THOMSON SCREENING SOLUTIONS LTD

SchoolScreener Health Needs Assessments with ParentPortal

SchoolScreener Health Needs Assessments: Cloud service to create, deploy and analyse online, school-based health questionnaires. Use your content, the versions supplied or combine. Responses immediately flagged to nurses if they warrant concern. Time saved is up to 60 minutes/pupil/eQuestionnaire. Eliminate print costs. Automated electronic consent, parent communications, reports/dashboards for management/schools/commissioners/IG.

Features

  • Online eQuestionnaires with Electronic Consent and Parent Communications
  • Multi-Section Structure Covering Health, Social Care, Family and More
  • Edit and Add Sections, Questions or Content, As Required
  • Intuitive; Engages Children; Encourages Sharing of Opinions and Concerns
  • Red, Amber, Blue Flags Automatically Revealed in Cohort View, Instantly
  • Resolve Flagged Issues Individually or In Bulk for Efficiency
  • Dashboard Comparison Reports by Individual, Cohort, School or District
  • eReports for School Nursing Team, Schools, Commissioners
  • Use at Scale Across Year Groups and Districts
  • Data Output to Share with Electronic Patient Records, CHIS, etc

Benefits

  • Release Time to Care with Instant Identification of Urgent Issues
  • Estimated Time Saved Over 20 minutes per Pupil per eQuestionnaire
  • Eliminate Print and Distribution Costs of Health Assessment Questionnaires
  • Cohort View Shows Real-Time Status of Each Child Simultaneously
  • Improved, GDPR-Compliant Data Security vs. Paper Survey Forms
  • Proven Platform Improves Clinical Risk Management and Information Governance
  • Improved Commissioner/School/Stakeholder Relationships via Automated Reports and Dashboards
  • Full Training, Onboarding, Implementation and Support Included in Licence Fee
  • Improves Speed and Efficiency of Support for Vulnerable Pupils
  • Increase Capacity from Existing Resources Through Immediate Efficiency Gains

Pricing

£0.70 a transaction a year

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at marketing@schoolscreener.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

4 1 0 5 7 2 6 2 8 7 9 6 8 1 5

Contact

THOMSON SCREENING SOLUTIONS LTD Chris Coyne
Telephone: 07508164333
Email: marketing@schoolscreener.com

Service scope

Software add-on or extension
Yes, but can also be used as a standalone service
What software services is the service an extension to
All other SchoolScreener Cloud Services products from Thomson Screening, each of which can be used standalone or alongside any combination of the others:
SchoolScreener Parent Portal with Electronic Consent
SchoolScreener Vision;
SchoolScreener Hearing;
SchoolScreener NCMP Height and Weight Data;
SchoolScreener Imms Vaccination Management.
Cloud deployment model
Public cloud
Service constraints
There are no service constraints or restrictions for this online Cloud Service.
System requirements
Users must be connected to the internet to use Service

User support

Email or online ticketing support
Email or online ticketing
Support response times
We normally respond to email or ticket requests on the same business day. Resolution is 96.2% on the first contact/call, although this depends upon the specific complexity of the problem.

We provide support when our customers require it, which is Monday to Friday, 9-5. We do not provide support at weekends as none of our customers work at weekends.
User can manage status and priority of support tickets
Yes
Online ticketing support accessibility
None or don’t know
Phone support
Yes
Phone support availability
9 to 5 (UK time), Monday to Friday
Web chat support
Web chat
Web chat support availability
9 to 5 (UK time), Monday to Friday
Web chat support accessibility standard
None or don’t know
How the web chat support is accessible
We use Zoho Desk which has a live web chat facility via embeddable web chat widgets. If a customer has an issue that requires more time and attention, agents can convert the chat conversation into a ticket, in a single click. This lets agents save all the context of the chat conversation, with no time lost.

We have enquired and there is no official compliance with the standards listed above, although a review of the features indicates they are in all respects of the services that we use.

