Unisys Limited

Risk, Fraud, Targeting and Scoring Analytics Engine

The Unisys Risk, Fraud, Targeting and Scoring Solution framework is a highly customisable, flexible, scalable, cloud or on-premise solution which takes real time or batch transactions and uses the transaction data, other organisation information, external interfaces, rules and predictive models to calculate risk scores and intercept/clear with minimal human intervention.

Features

• Scalable, Microservice containerised architecture ensures rapid, cost effective deployment
• Flexible rules use Transaction Attributes, AI/ML, interfaces and Database queries
• Full Rule Package version control, impact analysis and testing
• Intelligent data ingest engine for real time or batch transactions
• Risk assessment: flexible rules, Analytics (AI/ML) Models, Database Queries
• Cross-Domain Deployment: Payments, Cheques, Law Enforcement, Healthcare
• Advanced link analysis provides powerful charts and timeline views.
• Built-In Case Management, or Case API integration
• Explainable and Ethical AI (XAI, EAI)

Benefits

• Improved yields and reduction in false positives
• Easy integration to third party and in-house systems
• Increased responsiveness to changing business requirements
• Extensible and configurable
• Near real-time response
• Opensource components offer lower total cost of ownership
• Data Science as a service offering for continual service improvement
• Already developed in-house models can be re-used
• Explainable and Ethical AI (XAI, EAI)

£396,000.00 a unit a year

Service documents

• Pricing document

  ODT

• Skills Framework for the Information Age rate card

  ODT

• Service definition document

  ODT

• Terms and conditions

  ODT

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at cloudstore@unisys.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

438314354712563

Contact

Simon Arnold
+44(0)7808391153
cloudstore@unisys.com

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Hybrid cloud
• Service constraints: Data access rights including legal mandates are required. Security accreditation must be acquired separately.; Data subscriptions are excluded for risk information from 3rd parties.; See also the Service Description and Pricing Document for more detailed stipulations.
• System requirements:
  • Network
  • End user devices
  • Secure network access from client environment to Unisys secure cloud

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: See Service Description document.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: See Service Description document for full details.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Unisys will conduct user workshops to familiarise the client with the capabilities offered by the Unisys Risk, Fraud, Targeting and Scoring solution. The Unisys team will help with the sizing of the solution based on the business and operational needs of the customer. The Unisys team will work with the customer to create a migration strategy for importing existing information. Unisys will help with customer training and associated documentation. Unisys will work in liaison with the customer to onboard data feeds as required.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: Data can be extracted by Unisys and provided to the customer via a secure mechanism. This will be an additional chargeable service.
• End-of-contract process: Data and customer specific profiles can be retained by the customer.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Chrome
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The web browser application is responsive to suit the device on which it is viewed.
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: An internet-facing web service is available to send messages using an HTTP POST request. The web service enforces HTTPS and communication is encrypted by means of a public SSL certificate. Firewall access controls will allow only pre-approved source IP addresses to post to the web service.; ; Other interfaces can be provide as part of the overall service, as per the service description where capabilities such as Apache NiFi are utilised to provide other service end point such as Batch, Email, etc.
• Accessibility standards: None or don’t know
• Description of accessibility: Our user interface has been designed to be accessible but has not been formally certified to a specific standard.
• Accessibility testing: None
• API: Yes
• What users can and can't do using the API: There are API's available to access external data bases and to integrate the service to other applications.
• API documentation: Yes
• API documentation formats:
  • HTML
  • PDF
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: Trained users have the ability to modify rules within the solution, test those rules and determine whether to deploy for live use. Users can also alter thresholds which are used to determine if a transaction is classed as high risk.

Scaling

• Independence of resources: The Unisys Risk, Fraud, Targeting and Scoring Solution is designed for a single tenant deployment

Analytics

• Service usage metrics: Yes
• Metrics types: The basic metrics provided are:; a) Throughput ; b) False-positive rate; c) True-negative rate (hit rate) ; d) Effectiveness of configured risk-rules.; ; This information is also available via built-in Dashboards; ; All externally accessible APIs will be exposed via Apache NiFi. This includes access for web and mobile apps.
• Reporting types:
  • API access
  • Real-time dashboards

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CHECK service provider
• Protecting data at rest:
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type: Explicit overwriting of storage before reallocation
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: LineSight does not provide a standard format for exports. Exports will be configured based on client requirements.
• Data export formats:
  • CSV
  • ODF
• Data import formats:
  • CSV
  • ODF
  • Other
• Other data import formats: None

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Other
• Other protection within supplier network: Unisys Stealth micro-segmentation can be purchased separately for additional security

Availability and resilience

• Guaranteed availability: This is a single tenant solution, SLA's are bespoke.
• Approach to resilience: Available Upon Request
• Outage reporting: Email alerts

Identity and authentication

• User authentication needed: Yes
• User authentication: Username or password
• Access restrictions in management interfaces and support channels: Role Based Access Control
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Username or password
  • Other
• Description of management access authentication: Management access is limited to PCs on a specific network segment.

