LAMINAR GROUP LTD

Oracle Primavera P6 EPPM Cloud

Oracle Primavera P6 Enterprise Project Portfolio Management (EPPM) Cloud is a robust project planning solution that enables organizations effectively manage projects of any size and complexity. Its core scheduling functionality is complemented by the resource, cost and risk management capabilities. Leveraging cloud infrastructure, it centralizes project data, fostering seamless collaboration.

Features

• Project Planning and Scheduling
• Critical Path Method Planning
• Portfolio Management
• Resource Management
• Cost Management
• Risk Management
• Phase-gate Process Management
• Reporting and Analytics
• Multi-user access
• Mobile and tablet access

Benefits

• Deliver projects to time, cost and quality.
• Proactively identify and mitigate project risks
• Monitor project progress and performance in real-time
• Optimize project budgets and expenditures
• Streamline project planning and scheduling processes
• Efficiently allocate and manage project resources
• Efficiently allocate and manage project resources
• Facilitate data-driven decision-making through robust reporting and analytics
• Enhance overall project visibility and transparency
• Manage templates, custom codes and categories in one central location

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@laminarprojects.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

525367767564699

Contact

Holly Stockbridge-Hodgson
02034883556
tenders@laminarprojects.com

About your service

• Service categories:

  Applications

  Enterprise resource management

  • Project and portfolio management
• Multi cloud support: Yes

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Private cloud
• Service constraints: Planned maintenance is usually performed during weekends, and it is communicated in advance.
• System requirements:
  • The product operates primarily through a web browser interface.
  • An optional local client interface is available for users.

User support

• Email or online ticketing support: Yes
• Support response times: Online ticketing support is provided through the Cloud Customer Support Portal. Response times are based on the Severity of raised issue. Oracle will use reasonable efforts to respond to Severity 1 service requests within fifteen (15) minutes. Oracle will work 24x7 until the Severity 1 service request is resolved, a reasonable work-around is put in place, or as long as useful progress can be made.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: Yes
• Web chat support availability: 24 hours, 7 days a week
• Web chat support accessibility standard: None or don’t know
• How the web chat support is accessible: Through the Cloud Customer Support Portal.
• Web chat accessibility testing: None.
• Onsite support: Yes, at extra cost
• Support levels: Oracle support included in terms and conditions of the subscription. Additional support is available at additional cost.
• Support available to third parties: No
• AI chatbot: No

Onboarding and offboarding

• Getting started: Extensive product documentation and online training are available on Oracle portals to which users of this service will have access. Laminar can offer customized onsite or online training as an additional service on G-Cloud. Additional user support is also available on as an extra service on G-Cloud.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Following the termination of Oracle Cloud Services, Oracle will securely provide access to your Content stored in the production Cloud Services environment or maintain accessibility to the service system for a duration of 60 days. This access is granted to facilitate data retrieval by you, typically in the form of a Database extract.
• End-of-contract process: Additional formats or reports for data retrieval will incur extra charges.
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: Online

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: Yes
• Compatible operating systems:
  • Android
  • IOS
  • Linux or Unix
  • MacOS
  • Windows
  • Other
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The mobile applications are designed as simple products to quickly view, update, and collaborate on projects. They don't feature the full capability of the desktop service or the browser-based solutions.
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: Oracle Applications service interface includes standard SOAP or REST Web Services. Web Services Reference Guide is available on request.
• Accessibility standards: None or don’t know
• Description of accessibility: Solution's API is a flexible interface to app's functionality based on the Representational State Transfer (REST) architectural style. Clients can use HTTP enabled technologies to interact with the API and access application features. Almost all application data and functionality is exposed through API's. Full documentation of API endpoints is available.
• Accessibility testing: At Oracle, the commitment to streamlining operations and maximizing technological investments includes a strong focus on accessibility. Employing widely accepted technologies like HTML, JavaScript, and Java for interface design, Oracle adheres to global accessibility standards. This ensures compatibility with various assistive technologies such as screen readers, magnifiers, and voice recognition systems. By embracing industry standards and accessibility guidelines, Oracle ensures all users can navigate its products effectively, fostering inclusivity and usability.
• API: Yes
• What users can and can't do using the API: Solution's API is a flexible interface to app's functionality based on the Representational State Transfer (REST) architectural style. Clients can use HTTP enabled technologies to interact with the API and access application features. Almost all application data and functionality is exposed through API's. Full documentation of API endpoints is available.
• API documentation: Yes
• API documentation formats:
  • HTML
  • PDF
• API sandbox or test environment: Yes
• Customisation available: No

Scaling

• Independence of resources: The solution operates on a scalable platform and infrastructure. Deploying it for new users is performed in a way that doesn't affect existing users. Its flexible architecture enables independent expansion and customization. User experience remains unaffected by the demand other users are placing on the service.; ; Infrastructure includes load balancers and clustered tiers. Oracle monitors performance and availability, using data to optimize services.