Where buttons are offered to customers, they are described also, in line with WCAG 2.0 guidelines.

Instructions provided for understanding and operating content do not rely solely on sensory characteristics of components (shape, size, visual location, orientation), again in line with WCAG 2.0.

Colour is not used as the only visual means of conveying information, indicating an action, prompting a response, or distinguishing a visual element.

All functionality of the content is operable through a keyboard interface without requiring specific timings for individual keystrokes.(This does not forbid and should not discourage providing mouse input or other input methods in addition to keyboard operation).
Web chat accessibility testing
Thomson Screening have conducted no such testing, although Zoho Desk may have. If they have we're unaware of the details. Zoho have indicated to us that they plan to seek full compliance, but do not have it as yet.

If a client has a specific need for accessibility testing, we will comply with all reasonable requests.
Onsite support
Onsite support
Support levels
We attend on site as required by customers on the rare occasions that remote support is not possible or doesn't resolve the problem fully.
Support available to third parties
No

Onboarding and offboarding

Getting started
We provide a full implementation and onboarding service to all new customers.

This involves technical implementation services, including installation,customisation and configuration. Also, onsite training in small groups and customer service.

Post-implementation our customer service and training staff are available for supplementary support, as required.
Service documentation
Yes
Documentation formats
  • HTML
  • ODF
  • PDF
  • Other
Other documentation formats
  • Microsoft Word
  • Google Docs
End-of-contract data extraction
Via API or data extract, customised to client needs. Typically this has been CSV in the past.
End-of-contract process
We ask what format the client wants their data in. We then provide the data in that format. Then remove all user access rights. Then data and backups are removed from the system. We provide a written confirmation of all actions.

All of the above are included in the licence fee. There are no extra charges for the above.

Beyond this scope, additional charges may apply.

Using the service

Web browser interface
Yes
Supported browsers
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
Application to install
No
Designed for use on mobile devices
Yes
Differences between the mobile and desktop service
The eConsent Parent Portal is fully responsive to different screen sizes, including mobile devices. This is used to give consent and to answer triage questions regarding child health.

The clinician and administrator screens are designed for desktop/laptop use only. Clinician screens may be used online or offline.
Service interface
No
User support accessibility
WCAG 2.1 AA or EN 301 549
API
Yes
What users can and can't do using the API
Administrators have full access. API is designed to move data to 3rd party systems. Clinical users do not have access to the API.
API documentation
Yes
API documentation formats
Other
API sandbox or test environment
Yes
Customisation available
Yes
Description of customisation
Users can customise outputs, such as parent communications, letter/email templates, referral letters.

Customisation and how to use it is a standard part of the onboarding process.

Scaling

Independence of resources
The service expands in-line with demand via our Cloud service provider's capabilities. We use a major, UK-based provider, UK Fast. They are approved suppliers to G-Cloud 11.

UK Fast is independently DSP Toolkit compliant, Registration ID 8J407

All data (including backups) are held in datacentres in England.

Analytics

Service usage metrics
Yes
Metrics types
KPI dashboards with standard and customised reports. Also drill-down facilities and data exports.
Reporting types
Real-time dashboards

Resellers

Supplier type
Not a reseller

Staff security

Staff security clearance
Conforms to BS7858:2019
Government security clearance
None

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
United Kingdom
User control over data storage and processing locations
No
Datacentre security standards
Complies with a recognised standard (for example CSA CCM version 3.0)
Penetration testing frequency
At least once a year
Penetration testing approach
Another external penetration testing organisation
Protecting data at rest
  • Physical access control, complying with CSA CCM v3.0
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Encryption of all physical media
Data sanitisation process
Yes
Data sanitisation type
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
Equipment disposal approach
A third-party destruction service

Data importing and exporting

Data export approach
Export to CSV via on-screen menu, can be user-selected partial database export, or full database export.
Data export formats
CSV
Data import formats
CSV

Data-in-transit protection

Data protection between buyer and supplier networks
TLS (version 1.2 or above)
Data protection within supplier network
TLS (version 1.2 or above)

Availability and resilience

Guaranteed availability
Our guaranteed SLA uptime is 99%. In 2019 we achieved 99.3% service availability overall and 100% during school time. Uptime is monitored and reported to clients monthly. Availability is guaranteed by service credit commitment.

