk

Service scope

Software add-on or extension: No
Cloud deployment model: Public cloud
Service constraints: None
System requirements: A modern web browser is required

User support

Email or online ticketing support: Yes, at extra cost
Support response times: All response times are defined in the service specification. Initial target response times are 30 minutes for non critical tickets up to a maximum of 8 hours for low priority service requests. No support is provided outside of working hours - Monday to Friday 8am to 5pm.
User can manage status and priority of support tickets: Yes
Online ticketing support accessibility: WCAG 2.1 AA or EN 301 549
Phone support: Yes
Phone support availability: 9 to 5 (UK time), Monday to Friday
Web chat support: No
Onsite support: Yes, at extra cost
Support levels: All EasiPC customers are assigned an account manager for general service requests, escalation of service issues and general account management. The service is a fully managed service, and any support required due to issues with the service are covered by the EasiPC service desk. Support via the service desk can be obtained via email and phone, during business hours. EasiPC also offer a fully managed service desk, providing further reactive support which can be provided at additional cost. For customers who do not have onsite support an additional onsite support service can be provided at additional cost.
Support available to third parties: Yes

Onboarding and offboarding

Getting started: EasiPC will provide a fully managed onboarding experience, managed by the Cloud Deployment team and following PRINCE2 project management processes. During initial consultancy, the EasiPC Cloud Deployment team will build a bespoke onboarding process defined by the exact service requirement. During onboarding, EasiPC will provide support and training, including but not limited to electronic resources, workshops and webinars.

Additional charges may apply where full support is required during onboarding.
Service documentation: Yes
Documentation formats: HTML

PDF
End-of-contract data extraction: If your organisation decides to leave G Suite, users can take their G Suite data with them. They can export emails, contacts, calendars and Drive data. Then, they can import the data to your new provider.

To extract data the individual end users will need to use 'Download your data' option within G Suite. More information can be found here: https://support.google.com/a/answer/100458
End-of-contract process: Access to the G Suite instance will be terminated and data will be removed from all Google systems within 180 business days.

Using the service

Web browser interface: Yes
Supported browsers: Microsoft Edge

Firefox

Chrome

Safari

Opera
Application to install: No
Designed for use on mobile devices: Yes
Differences between the mobile and desktop service: None
Service interface: Yes
User support accessibility: WCAG 2.1 AA or EN 301 549
Description of service interface: Please see the following URL for information on the Workspace interface:

https://workspace.google.com/intl/en_uk/products/admin/
Accessibility standards: WCAG 2.1 AA or EN 301 549
Accessibility testing: Extensive end user testing to ascertain conformity to the above standards.
API: No
Customisation available: No

Scaling

Independence of resources: Google’s services are designed for millions of users. Google runs multiple different performance tests, including load testing applications under high load over a long period, to observe affects or potential impacts.

Analytics

Service usage metrics: Yes
Metrics types: Please see the following URL for full details on reporting:

https://support.google.com/a/answer/4579578?hl=en
Reporting types: Real-time dashboards

Resellers

Supplier type: Reseller providing extra support
Organisation whose services are being resold: Google

Staff security

Staff security clearance: Other security clearance
Government security clearance: None

Asset protection

Knowledge of data storage and processing locations: Yes
Data storage and processing locations: United Kingdom

European Economic Area (EEA)
User control over data storage and processing locations: Yes
Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
Penetration testing frequency: At least every 6 months
Penetration testing approach: Another external penetration testing organisation
Protecting data at rest: Physical access control, complying with CSA CCM v3.0

Physical access control, complying with SSAE-16 / ISAE 3402

Physical access control, complying with another standard

Encryption of all physical media

Scale, obfuscating techniques, or data storage sharding

Other
Other data at rest protection approach: Core customer data that is uploaded or created in Google Workspace services is encrypted at rest. This encryption happens as it is written to disk, without the customer having to take any action. Google encrypts data with distinct encryption keys, even if they belong to the same customer. Data is encrypted using 128-bit or stronger Advanced Encryption Standard (AES).
Data sanitisation process: Yes
Data sanitisation type: Explicit overwriting of storage before reallocation
Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

Data export approach: Users can export and download data from the Google products they use, like your email, calendar, and photos. In a few easy steps, create an archive to keep for your records or use the data in another service. See more details here: https://support.google.com/accounts/answer/3024190
Data export formats: CSV

ODF

Other
Other data export formats: Full migration away from Google, additional charges may apply
Data import formats: CSV

ODF

Other
Other data import formats: Full migration to Google, additional charges may apply

Data-in-transit protection

Data protection between buyer and supplier networks: TLS (version 1.2 or above)
Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

Guaranteed availability: Contractually Google's Service Level is guaranteed to 99.9% availability for any calendar month and backed with service credits. Definitions and service credits are described at https://gsuite.google.com/intl/en-GB/terms/sla.html
Approach to resilience: To minimize service interruption due to hardware failures, natural disasters or other incidents, Google has built a highly redundant infrastructure of data centres. Google Workspace has an RPO (Recovery Point Objective) target of zero, and our RTO (Recovery Time Objective) target is instant failover (or zero).
Outage reporting: Google provides access to a G Suite dashboard offering performance information for G Suite services here:https://www.google.com/appsstatus#hl=en-GB

Outages and status updates are also reported to G Suite administrator by email.

