CONDATIS GROUP LIMITED

Digital Identity Delivery

Security starts with identity, a crucial step in protecting online services. We specialise in creating tailored, resilient identity solutions using Microsoft Entra. We excel at modernising identity within intricate legacy platforms, offering services ranging from PoCs and migrations to comprehensive, integrated internal, external, decentralised, or hybrid systems through strategic advisory.

Features

• Multi-Factor Authentication (MFA)
• Customer experience mapping
• RBAC (Role-Based Access Control)
• Guaranteed Identity Verification
• Identity & Access Management (IAM)
• Frictionless Joiner, mover leaver processes
• Internal Trust Framework model curation
• Audit, Reporting & Business Intelligence (BI)
• Identity decentralisation
• Authentication Broker Service

Benefits

• Leverage your existing infrastructure.
• Integrate with modern applications that support open standards.
• Integration with your existing data stores or third-party systems
• Support completely custom authentication journeys.
• Full ownership of the solution
• Fully integrated Microsoft Entra systems designed to work together.
• Reduce risk of fraud, malicious error
• Standards compliant
• Known migration paths from existing systems

£10,000 to £1,000,000 a unit

• Education pricing available

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@condatis.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

352665646606151

Contact

Chris Tate
0800 538 5533
sales@condatis.com

Planning

• Planning service: Yes
• How the planning service works: "Planning for the implementation of the appropriate identity system is at the core of this service offering. A clear understanding of the customers current state and business requirements are key. From this understanding Condatis would plan to work with the customer to create an agreed work breakdown structure (WBS) and Statement of work (SOW). Condatis advocate a Sprint 0 approach which ‘cements’ the SOW and WBS and translates it into deliverable chunks. Condatis would aim to deliver work in two-week blocks with opportunity to flex the plan along the way. ; Condatis are familiar working either with a waterfall or agile approaches and delivering Time and Materials or Deliverables projects. ; In addition, we can deliver plans for small scale POC or POVs to assist with planning larger projects"
• Planning service works with specific services: Yes
• Hosting or software services the planning service works with:
  • Microsoft Entra suite of IAM systems
  • Decentralised identity systems

Training

• Training service provided: Yes
• How the training service works: Condatis will provide documentation and walkthroughs on the elements making up the delivered system to provide a consolidated handover to any in-house support staff. In addition, we will transfer our accumulated experience to the client architecture teams through workshops and presentations.
• Training is tied to specific services: Yes
• Services the training service works with:
  • Microsoft Entra suite of IAM systems
  • Decentralised identity systems

Setup and migration

• Setup or migration service available: Yes
• How the setup or migration service works: Condatis have extensive expertise migrating customers’ identity and access management systems to cloud-based Microsoft Entra solutions. With any migration, we will work closely with the customer to ensure that the whole process is fully planned and understood, including how user data will be migrated, how user data will be managed and used in the new cloud solution, and how customer services, workloads, and applications will be impacted by the move. We can help ensure that there is minimal friction for organisation teams and users, avoiding “big bang” migrations that may pose a risk to business continuity. Condatis works collaboratively with the customer to implement the plan, reusing existing resources and workflows where possible, while developing new functionality as required. For example, a migration may start with moving customer data and setting up role-based access control, followed by instituting basic IAM processes such as multi-factor authentication, leading on to more advanced features like Conditional Access, attribute-based access control, and Identity Governance, all rolled out in phases across your estate. Condatis' goal is always to provide a migration path tailored to customer requirements, prioritising the security features that are needed most, building on our knowledge of identity best practices.
• Setup or migration service is for specific cloud services: Yes
• List of supported services:
  • Microsoft Entra suite of IAM systems
  • Decentralised identity systems