When service (including customer service) is affected by downtime, automatic credit will be issued. Service Downtime Credit is given on a sliding scale of 2.5% to 10%.

99% - 0%
95% - 2.5%
90% - 5%
Less than 90% - 10%
Approach to resilience
Architectural, platform and data centre resilience.

Our data centres are ultra-secure and resilient cloud services designed for public sector organisations. They are used by many NHS trusts and have full resilience capabilities, including physical separation, UPS N1 or greater and allow full HSCN connectivity. They are Cyber Essentials Plus certified, ISO Certified:
27001:2013
ISO 27017:2015
ISO 27018:2019
ISO 22301:2012
Outage reporting
Customer notifications are managed via our ticketing system, Zoho Desk, email or any other means of communication agreed with a specific customer.

Identity and authentication

User authentication needed
Yes
User authentication
Username or password
Access restrictions in management interfaces and support channels
Client-determined, role-based security. Different levels of access available based on user role/function. For example, only clinicians can access patient clinical data (such as immunisation data)
Access restriction testing frequency
At least every 6 months
Management access authentication
Username or password

Audit information for users

Access to user activity audit information
Users contact the support team to get audit information
How long user audit data is stored for
User-defined
Access to supplier activity audit information
Users contact the support team to get audit information
How long supplier audit data is stored for
User-defined
How long system logs are stored for
User-defined

Standards and certifications

ISO/IEC 27001 certification
No
ISO 28000:2007 certification
No
CSA STAR certification
No
PCI certification
No
Cyber essentials
Yes
Cyber essentials plus
No
Other security certifications
Yes
Any other security certifications
Cyber Essentials

Security governance

Named board-level person responsible for service security
Yes
Security governance certified
Yes
Security governance standards
Other
Other security governance standards
DSP Toolkit
Information security policies and processes
Compliance framework is led by a Director of the company and reviewed annually by the Board. Quarterly risk reviews and action plans.

Compliance framework is led by a Director of the company and reviewed annually by the Board. Quarterly risk reviews and action plans.

The company is NHS Digital DSPT (Data Security and Protection Toolkit) compliant. Our DSP Registration ID is 8HW22

In addition, our ICO (Information Commissioner Organisation) Registration ID is Z3489680

Operational security

Configuration and change management standard
Supplier-defined controls
Configuration and change management approach
All change requests are documented via our ticketing system or by other written requests. Once changes are implemented, positive approval is required from the client by means of a sign-off.
Vulnerability management type
Supplier-defined controls
Vulnerability management approach
Potential threats are assessed via 3rd party penetration testing and our own, quarterly risk assessments and action plans.

All security, vulnerability and protective monitoring compliance is led by a Director of the company and reviewed annually by the Board.

In the event that patches are required, they will be deployed immediately via Customer Support.

The company is NHS Digital DSPT (Data Security and Protection Toolkit) compliant. Our DSP Registration ID is 8HW22 In addition, our ICO (Information Commissioner Organisation) Registration ID is Z3489680
Protective monitoring type
Supplier-defined controls
Protective monitoring approach
Potential compromises are identified via log management, including firewall logs, alerts from the operating system and other intrusion monitors.
Checks are continuous and automatic via alerts.

Reviews of protective monitoring are included in our quarterly risk assessments and action plans.

All security, vulnerability and protective monitoring compliance is led by a Director of the company and reviewed annually by the Board.

The company is NHS Digital DSPT (Data Security and Protection Toolkit) compliant. Our DSP Registration ID is 8HW22 .
Incident management type
Supplier-defined controls
Incident management approach
Incident management follows an established process.

