COGNITAS GLOBAL LIMITED

View360Global Experiental Learning Platform & Training copy

View360Global is a Software as a Service (SaaS) experiential learning platform that enables organisations to run scenario-based tabletop exercises to assess and improve workforce competency, decision-making and procedural readiness. The platform can be used independently or with optional facilitator-led training, exercise design and support services.

Features

• Browser-based SaaS access
• scenario-based multi media driven tabletop exercising
• Real-time collaboration and interaction
• Decision logging and audit trails
• Real-time AI analysis (optional)
• Structured post-exercise reporting
• Integrated video conferencing for remote delivery
• Role-based access control
• Facilitator delivery console
• Multilingual delivery capability

Benefits

• Improve decision-making under pressure
• Enhance organisational readiness by testing policy & procedures
• Strengthen assurance and compliance by producing structured exercise outputs
• Develop workforce competency in a safe learning environment
• Enable remote participation through integrated video conferencing
• Support multilingual workforces by delivering exercises in multiple languages.
• Identify operational gaps quickly through real-time AI analysis
• Reduce training disruption and travel costs.
• Standardise learning and improvement by using repeatable, configurable scenarios
• Accelerate post-exercise improvement actions using automated reports

• Education pricing available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at lawrie@cognitasglobal.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

399638093902819

Contact

Lawrie Day
01474 555507
lawrie@cognitasglobal.com

About your service

• Service categories:

  Applications

  Collaborative

  • Enterprise community
  • Team collaboration

  Conferencing and virtual event

  • Virtual Event Applications
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: The service requires internet connectivity (>5mbps) and use of a supported web browser. No customer hardware or software installation is required. Planned maintenance windows are notified in advance and scheduled outside normal working hours where possible. Optional AI analysis functions may be unavailable during platform updates. Video conferencing performance may depend on the user’s network bandwidth.
• System requirements:
  • Internet connectivity (standard broadband or above)
  • Modern HTML5-compliant web browser (Chrome, Edge, Firefox, Safari)
  • Audio input/output for facilitated or video conferencing sessions
  • Optional webcam for video participation
  • No customer-side software installation or plugins
  • No additional licences (e.g. office suites, VMs, antivirus)
  • No specific hardware configuration required
  • Designed for desktops or laptops
  • Not optimised for mobile or tablets
  • Compatible with corporate firewalls/proxies

User support

• Email or online ticketing support: Yes
• Support response times: We operate a monitored helpdesk Monday to Friday, 08:00–17:30 (UK time), excluding UK bank holidays. Support requests are prioritised and responded to within defined SLAs. Typical response times are:; ; Urgent: 30 minutes; ; High: 1 hour; ; Medium: 2 hours; ; Low: 4 hours; ; Outside helpdesk hours, urgent issues receive a 2-hour response. Weekends and UK bank holidays follow the out-of-hours response times.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), 7 days a week
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Support is provided via helpdesk, phone and email. Standard support hours are Monday to Friday, 08:00–17:30 (UK time), excluding UK bank holidays. Support requests are logged and tracked through a ticketing system, prioritised and assigned one of four levels (Urgent, High, Medium, Low). During standard hours, response targets are: Urgent 30 minutes, High 1 hour, Medium 2 hours and Low 4 hours. Outside standard hours, urgent issues receive a 2-hour response, with weekends and UK bank holidays following out-of-hours targets. All incidents are managed through defined SLAs and customers receive status notifications and updates through the ticketing system. The service is designed to operate without onsite attendance; however, onsite support can be provided on request and is chargeable separately. Optional services are available for exercise facilitation, scenario design and training support but are not required for the operation of the SaaS platform. The support model is intended to ensure availability, continuity and consistent service performance for users, while providing structured escalation and clear response expectations for service incidents.
• Support available to third parties: No

