THE GORDIAN GROUP LIMITED

Capital Planning on Gordian Cloud Platform

Our platform is a comprehensive solution designed to empower facility managers and stakeholders with precise, actionable data for informed Capital Planning and maintenance decisions. From mobile data capture tools to AI-generated image descriptions and geolocation, we streamline asset assessments in real-time, offering an accurate, on-the-ground view of facility conditions

Features

• Facility Condition Assessments
• System Lifecycle Assessments
• Statistical Modelling
• Manage Vendors
• Green Building Assessments
• Energy Assessments
• Non-Structural Seismic Assessments

Benefits

• Provide comprehensive objective and defensible data
• Aggregate system-level information for deferred maintenance and capital renewals
• Provide high-level insight into building condition
• Records and tracks vendor interactions and information
• Evaluate the costs and benefits of sustainability programmes
• Help identifiy opportunities to save energy and reduce costs
• Can pinpoint non-structural components at risk.

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at owainjames.page@gordian.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

314730954143002

Contact

Owain Page
0800 066 8060
owainjames.page@gordian.com

About the service

• Service categories:
  • Application Development and Deployment
    • Software quality and life cycle
      • Automated software quality
        • Automated software quality
      • Software change, configuration and process management
        • Software change, configuration and process management
• Multi cloud support: Yes

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: Providing internet access/4g or 5g is available for download and upload, there are no constraints to use the service
• System requirements: Secure Internet Access/4G or 5G

User support

• Email or online ticketing support: Yes
• Support response times: Average response time is less than 4 hours from Monday to Friday, although we strive to respond within an hour. We do not provide Kykloud support on weekends, but do commit to responding first thing Monday morning if a request is submitted over the weekend
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 A
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Urgent calls: Application issue affecting all users; the system is inoperable. - Response within 30 minutes. - Escalation: Immediately to technical ; Notification to senior management­ immediately; Account Manager informed. High calls: Bug affecting key functionality and limiting ; the available functionality of the system. - Response within 1 hour - Escalation: Immediate notification to Help Desk Supervisor; Notification to helpdesk manager if SLA not met. Normal calls: A specific functional area is inoperable while other areas of the system are functioning normally. - Response within 4 hours - Escalation: Notification to helpdesk manager if SLA not met. Low calls: Advice, "how to" calls. Reports of less critical errors. - Response within 24 hours - Escalation: Notification to helpdesk manager if SLA not met. Request for Change: Request for new feature; feedback on a usability issue. - Acknowledged within 1 working day
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: On-site training can be provided at a cost, online training and online help documentation are provided
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• Documentation accessibility standard: WCAG 2.2 A
• End-of-contract data extraction: Secure FTP transfer from Support Department
• End-of-contract process: A request to terminate, or at the end of the contract, a request to end is controlled by the assigned Account Manager. Outstanding costs will be settled.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: Yes
• Compatible operating systems:
  • Android
  • IOS
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Differences between the mobile and desktop service; Gordians Asset Capture provides a seamless collection experience to get condition assessment data into the Gordian Cloud platform on-site and in real time. with no steps between the field and the office, assessors save time and reduce the risk of errors
• Service interface: No
• User support accessibility: WCAG 2.2 A
• API: No
• Customisation available: No

Scaling

• Independence of resources: Capital Planning is a multi-tenanted environment that strictly regulates and controls separation between users so there are no adverse performance impacts between users.

Analytics

• Service usage metrics: Yes
• Metrics types: This can be in the form of a Dashboard to show your portfolio distribution and data
• Reporting types:
  • Real-time dashboards
  • Reports on request
• Resource tagging: Yes
• FOCUS resource tagging: No

Supplier type

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CHECK service provider
• Protecting data at rest:
  • Physical access control, complying with another standard
  • Encryption of all physical media
• Data sanitisation process: No
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: All Core data is stored within ISO27001; accredited data centres, and all backups will be; encrypted and replicated to secondary ISO27001; accredited data centres. Customer data is stored; and accessed via their own dedicated url. All data; will be backed up using industry recognised; standards with a recovery point of 1 hour. Data; export is guaranteed; a customer can request a; full copy of their data at any time.
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Capital Planning provides 99.5% availability, and generally exceeds this target.
• Approach to resilience: Data centres used for Capital planning have disaster recovery plans in place so all data is full retained
• Outage reporting: Outages will be reported by email alerts; such occurrences will be continually monitored by the Support Desk who will keep users informed of any adverse status by means of regular email bulletins.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password
• Access restrictions in management interfaces and support channels: Gordian adhered to its Access and Control Plan, a copy can be requested upon a NDA
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password

Audit information for users

• Access to user activity audit information: You control when users can access audit information
• How long user audit data is stored for: Between 6 months and 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: Between 6 months and 12 months
• How long system logs are stored for: Between 6 months and 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Software Security Code of Practice: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Compliance to the following Security Policies is ; enforced through internal process improvement ; processes and by external certification audits: ISP 02 Risk Management and Assessment ISP 03 Access Control and Account Management ISP 04 Security Incident Management ISP 05 Asset ; Management and Information Classification ISP 06 Acceptable Use ISP 07 System Security and ; Network Access ISP 08 Business Continuity Plan; ISP 10 Security Patching ISP 11 Information Media Mobility, Storage and Disposal ISP 12 Physical Security and Access ISP 13 Systems Usage Logging and Audit ISP14 Staff recruitment, changes and leaving

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: Gordian adhered to its Change Management plan, a copy can be requested upon an NDA
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: Gordian adhered to its Vulnerability Management Plan, a copy can be requested upon an NDA
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: Gordian adhered to its Security Incident Management Plan, a copy can be requested upon an NDA
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Post-quantum cryptography secure: Yes
• Incident management approach: Incidents are reported by users to a single source; at the Gordian Support Desk. SLA regulations are; then applied. A pre-defined process is; documented in ISP 04 - Security Incident; Management procedure that ensures all internal; and external incidents are promptly reported and; effectively managed.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Description of free trial; A version can be agreed on for user testing and compliance under agreement with Gordian Account Management

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 2.5%
• Between £250,000 and £500,000: 5%
• Between £500,001 and £1,000,000: 7.5%
• Between £1,000,001 and £2,500,000: 10%
• Between £2,500,001 and £5,000,000: 12.5%
• Over £5,000,001: 15%

Standards and certifications

• ISO/IEC 27001 certification: Yes
• ISO/IEC 27001 accredited by: Amtivo Group Limited T/A British Assessment Bureau Ltd.
• ISO/IEC 27001 accreditation date: Tuesday 1 April 2025
• What the ISO/IEC 27001 doesn’t cover: Gordians NSR - National Schedule of Rates; MTC QS; Capital Planning on Gordian Cloud Platform
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• ISO 9001 certification accredited by: Amtivo Group Limited T/A British Assessment Bureau Ltd.
• ISO 9001 accreditation date: Tuesday 1 April 2025
• What the ISO 9001 doesn’t cover: Gordians NSR - National Schedule of Rates; MTC QS; Capital Planning on Gordian Cloud Platform
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber Essentials Certificate Number: Provided
• Cyber essentials plus: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials Plus certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials Plus certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Other security certifications: No

Social value

• Mission: Kick start economic growth:

  To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

  Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

  • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
  • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
  • Plans for an appropriate income replacement policy for staff who are required to spend time away from work to care for a sick dependent or close relative

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at owainjames.page@gordian.com. Tell them what format you need. It will help if you say what assistive technology you use.