Incident reporting protocol used includes forms for users to report incidents.

We review incidents that occur on a regular basis (even if no incidents), the action plans developed and lessons learned analysis - all by senior management.

The processes for recording data breaches is described in the Incident Management Policy (copy available on request) and is covered during annual information governance training.

Secure development

Approach to secure software development best practice
Supplier-defined process

Public sector networks

Connection to public sector networks
Yes
Connected networks
Health and Social Care Network (HSCN)

Social Value

Fighting climate change

Fighting climate change

Thomson Screening support effective stewardship of the environment by the following activities that help customers to fight climate change:
a. All SchoolScreener services can now work with the optional SchoolScreener ParentPortal. This reduces waste through the elimination of paper-based consent and parental communications. Public health information may now be shared electronically, in accessible PDF format. Similarly electronic consent replaces the need for paper forms. And letters to parents no longer need to be printed. All of this enables our customers to save paper, print materials and associated costs. Also, distribution costs and pollutants are dramatically reduced.
b. All services eliminate the need for paper-based reporting by using online reports and dashboards. These have been made quicker and easier to manage than traditional paper-based reports. This includes reporting to colleagues, management and external stakeholders, such as commissioners. All of this enables our customers to save paper, print materials and associated costs. Also, distribution costs and pollutants are dramatically reduced.
In addition, our team permanently work from home, to facilitate reduced pollution from commuting activities and more sustainable work practices.
Covid-19 recovery

Covid-19 recovery

Thomson Screening provide services and supports clients digitally. During Covid, the company has continued to invest in new functionalities to support users in new ways of working, fully configurable to the needs of each Provider. Examples include remote implementation, support and training and configuration according to user requirements to enable delivery of services digitally including Provider administration, parent and school communications.

Meetings are delivered online as standard practice. Meetings in person are now the exception, by request. The Thomson Screening team work from home, to facilitate reduced transmission of the virus and more sustainable work practices.
Tackling economic inequality

Tackling economic inequality

Thomson Screening contribute to tackling economic inequality by:
a. Providing CPD-accredited training, to enable customer’s staff to acquire new skills and have recognisable evidence of this.
b. Following established protocols and accreditation to manage cyber security risks in the delivery of the contract. Our security measures are based on OWASP protocol recommendations. These are aimed at mitigating risks highlighted by OWASP’s top 10 threats. Also, Thomson Screening is Cyber Essentials compliant.
Our data centre is fully compliant with Cyber Essentials Plus and ISO 27001 standards
c. Supporting the development of future-proofed new methods of contract delivery, scalable to any level. This includes support, which helps customers to increase productivity and release more time to care for the children in their charge.
Equal opportunity

Equal opportunity

Our team is 55% female and includes staff originating from outside the UK (Hungary, Slovenia, Moldova, Turkey).
Our services are translated into over 50 languages, so even in a UK context, non-English speakers are not excluded from communications, screening, online health needs assessments or immunisation management.
Our services meet international standards (WGAC 2.1) of accessibility and work equally for disabled users as able-bodied.
Wellbeing

Wellbeing

Thomson Screening improve community integration and wellbeing by being responsive to user needs. This includes:
a. The development of new functionality to meet individual customer requests. Recent examples include the development of SchoolScreener Imms with Lewisham and Greenwich NHS Trust. Also the ability to validate NHS numbers via the NHS Spine.
b. Twice a year we hold a user forum and invite all registered users of the services. This allows us to share news and canvas opinions and suggestions from users directly. Originally a meeting in person, this has become an online event, with future plans to be hybrid in nature (in-person for those that wish, online live streamed for those that prefer the virtual format).

Pricing

Price
£0.70 a transaction a year
Discount for educational organisations
No
Free trial available
No

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at marketing@schoolscreener.com. Tell them what format you need. It will help if you say what assistive technology you use.