Quality assurance and performance testing

• Quality assurance and performance testing service: Yes
• How the quality assurance and performance testing works: "Functional testing is built into Condatis' agile development process and performed on User Stories based on agreed Acceptance Criteria. This occurs in sprints so that the testing and development are performed together iteratively, and no User Story is signed off until testing is completed and passed. Test evidence is stored (usually in Azure DevOps) to record outcomes/defects.; ; Automated tests are a standard output of these sprints, and these are built up over the project to provide a regression pack of tests that are run daily. At the end of a development cycle some manual regression/exploratory testing is typically performed above and beyond the automated tests prior to signing-off for release to higher environments. Bugs raised are either resolved/retested or accepted by the client in release notes as acceptable to release with. Typically the end customer is responsible for their own User Acceptance Testing in these higher environments. ; ; Non-functional testing, including performance testing, is discussed with the customer to establish what is in-scope at the initiation of the project. If accessibility, security or cross browser/device testing is required beyond our standard set, then these items are defined and estimated early in the project cycle."

Security testing

• Security services: Yes
• Security services type:
  • Security strategy
  • Security design

Ongoing support

• Ongoing support service: Yes
• Types of service supported:
  • Hosting or software provided by your organisation
  • Hosting or software provided by a third-party organisation
• How the support service works: Our ITIL aligned support system continually monitors the relevant services and can be extended to includes dependencies within the customers azure estate. Condatis can provide a fully managed service for these technologies or can work in conjunction with the customer’s existing support systems and provide a 24x7 third line support service for escalation. Support can be both ticket, phone or email based.

Service scope

• Service constraints: No - Services are delivered via cloud services, with constraints per that cloud and cloud service(s).

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Dependent on customer requirements, alerting notification, logging and responses can be immediate. Support is provided 24/7 with response times defined in the support levels sections in this submission.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.1 AA or EN 301 549
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Support levels: Condatis can offer various levels of third-line support depending on client requirements. The requirements will depend on the client’s own support resources and support integration needs. Technical account managers and cloud support engineers are available for all levels.; The main support options we offer are as follows:; 1. Support call-off—these are pre-paid, non-refundable days to be used for support within a given date range. The days are supplied on a best endeavours basis and can be used for advice, break fixes, and troubleshooting.; 2. SLA-backed support – these are support days with guaranteed agreed response times which we would align with the customer requirements (eg 30 minutes response time and 8 hour resolution time for a P1, or security incident) These can be offered on a UK working hours timetable or 24/7; 3. Hypercare period – we can provide elevated response levels and on call engineering support for go live events or migrations as part of one-off contracts to provide support during digital transformation projects.; 4. Fully managed service –an SLA backed system like #2. Augmented with wider coverage alerting , monitoring and proactive sessions with the customer on development of their systems."

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Developed Vetting (DV)

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: Centre for Assessment (CfA)
• ISO/IEC 27001 accreditation date: 27/05/2022
• What the ISO/IEC 27001 doesn’t cover: Condatis' ISO 27001 statement of applicability covers all the controls defined by ISO 27001 with the exception of 14.2.7 Outsourced development and 11.1.6 Delivery and Loading Areas because they do not apply to Condatis.
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  We are committed to continuous action that helps flight climate change and works towards ‘net zero’ status. Our current initiatives to support environmental sustainability are as follow: ; • Our engagements, workshops and on-boarding are standardised around Teams or Zoom calls including demos, white boarding and retrospectives. ; • Whilst we encourage colleagues in the Edinburgh area to visit the office once a week, we work flexibly, thereby enabling colleagues to travel in quieter times and make use of public transport where possible. We have taken this approach since Covid rules were removed resulting in a reduction of travel, company-wide, by 95% and thereby reducing our carbon footprint. ; • Our serviced office uses energy efficient lighting and appliances. We reduce waste through our recycling system and near paperless operations. ; • We will also use any G-Cloud contracts to assist us in achieving ISO 14001 the environmental standard which will in turn involve us vetting our suppliers and partners over their environmental impact. ; • We can leverage distributed ledger technology to support environmental initiatives and drive influence with a positive impact on suppliers, partners and customers.