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: BSI
• ISO/IEC 27001 accreditation date: 14/10/21
• What the ISO/IEC 27001 doesn’t cover: N.A.
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: Yes
• Any other security certifications: Police Approved Secure Facility (PASF)

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Client Information Security policy (IS) incorporates Unisys Corporate IS policy. Adherence and compliance to both of these policies, for delegates engaged in providing the services, is mandatory requirement to joining the team. All delegates are security vetted and are provided annual Security briefings. Compliance, renewals and Joiners & Leavers registers are reviewed, monitored and reported on quarterly bases. Ad-hoc unannounced spot checks are also carried out by the Security Authority who is responsible for managing and reporting on all service related Information Security incidents. Further, delegates are also presented with the Service SyOps as well as the individual client SyOps that details how the system meets and delivers the G Cloud Security Principles. Delegates roles and responsibilities are defined by the processes and procedures outlined in the accompanying SOPS documentation. The Service Description details the Security Risk Incident and Emergency Security Incident management procedures. The Security Authority has a dotted line into the Unisys UK CIO and has a seat on the Corporate Security Governance board. Unisys operates an anonymous incident and dispute reporting scheme.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Upgrades and patches will be implemented following release by the development team during times agreed in advance with the customer.
• Vulnerability management type: Undisclosed
• Vulnerability management approach: Available Upon Request
• Protective monitoring type: Undisclosed
• Protective monitoring approach: Available Upon Request
• Incident management type: Supplier-defined controls
• Incident management approach: See Service Description document.

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: Yes
• Connected networks: Public Services Network (PSN)

Social Value

• Fighting climate change:

  Fighting climate change

  Unisys is committed to preserving the environment and have a number of strategies to do this, for our own business, our supply chain and our customers. Solutions to help our clients reduce their carbon footprints largely focus on applying advances in technology to improve the energy efficiency of IT Platforms through migration to the cloud and by enabling secure home working. Our security, collaboration and application services enable our workforces and those of our clients to securely work from home and collaborate and share data. This helps reduce real estate footprint for office space, as well as minimising the impact of business travel. Our consultancy and application services support the migration of workloads to the cloud. This delivers many environmental benefits, primarily increased energy efficiency of IT platforms and more efficient and sustainable use of IT infrastructure. Cloud based infrastructure is more energy efficient than on-premise models for many reasons. For example, additional capacity for temporary requirements such as capacity for peak workloads or development environments can be decommissioned when not in use. Unisys has deployed many secure cloud services to meet highly classified Public Sector requirements, with cloud services delivered from our PASF, ISO27001 and ISO22301 certified secure UK data centres. We bring proven government security compliance coupled with the additional layer of Unisys Stealth® Zero Trust security software built on a foundation of the NIST Risk Management Framework (RMF). Our deployment approach focuses on making decisions about security and cost-effectiveness during planning and features a Zero Trust approach to achieve no failures in compliance or security vulnerability. The use of these measures internally within Unisys have contributed to exceeding our target of a 75% reduction in our Scope 1 and 2 carbon emissions by 2026, five years ahead of plan, with a reduction of 80% achieved in 2021.
• Covid-19 recovery:

  Covid-19 recovery

  Unisys services helped support the workforces of Unisys and our clients in the almost overnight transition to remote and flexible working. This helped our employees and those of our clients to adapt the traditional work week and cope with the many challenges of lockdown, such as home schooling. We also supported businesses in adapting to specific business challenges. Our products and services, particularly cloud UC, digital workplace and Stealth security services enabled our clients to rapidly adapt their operating models and keep running during the pandemic. We amended the operational support model of our public and private cloud hosting services to enable working from home, even for high security government customers. To allow social distancing and reduce the number of staff required on site, operational team members were split according to data access. Those working below the application layer with no access to data could work from home. The subset of team members with access to data with a Government security classification continued to work on-site, with all access monitored and audited using a SIEM solution. Employees were rotated in a 2-week shift pattern. At a company-wide level, Unisys is committed to making a positive impact in the communities where our employees and clients live and work through corporate philanthropy. Through the global Unisys Cares programme, we partner with non-profit organisations driving better outcomes and positive change around the globe. We created a campaign across Unisys to support families impacted by COVID-19. A dedicated 24/7 COVID-19 Task Force assisted employees and their dependents during medical emergencies. During the pandemic, we partnered with a healthcare services provider in India, which was heavily impacted by COVID-19. We organised two vaccination drives in Bengaluru and Hyderabad. More than 1,400 employees and their dependents were vaccinated across both cities.
• Tackling economic inequality:

  Tackling economic inequality

  Unisys is committed to a sustainable and socially conscious future and are a member of the United Nations Global Compact, the world’s largest corporate sustainability initiative focusing on advancing human rights, labour, anti-corruption, environment, and other societal goals. Our investment in professional development remains focused on building a diverse and inclusive bench of future leaders empowered to improve our business. This includes reskilling initiatives to ensure that our associates remain as competitive as possible in rapidly evolving technical fields. This is delivered in a number of ways, including (1) the Unisys University with more than 50,000 on-demand development programs supporting a wide range of development opportunities; (2) partnerships with training organizations such as Skillsoft, Global Knowledge and Franklin Covey; (3) Tuition reimbursement for degree programs or certifications and (4) Our Connected Leadership programme focused on developing underrepresented ethnic groups at executive and management levels. Our technology solutions including cloud based hosting, digital workplace services and secure connectivity for flexible remote working support the creation of similar initiatives in our customer base. In addition, our products and services that enable home working tackles economic inequality for job candidates, removing the restriction of requiring candidates to live in a commutable distance from company office locations and reducing the cost of business commuting. We also promote equal opportunity in our Supply Chain: While there is no official policy, Unisys is by the nature of our business a supporter of small and medium providers. We work with many niche and specialist providers to build bespoke client-specific solutions. Suppliers for these requirements by the nature of the services they provide tend to be smaller in size.
• Equal opportunity:

  Equal opportunity

  From the top down, Unisys’s mission is not only to offer excellent products and services, but to make the world a better place. We are a member of the United Nations Global Compact and follow its ten principles, which addresses equal opportunity under Principle 6. We encourage equal opportunities and treat all people in a fair and impartial manner, without prejudice as to race, colour, nationality, ethnicity, religion, gender, sexual orientation, marital status, age, and disability or family responsibilities. This is the definition of the fundamental right to equality, safeguarded by the Unisys approach to Diversity, Equity and Inclusion (DEI). We actively represent, develop, promote and celebrate the rich diversity of our workforce. Evidence of this includes our perfect score on the 2021 Disability Equality Index, the world’s most comprehensive benchmarking tool to measure disability workplace inclusion. Ongoing skills development is open to all our employees through the Unisys University, which includes more than 50,000 on-demand development programs. Our Connected Leadership programme focuses on developing underrepresented ethnic groups at executive and management levels. Our products and services help level the playing field for employees, both within Unisys and for our client workforces. For example, our products and services that enable home working opens the pool of potential candidates to a much wider audience, removing the restriction for candidates to live within a commutable distance of company office locations. We also promote equal opportunity in our Supply Chain: While there is no official policy, Unisys is by the nature of our business a supporter of small and medium providers. We work with many niche and specialist providers to build bespoke client-specific solutions. Suppliers for these requirements by the nature of the services they provide tend to be smaller in size.
• Wellbeing:

  Wellbeing

  Unisys is a people company. We strive for greater outcomes for our employees, clients and partners. We continually expand our Diversity, Equity and Inclusion programs and deploy new ways to engage, recognise and develop our employees. A large part of recent workforce wellbeing activity focused on keeping our own employees and those of our clients safe during the pandemic. We limited the number of people working on-site at any given time to ensure social distancing and required face coverings and thermal screenings, as necessary. We maintained safety standards across our sites. This was successfully achieved, as Unisys total recordable, lost and restricted workday rates continued the downward trend of the past decade. Now that the world is returning to normal, wellbeing efforts now focus on the provision of products and services to support flexible working. This contributes to the wellbeing of our employees and those of our clients by enabling the traditional work week to flex to cope with the many challenges of daily life, such as child care, while remaining in full-time employment. Unisys products and services that support flexible home working include Stealth® Zero Trust security software, cloud-based unified communications and collaboration services and digital workplace services with a managed service for ergonomic equipment for home based employees. Unisys has a zero-tolerance policy toward slavery and human trafficking and will not support or conduct business with any organisation involved in such activities. We respect individual human rights and require that our business partners do the same. We recognise our responsibility to protect human rights globally and to provide a fair and ethical workplace for our associates. General awareness on this topic is communicated to all Unisys employees annually.

Pricing

• Price: £396,000.00 a unit a year
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  ODT

• Skills Framework for the Information Age rate card

  ODT

• Service definition document

  ODT

• Terms and conditions

  ODT

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at cloudstore@unisys.com. Tell them what format you need. It will help if you say what assistive technology you use.