Identity and authentication

User authentication needed: Yes
User authentication: 2-factor authentication

Identity federation with existing provider (for example Google Apps)

Username or password
Access restrictions in management interfaces and support channels: Depending on setup, users can be signed in via a federated identity service for example Azure Active Directory, or use Google Workspace as their identity provider. 2 Factor authentication is supported and can be enforced. Administrative access privileges are granted separately to individual users or groups.
Access restriction testing frequency: At least once a year
Management access authentication: 2-factor authentication

Public key authentication (including by TLS client certificate)

Identity federation with existing provider (for example Google Apps)

Username or password

Audit information for users

Access to user activity audit information: Users have access to real-time audit information
How long user audit data is stored for: Between 1 month and 6 months
Access to supplier activity audit information: Users have access to real-time audit information
How long supplier audit data is stored for: Between 1 month and 6 months
How long system logs are stored for: Between 1 month and 6 months

Standards and certifications

ISO/IEC 27001 certification: No
ISO 28000:2007 certification: No
CSA STAR certification: No
PCI certification: No
Cyber essentials: Yes
Cyber essentials plus: Yes
Other security certifications: No

Security governance

Named board-level person responsible for service security: Yes
Security governance certified: Yes
Security governance standards: ISO/IEC 27001
Information security policies and processes: ISO/IEC 27017:2015, ISO/IEC 27018:2014, SSAE16/ISAE 3402,
Privacy Shield, FedRAMP, HIPPA, GDPR

Operational security

Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Configuration and change management approach: In Google production environments, software updates are manually vetted to ensure the stability of the system. Changes are then tested and cautiously rolled out to systems. The details vary somewhat depending on the service being considered, but all development work is separated from the operation systems, testing occurs in a multi-staged fashion in both environments and in dedicated test settings. Google can share, under NDA, the SOC2 audit report (based on standards from the International Auditing and Assurance Standards Board), which describes the change management process. Additionally, changes to code go through a process of code review involving additional engineer(s)
Vulnerability management type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Vulnerability management approach: Google administrates a vulnerability management process that actively scans for security threats using a combination of commercially available and purpose-built tools, intensive automated/manual penetration efforts, quality assurance processes, software security reviews and external audits. The vulnerability management team is responsible for tracking and following up on vulnerabilities. Once a vulnerability requiring remediation has been identified, it is logged, prioritized according to severity, and assigned an owner. The vulnerability management team tracks such issues and follows up frequently until they can verify that the issues have been remediated. Google also maintains relationships and interfaces with members of the security research community.
Protective monitoring type: Supplier-defined controls
Protective monitoring approach: Focused on information gathered from network traffic, employee actions on systems and outside knowledge of vulnerabilities. Traffic is inspected at many points for suspicious behaviour. Analysis is performed using open-source and commercial tools for traffic capture and parsing, supported by a correlation system built on top of Google technology. Analysis is supplemented by examining system logs for unusual behaviour, such as attempted access of customer data. Security engineers place standing alerts on public data repositories to look for security incidents that might affect company infrastructure. They actively review inbound security reports and monitor public mailing lists, blog posts, and wikis.
Incident management type: Supplier-defined controls
Incident management approach: If an incident occurs, the security team logs and prioritises it according to severity. Events directly impacting customers are assigned the highest priority. This process specifies courses of action, procedures for notification, escalation, mitigation, and documentation. Google’s incident management program is structured around NIST guidance on handling incidents. Key staff are trained in forensics and handling evidence in preparation for an event, including the use of third-party and proprietary tools. Testing of incident response plans is performed for key areas, such as systems that store sensitive customer information. Tests consider a variety of scenarios, including insider threats and software vulnerabilities.

Secure development

Approach to secure software development best practice: Supplier-defined process

Public sector networks

Connection to public sector networks: No

Pricing

Price: £28.60 to £168 a user a year
Discount for educational organisations: Yes
Free trial available: No

Service documents

Request an accessible format

Cookies on Digital Marketplace

EasiPC - Google Workspace Licensing

Features

Benefits

Pricing

Service documents

Framework

Service ID

Contact

Service scope

User support

Onboarding and offboarding

Using the service

Scaling

Analytics

Resellers

Staff security

Asset protection

Data importing and exporting

Data-in-transit protection

Availability and resilience

Identity and authentication

Audit information for users

Standards and certifications

Security governance

Operational security

Secure development

Public sector networks

Social Value

Pricing

Service documents