Onboarding and offboarding

• Getting started: Users are onboarded through facilitator training, user documentation and online onboarding. Facilitator training is included within the licensing costs and enables organisations to deliver their own exercises. Training materials and user guides are provided to support ongoing delivery. Training is mnost effective if conducted in person. Onsite training at the client’s premises can be provided for an additional travel cost, and training can also be delivered at Cognitas Global’s premises. Participants do not require training to take part in exercises and are guided through the interface during delivery. Additional support for scenario authoring and exercise design can be provided if required but is not mandatory for platform adoption. The onboarding approach enables organisations to become self-sufficient in delivering exercises while retaining access to support and documentation through the account management system.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: At the end of the contract, users can request extraction of their data. Data can be exported in standard formats (for example PDF, CSV or other structured report formats) suitable for local storage, audit or record-keeping. Exercise outputs, logs and reports can be provided to the customer on request. No proprietary software is required to access exported data. Data extraction does not require platform access once exported. Extraction can be completed by Cognitas Global within an agreed timeframe following contract termination. Additional or bespoke data extraction requests can be accommodated by agreement and may be chargeable depending on scope.
• End-of-contract process: At the end of the contract, the customer may request extraction of their data. Standard data extraction (for example, exercise outputs, logs and reports in accessible formats such as PDF or CSV) is included at no additional cost. Extracted data can be retained by the customer without ongoing licence requirements and no proprietary software is needed to access it. Optional bespoke extraction or reformatting may be provided on request and would be chargeable.; ; Following extraction, customer data can be securely deleted on request or at contract termination in accordance with agreed data retention periods. Retention periods are defined contractually and can be adjusted to meet customer policy or regulatory requirements where reasonable. No customer data is retained beyond the agreed retention period unless legally required.; ; The service is not subject to technical or commercial lock-in. Data remains portable through standard export formats. No charges are applied for standard end-of-contract procedures, including data extraction and data deletion. Continued access to the platform after contract expiry requires renewal. Renewal is optional and commercially based on current pricing at the point of renewal. Customers are notified in advance of contract end dates to support orderly exit and decision-making.
• Documentation accessibility standard: WCAG 2.2 AA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: Yes
• User support accessibility: WCAG 2.2 AA
• Description of service interface: Es. The service provides a browser-based user interface for participants, facilitators and administrators. Users can access scenarios, participate in exercises, make decisions, communicate and review outputs through the interface. Facilitators have additional controls to configure scenarios, manage injects and run live or remote sessions. The interface includes role-based access controls, integrated video conferencing for virtual participation and optional AI-assisted analysis and reporting. No local installation, plugins or additional software licences are required. The service operates as SaaS and is accessed via a modern web browser with standard internet connectivity.
• Accessibility standards: WCAG 2.2 AA
• Accessibility testing: The service interface has been tested with users employing assistive technology, including screen magnification, high contrast settings, keyboard navigation and browser-based screen readers. Testing has also included remote facilitation sessions with users requiring alternative delivery formats. Feedback from these sessions has informed improvements to layout, contrast, navigation structure and text clarity. Additional accessibility testing is undertaken during interface revisions, with adjustments made where practical for WCAG 2.2 AA alignment. Where assistive technology creates barriers (e.g., real-time multimedia exercises), reasonable adjustments and alternative participation methods are offered. Further accessibility enhancements are planned as part of ongoing iterative development.
• API: No
• Customisation available: Yes
• Description of customisation: Users can customise aspects of the service through configuration rather than code changes. Customisable elements include scenario content, decision options, injects, timings, roles, participant groupings and facilitator controls. Administrators and facilitators can configure scenarios and roles through the platform interface without technical expertise. Participants can personalise display settings such as language and audio preferences during exercises.; ; The service also supports optional white-labelling to enable organisational branding. White-labelling includes the application of customer colours, logos and associated visual identity elements. White-labelling and branding configuration is performed by Cognitas Global and is not editable by end-users. Branding does not require modification to the underlying platform.; ; All configuration is completed through the browser interface and does not require additional software or customer development. No customer access to source code is provided. Optional support services are available for scenario authoring, content adaptation, branding set-up and exercise design, but these are not mandatory for core platform operation.; ; Customisation permissions are role-based: administrators configure organisational settings and scenarios; facilitators configure and deliver exercises; participants interact only with configured scenarios.

Scaling

• Independence of resources: The service is delivered as a multi-tenant SaaS platform with resource allocation and isolation controls to ensure that one organisation’s usage does not adversely affect another. Capacity is monitored and scaled to maintain performance during peak demand. Exercises run independently and do not compete for resources at application level. Performance metrics and monitoring are used to identify potential contention and enable scaling actions. Release management and operational controls ensure that large exercises or increased usage by one customer do not degrade availability or responsiveness for others.

