MACS EU LIMITED

IBM ALM powered by MEAM

MACS Enterprise Asset Management (MEAM) SaaS is a turnkey cloud-solution for IBM ALM. MACS provides everything, application points, secure hosting and full operational support across Dev, Test and Prod environments. This includes resilience, monitoring, patching and 24×7 incident response, enabling clients achieve complete asset-lifecycle-management without any infrastructure or application overhead.

Features

• Manage, track and maintain your business-critical assets via one solution.
• Full scalable service that can grow with your business.
• Progress reporting in all links of the value chain.
• Plan maintenance in this CMMS for maximum asset longevity.
• Allocate resource efficiently for planned and reactive maintenance.
• Manage compliance with automated compliance task generation.
• Carry out inspections with dynamic questionnaire content.
• Manage user access to a fine level of control.
• Authorise purchase to pay transactions with set approval levels.
• Control suppliers with a comprehensive contract management process.

Benefits

• Subscription based hence OPEX, not CAPEX.
• Improved efficiency in responding to requests for service.
• Better customer satisfaction for stakeholders and service users.
• Value for money from improved asset utilisation.
• Longer asset life cycles from efficient maintenance management.
• Better supplier performance from strict contract management.
• Reduced stock holding hence an improved cash position.
• Complete control over purchasing reduces maintenance costs.
• Optional security to OFFICIAL level for protection of sensitive data.
• Rapid on-boarding by means of the MACS Quick-Start project process.

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at g-cloud@macs.eu. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

392012087898635

Contact

Dom Potter
02084327430
g-cloud@macs.eu

About your service

• Service categories:

  Applications

  Enterprise resource management

  • Asset life-cycle management
• Multi cloud support: Yes

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Community cloud
  • Hybrid cloud
• Service constraints: There are no current constraints.
• System requirements:
  • Internet explorer 11 or
  • Firefox 60 and future fix packs or
  • Google Chrome 66 and future fix packs or
  • Microsoft Edge (latest and future release packs)

User support

• Email or online ticketing support: Yes
• Support response times: Out of hours support is available upon request. Typically our help desk is during stand office working hours Monday to Friday.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 AA
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: MACS works with your organisation to put the appropriate support model in place, our standard model is based on the following levels. Level 0 – Systems Administration where we train and empower nominated staff members to act as a first point of contact. Level 1 - Provided by a trained MACS support engineer encompasses the first level of problem determination, diagnosis and resolution, plus the majority of operational and administrative tasks. Level 2 - Provided by the MACS consultancy team is following the Request/Incident Process. This is the escalation route for any support issues that cannot be resolved at Level 1. Level 3 - Provided by IBM. Level 3 Support is defined as the highest technical level of support in the model. Problems are passed to Level 3 once problem determination has taken place and the resolution requires a physical change either to the underlying application source code, its environment or its infrastructure.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Due to the wide use of the system there is rich user community that provide online videos and support forums. MACS can arrange for an interactive demonstration of the solution and any training requirement you may have.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • ODF
  • PDF
  • Other
• Other documentation formats: MS Word
• End-of-contract data extraction: A process of database export has been established this can be exported tables, excel files, CSV. Further details can be provided upon on request.
• End-of-contract process: There will be a formal end of contract review, providing and agreement for any commercial and technical discussion to take place. A formal exit plan will be agreed as part of the life cycle of the contract. Client data will be format in the format and timetable agreed during contract negotiations and confirmed in the exit review.
• Documentation accessibility standard: WCAG 2.2 AA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Mobile supports both online and offline capabilities.
• Service interface: No
• User support accessibility: WCAG 2.2 AA
• API: Yes
• What users can and can't do using the API: RESTful services are provided by the OSLC functionality.
• API documentation: Yes
• API documentation formats:
  • Open API (also known as Swagger)
  • HTML
  • PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: The solution allows for full customisation by the end user. However due to the advanced capability of the product it is recommended that any changes are made by configuration. This serves to improve maintainability and upgrade-ability and reduce the life-cycle cost of the solution.

Scaling

• Independence of resources: "The MACS solution is designed as a fully scale-able SaaS service and as such meets the requirements of both small users and larger enterprises or government departments."