  Covid-19 recovery

  During COVID-19, we moved to a fully remote office, allowing all colleagues to continue in employment from their own home while still being able to fulfil all the obligations to our customers and complete contracts on time and to standard. ; We now work with a hybrid model where colleagues living locally are encouraged to work from the office once a week. Colleagues further away visit the office once a fortnight or once a quarter (location dependant), to support social connections and collaboration between and across teams. ; Condatis is able to support those shielding or impacted by Covid by continuing to provide full time remote working for those that want/require it. We also continue to provide a home office set up for all colleagues. This allows Condatis to provide valuable employment for those affected or shielding from Covid while still being able to deliver services as per the contract and customer requirements.; During and post-Covid Condatis offered physical and mental health training to colleagues, including Mental Health First Aid, Mental Health Awareness for Managers, Resilience Training and First Aid at Work. As we develop our wellbeing approach we will continue to provide wellbeing training and awareness sessions to all colleagues and through these initiatives our intention is that this will help to reduce the demand on the health and care services.

  Tackling economic inequality

  Through the following initiatives, Condatis is committed to playing a role in helping to tackle economic inequality in our society:; • We advocate and educate other employers to support apprentice programmes. We have presented to over 100 companies about the benefits of having apprentices as part of the Scottish Apprenticeship week. ; • Partnerships: this year we will be developing our CSR approach through partnerships with organisations who exist to support those who are marginalised and/or face barriers to employment. ; • We are currently supporting the Saltire Scholar Programme run by Entrepreneurial Scotland by offering a summer internship to an undergraduate. The internship provides experience on live commercial projects and the opportunity to work with new technologies and expert technologists in their field, thereby creating a training opportunity that supports a high growth area of the market.; • Colleagues are remunerated in line with external benchmarking data and we commit to an annual salary review.; • We are a Real Living Wage Employer and committed to paying our colleagues according to the cost of living.

  Equal opportunity

  One of Condatis’ core values is 'Inclusive' which means we strive to create an environment where everyone feels respected and heard and has a sense of belonging. Our values and behaviours as well as business policies and operations promote equity and fairness to avoid bias, prejudice or discrimination. We are committed to ensuring that recruitment, training, development and promotion procedures result in no candidate or colleague receiving less favourable treatment because of a protected characteristic. Our aim is to ensure that our processes are equitable and inclusive and that skills, knowledge and behaviours are assessed as objectively as possible and that everyone has equity of opportunity.; We will continue to provide training for all colleagues based on personal development plans and promotion opportunities based on transparent and objective criteria. ; This year we are committed to developing our approach to diversity, equity and inclusion through:; • A review of key processes and follow-up action to further improve accessibility and inclusivity in our behaviours and our operations.; • Developing our partnerships with organisations who exist to support those who are marginalised and/or face barriers to employment. ; • Working with a local partner to champion women in technology ; • Providing inclusion training for all colleagues involved in recruitment and selection.; • Becoming a Real Living Wage Employer

  Wellbeing

  We believe that good mental and physical wellbeing is key to thriving at work and performing well. As an employer, we take our duty of care seriously and seek to empower colleagues with knowledge and resources to help them look after their health, and offer support to colleagues who may be struggling. Our key wellbeing initiatives are: ; • We have a team of trained Mental Health First Aiders, who provide confidential support to colleagues in need.; • We have a Wellbeing Hub that offers practical ways to sustain and improve wellbeing as well as guidance on staying active and helping others. ; • Our managers have weekly 1:1 meetings with each team member in which wellbeing is discussed and any issues are supported with confidentiality and sensitivity.; • Volunteering Days – we recognise that giving back and helping others is not only good for our communities but also for our own wellbeing, so every colleague is encouraged to take a volunteering day each year to support a cause important to them. ; • This year we will be launching Able Futures, a government mental health initiative, to offer all colleagues access to a mental health professional should they need it. ; • As part of our own supplier assessments, we ensure that any third party supplier needs to meet our own ethical standard, which includes their treatment of their workforce. We do the same for prospective customers.

Pricing

• Price: £10,000 to £1,000,000 a unit
• Discount for educational organisations: Yes

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@condatis.com. Tell them what format you need. It will help if you say what assistive technology you use.