Analytics

• Service usage metrics: Yes
• Metrics types: The service provides usage and performance metrics that allow customers to understand how the platform is being used and how exercises are delivered. Metrics include number of exercises delivered, number of users participating, role allocation, scenario duration, completion status and participation levels. Exercise outputs include decision logs, timing data, information flow markers and learning points. Optional AI analysis can generate thematic assessments and gap analysis metrics. Operational metrics include system availability, incident reporting and support response times. Customers can request periodic usage summaries to support internal reporting or assurance needs. Additional analytics or bespoke reporting can be provided on request.
• Reporting types:
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: Yes
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Supplier-defined controls
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: NCSC approved service provider
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: Yes
• Equipment disposal approach: In-house destruction process
• Data sanitisation type:
  • Data Erasure
  • Physical Destruction / Hardware containing data is completely destroyed

Data importing and exporting

• Data export approach: Users can request deletion of all data they have input into the service, including exercise media, uploaded materials, configuration data, logs and outputs. Deletion can be carried out during the contract term or at contract end. Deletion requests are processed by Cognitas Global to ensure complete removal from the live environment and associated storage. No proprietary or platform-level data is retained once deletion is confirmed, unless required for legal, safeguarding or regulatory obligations. Deletion does not affect platform functionality or the user’s ability to continue using the service. Deleted data is not recoverable after the deletion request has been completed.
• Data export formats: Other
• Other data export formats: PDF
• Data import formats: Other
• Other data import formats: PDF

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • Legacy SSL and TLS (under version 1.2)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • Legacy SSL and TLS (under version 1.2)