Analytics

• Service usage metrics: Yes
• Metrics types: Needs to be agreed in conjunction with the client service metric requirements.
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: Yes
• FOCUS resource tagging: Yes

Resellers

• Supplier type: Reseller providing extra support
• Organisation whose services are being resold: IBM

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
• User control over data storage and processing locations: Yes
• Datacentre security standards: Supplier-defined controls
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CREST-approved service provider
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Physical access control, complying with another standard
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase

Data importing and exporting

• Data export approach: There are 3 ways to import and export data from Maximo: • The import or Export function can be added to the application where the data resides,; • Manually import or export from an integration external system,; • Automatically import or export data, this can be done using OSLC, an interaction, an invocation channel, polling a database table, consuming an xml file or consuming a flat file from a file directory. The type of data import controls the elements that have to be set-up.
• Data export formats:
  • CSV
  • Other
• Other data export formats: XML
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • Data Table Import
  • ETL Process
  • Data Integration

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: Our Cloud Service provider provides 99.9% uptime Guarantee for Network and Platform. Loss of use of core functionality Maximo is 5 % i.e. 95 % availability . No refund is offered.
• Approach to resilience: Datacentre is Tier-4 fault tolerant,; ; Multiple datacentre Regions,; ; Multiple datacentre Zones,; ; Split system deployment.
• Outage reporting: Standard service outages would be reported through email alerts and API. Other types of service reporting can be configured based on the requirements and can encompass cloud provision reporting or specific tools like Dynatrace.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)
• Access restrictions in management interfaces and support channels: Under our ISO 27001 Standard Operating Procedure (SOP) Access control is based on the role of the employee and is documented under an Access levels process. This is controlled by the security officer and access is granted to the central management team and reviewed under our internal and external audits for ISO 27001.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards:
  • CSA CSM version 4.0
  • ISO/IEC 27001
  • Other
• Other security governance standards: Cyber Essentials; ; Cyber Essentials Plus
• Information security policies and processes: Available on request.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Information about technical vulnerabilities of information systems/application being used are monitored via the MACS technical team, the product owners and the software providers. The organisation's exposure to vulnerabilities is evaluated regularly and appropriate measures taken to address the associated risk. MACS follow the patch policy of all deployed products. All systems shall be kept up to date based on software updates provided by the supplier.; ; A full IT Security Health Check is carried out at least once a year.; All patching is carried out to Cyber Essentials Plus standards.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Information about technical vulnerabilities of information systems/application being used are monitored via the MACS technical team, the product owners and the software providers. The organisation's exposure to vulnerabilities is evaluated regularly and appropriate measures taken to address the associated risk. MACS follow the patch policy of all deployed products. All systems shall be kept up to date based on software updates provided by the supplier.; ; A full IT Security Health Check is carried out at least once a year.; All patching is carried out to Cyber Essentials Plus standards.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: ISMS SR (information incidents) are notified by all employees in the servicedesk or otherwise emailed to the security officer. The security officer has a console designed to monitor all incidents from first notification to completion. Protective monitoring is carried out by a SOC/SIEM service. This service is integrates with our cyber security incident response plan.; ; Protective monitoring is carried out by a SOC/SIEM service. This service is integrates with our cyber security incident response plan.
• Incident management type: Supplier-defined controls
• Incident management approach: Incident management is covered under our ISO 27001 Standard Operating Procedures. All incidents are reported in our Servicedesk as an internal service request with the marking Information Security (SR type = ISMS) and dealt with separately. The Security Officer will be notified always of every new incident and he/she shall check at that time whether the reported incident is an information security incident. If it is an information security incident, it will be dealt with in accordance to the cyber incident response policy.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: MACS EU delightfully offers free SaaS trial of IBM Maximo SaaS where you get combination of the world’s leading enterprise asset-management-system with all benefits of a CMMS. Deployed on IBM Cloud by subscription, it is low-cost, secure and available in multiple offerings depending on size & scope of your organisation.
• Link to free trial: https://macs.eu/solution/ibm-maximo/

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 2%
• Between £2,500,001 and £5,000,000: 2%
• Over £5,000,001: 2%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: The Certification Leaders (TCL)
• ISO/IEC 27001 accreditation date: Wednesday 16 October 2024
• What the ISO/IEC 27001 doesn’t cover: Response pending
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: The Certification Leaders (TCL)
• ISO 9001 accreditation date: Saturday 7 October 2023
• What the ISO 9001 doesn’t cover: Response pending
• Quality management systems (QMS): No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: C059bbbc-d73c-4720-91a5-58c0a2041778
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 6ae002a1-e01d-4782-8c25-d184d7de9f24
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
    • Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

    • Understanding of the issues affecting the development of new skills by target cohort
    • Understanding of issues relating to entering the contract workforce

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at g-cloud@macs.eu. Tell them what format you need. It will help if you say what assistive technology you use.