Availability and resilience

• Guaranteed availability: The service targets a minimum availability of 99% during core service hours. Core service hours are defined as 08:00–17:30 Monday to Friday (UK time, GMT/BST), excluding UK public holidays and planned maintenance periods. Availability is measured monthly. Planned maintenance windows are communicated to customers in advance and scheduled outside core service hours wherever feasible. Emergency maintenance may be undertaken where necessary to address security, stability or safety-related issues.; ; A major incident is defined as an unplanned event that results in a material loss of service availability or performance for a significant proportion of users during core service hours. Major incidents are prioritised and escalated to operations and senior oversight for accelerated investigation and remediation.; ; Service credits or automatic refunds are not applied for availability deviations under this service. Any remedial actions or commercial adjustments are agreed with customers on a case-by-case basis. Availability performance can be reported to customers on request. The SLA does not apply to customer-side network failures, third-party connectivity issues or force majeure events.
• Approach to resilience: Our service is designed for resilience in line with NCSC Cloud Security Principle 2 (Asset Protection and Resilience). The platform is hosted on resilient, AWS industry-standard cloud infrastructure with redundancy at key layers to protect against hardware and network failures. Data storage and processing are distributed across redundant systems with automated failover where supported by the provider. Back-ups are taken regularly and stored securely to enable recovery in the event of an incident.; ; Resilience considerations — including data redundancy, fault tolerance, backup frequency, recovery processes and infrastructure segmentation — are defined in our internal architecture and operational documentation. Customers can request non-confidential details of the cloud region(s), redundancy strategy and recovery procedures under confidentiality.; ; Planned maintenance is scheduled with notifications to minimise service disruption. Emergency maintenance can be undertaken where required to preserve security or availability. Monitoring and alerting are used to detect and respond to operational issues promptly.
• Outage reporting: Outages and major incidents are reported to affected customers in line with the SLA and escalation process. Operational status is monitored internally and incidents are escalated based on severity and impact. Notifications are issued to customers via email and through the Account Management System. Major incidents are escalated immediately to operations leadership for investigation and remediation. Planned maintenance windows are communicated in advance to minimise disruption. A public status dashboard or outage reporting API is not currently provided. Customers may request an incident report following disruption, including timeline, root cause (where identified), actions taken and follow-up improvements.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password
• Access restrictions in management interfaces and support channels: Access to management interfaces is restricted through authenticated accounts, role-based access controls and least-privilege permissions. Administrative functions are only available to authorised personnel and access is periodically reviewed. Support channels do not provide direct administrative access to the platform. Support staff operate through separate interfaces with limited permissions and identity checks are performed before actioning changes affecting customer accounts. Sensitive changes follow an approval process and are logged for audit. Customer data accessed via support channels is minimised and subject to confidentiality controls.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: Between 6 months and 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: Between 6 months and 12 months
• How long system logs are stored for: Between 6 months and 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: CSA CSM version 4.0
• Information security policies and processes: Cognitas Global operates documented information security, data protection and acceptable use policies that apply to all staff and contractors. Policies cover data handling, access control, password management, incident reporting, acceptable use, vulnerability management and business continuity. Information security responsibilities are allocated through a defined governance structure. The CEO has overall responsibility for information security and data protection, with operational oversight delegated to the Information Security Lead. All policies are reviewed at least annually or following material changes to the service or regulatory environment.; ; Compliance with policies is supported through mandatory training, role-based access controls, least-privilege permissions, device security controls and encrypted communications. Internal audits and periodic reviews are undertaken to confirm adherence. Security incidents follow a documented reporting and escalation process with notification to customers where required. Data protection processes align with UK GDPR, including lawful basis assessment, data subject rights and retention controls. Continuous improvement is supported through change control, supplier review and periodic risk assessment.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Configuration and change management processes align with NCSC Cloud Security Principles. Platform components and configuration items are tracked through controlled repositories and version management. Changes follow a documented workflow covering assessment, approval, implementation and review. Security impact is evaluated for each change, including effects on confidentiality, integrity and availability. Code changes undergo peer review and testing before deployment. Releases are deployed within controlled windows and emergency changes are subject to post-implementation review. Access to configuration artefacts is role-based and least-privilege. Vulnerabilities and supplier updates are assessed and incorporated into planned or emergency changes as part of continuous improvement.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Vulnerability management is risk-based and aligned to NCSC Cloud Security Principles 5 (Secure User Management), 7 (Secure Development) and 9 (Secure Operations). Threats are identified through CVE/NVD feeds, supplier advisories, security mailing lists and relevant NCSC updates. Vulnerabilities are triaged by severity, likelihood and impact on confidentiality, integrity and availability. Critical and high-risk issues are patched through accelerated changes; medium and lower-risk issues are scheduled into planned releases following testing. Updates are deployed within controlled windows to minimise operational disruption. Lessons learned and supplier updates are incorporated into continuous improvement.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Protective monitoring aligns with NCSC Cloud Security Principle 9 (Secure Operations). Service logs, access events and error conditions are monitored to identify abnormal activity or indicators of potential compromise. Suspected incidents are triaged for severity, impact and likelihood. High-severity incidents are escalated immediately to the security lead for investigation and containment. Response actions may include access restriction, configuration rollback or customer notification where appropriate. Urgent security incidents are actioned within minutes during support hours and via accelerated escalation out of hours. Lessons learned are fed into continuous improvement activities and future releases.
• Incident management type: Supplier-defined controls
• Incident management approach: Incident management follows a documented process for detection, reporting, escalation and closure. Pre-defined workflows exist for common events such as service disruption, performance degradation, access issues and suspected security incidents. Users can report incidents via helpdesk, email or phone. Incidents are logged and prioritised by severity and impact. High-severity incidents are escalated immediately to the operations or security lead. Incident reports can be provided to customers on request and include a summary, timeline, root cause (where identified), response actions and follow-up improvements. Post-incident reviews are performed for high-severity or repeated events.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 3%
• Between £500,001 and £1,000,000: 6%
• Between £1,000,001 and £2,500,000: 9%
• Between £2,500,001 and £5,000,000: 12%
• Over £5,000,001: 15%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: ISO Accelerator
• ISO 9001 accreditation date: Tuesday 19 May 2026
• What the ISO 9001 doesn’t cover: ISO 9001 certification applies to Cognitas Global’s quality management system, internal processes and delivery of services. It does not cover customer-owned infrastructure or networks, platform hosting provided by third-party public cloud suppliers, bespoke scenario content, end-user operational use of the service, regulatory compliance outcomes, or optional AI/analytics token consumption and compute activities.
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: Fdb18746-3350-4196-bd63-b80765204b14
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: D41d0f4d-29e0-4d75-9918-456b99d5b820
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Plans to engage the contract workforce in deciding the most important workplace issues to address
    • Ensuring new workers are informed of their right to join a trade union
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Activities to cascade good practice on fair working conditions throughout the supply chain
    • Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
    • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
    • Plans for an appropriate income replacement policy for staff who are required to spend time away from work to care for a sick dependent or close relative
    • Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Volunteering opportunities for staff

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

    • Understanding of the issues affecting the development of new skills by target cohort
    • Understanding of the underlying factors affecting improvements to reduce barriers to entry and training schemes for the target cohort(s) related to the contract workforce
    • Other measures to offer development opportunities for the target cohort(s) in the contract workforce
    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort
    • Understanding of issues relating to entering the contract workforce
    • Creation of outreach activities to create a pipeline of employees for the future contract delivery
    • Content of the outreach activity is designed to suit the target cohort
    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
    • Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion
    • Inclusive and accessible recruitment practices, development practices and retention policies that support-focused activities including those provided in the Guide for line managers on recruiting, managing and developing which support people with a disability or health condition
    • Actions to invest in the physical and mental health and wellbeing of the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at lawrie@cognitasglobal.com. Tell them what format you need. It will help if you say what assistive technology you use.