Analytics

• Service usage metrics: No

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: Oracle

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: In-house
• Protecting data at rest: Physical access control, complying with SSAE-18 / ISAE 3402
• Data sanitisation process: Yes
• Equipment disposal approach: In-house destruction process
• Data sanitisation type: Explicit overwriting of storage before reallocation / Secure Erase

Data importing and exporting

• Data export approach: The ability to export data into Excel/CSV and XML is a standard feature of Oracle applications. Additionally, the tool includes a reporting capability, enabling users to extract data into various output formats such as Excel/CSV, PDF, RTF, and PowerPoint.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • PDF
  • RTF
  • XML
  • XER
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • XML
  • XER

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: The availability levels guaranteed for solution's subscription in the Service Level Agreements (SLAs) typically include 99.5% or higher uptime commitments.; ; If the guaranteed availability levels are not met, users may be eligible for service credits or refunds based on the terms outlined in the Service Level Agreements (SLAs). These agreements specify the compensation or credit process in the event of downtime or service disruptions.
• Approach to resilience: Resilience is prioritised in all Oracle applications, ensuring conformance to industry standards and government regulations. The datacentre setup incorporates robust measures to ensure data integrity and availability, aligning with the principles of asset protection and resilience as outlined in government guidelines. Detailed documentation of Oracle's approach to resilience is available on request.
• Outage reporting: Service clients need to designate at least one Oracle Support user who will be contacted via email when an outage is identified. If impacted by the outage, users should raise a service request on the My Oracle Support portal, where details of each ticket can be accessed. Unplanned outages are investigated by Oracle, and designated users can receive a detailed report with Event Summary, Detailed Root Cause, and Corrective Action Descriptions.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password
• Access restrictions in management interfaces and support channels: The solution enables administrators to create specific user groups and permissions, effectively allowing to limit access to various elements and interfaces as needed. Support Channels also offer user and access management capabilities, enabling the provision or restriction of access as required. Oracle follows the "Least Privilege" principle, restricting access to essential resources. Oracle Cloud operations teams access Service environments via a DMZ within a dedicated extranet, isolated from corporate networks. Approved operations and support engineers authenticate through multi-factor authentication for VPN access to customer environments.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password

Audit information for users

• Access to user activity audit information: You control when users can access audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: No audit information available
• How long system logs are stored for: Between 1 month and 6 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Oracle prioritizes safeguarding customer content within Oracle Cloud Services, ensuring confidentiality, integrity, and availability. Security controls and practices are continuously strengthened and improved to protect against unauthorized processing activities and data loss. Aligning with the ISO/IEC 27002 Code of Practice, Oracle Cloud Services adhere to globally recognized standards, employing a comprehensive set of selected controls. This framework encompasses access controls, encryption technologies, and proactive monitoring to fortify the cloud environment's security. Oracle maintains a reporting structure overseen by a dedicated security team, conducting regular audits and assessments to ensure compliance and identify areas for enhancement. By fostering a proactive approach to security governance, Oracle reaffirms its commitment to providing customers with a secure and trusted environment for their data within Oracle Cloud Services.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Oracle Cloud Operations performs changes to cloud hardware infrastructure, operating software, product software, and supporting application software to maintain operational stability, availability, security, and performance. Oracle follows formal change management procedures to review, test, and approve changes prior to application in the production service.; ; Oracle works to ensure that change management procedures are conducted during scheduled maintenance windows, while taking into consideration low traffic periods and geographical requirements. Oracle will provide prior notice of modifications to the standard maintenance period schedule.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Oracle's vulnerability management process employs thorough threat assessment, patch deployment, and diverse information sources. Monitoring systems and services, Oracle swiftly addresses vulnerabilities, prioritizing critical issues and deploying patches efficiently. Leveraging industry-specific feeds and collaboration, Oracle stays informed about emerging threats. It subscribes to vulnerability notification systems, ensuring awareness of security incidents. Oracle acts promptly upon confirmed risks, validating changes' applicability to Services environments, upholding commitment to secure service integrity and customer data protection.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Oracle's protective monitoring process includes identifying potential compromises through rigorous incident evaluation. When a potential compromise is detected, Oracle's GIS organization defines escalation paths and response teams. Prompt response is ensured through collaboration with customers, internal LoBs, technical teams, and law enforcement if necessary. Oracle aims to swiftly restore confidentiality, integrity, and availability of the customer's environment. The ultimate goal is to establish root causes, implement remediation steps, and ensure a secure environment for Oracle's customers and their data.
• Incident management type: Supplier-defined controls
• Incident management approach: Oracle employees adhere to the Oracle Information Security Incident Reporting and Response Policy for reporting suspected incidents. Incidents are reported through designated channels, including dedicated support portals and contact points. Oracle's approach is to have a pre-defined processes for common incidents, ensuring a systematic response to various scenarios. Cloud Service users must report security issues, with customers using the Cloud Customer Support Portal. Privacy concerns are directed to Oracle's Privacy office. Incident reports and updates are communicated to designated customer contacts, ensuring transparency and collaboration in incident management processes.
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 5%
• Between £500,001 and £1,000,000: 7.5%
• Between £1,000,001 and £2,500,000: 10%
• Between £2,500,001 and £5,000,000: 12.5%
• Over £5,000,001: 15%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: United Registrar of Systems Ltd.
• ISO/IEC 27001 accreditation date: Wednesday 6 September 2023
• What the ISO/IEC 27001 doesn’t cover: N/A
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: United Registrar of Systems
• ISO 9001 accreditation date: Wednesday 6 September 2023
• What the ISO 9001 doesn’t cover: N/A
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 6f77f1fe-2caf-408a-b712-c6fc21d5216c
• Cyber essentials plus: No
• Cyber Essentials Alternative: None of the criteria
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Plans to engage the contract workforce in deciding the most important workplace issues to address
    • Ensuring new workers are informed of their right to join a trade union
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Activities to cascade good practice on fair working conditions throughout the supply chain
    • Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Volunteering opportunities for staff
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
    • Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
    • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling
    • Means of influencing staff, suppliers, customers, communities and/or any other appropriate stakeholders with respect to modern slavery risks relating to the contract

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Plans for positive actions with community groups.
    • Support for community-led initiatives relevant to the contract. Illustrative examples: improving transport links; reducing loneliness; helping with English language proficiency; and facilitating social mixing among people with different backgrounds

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Delivery of training schemes and programmes to address any identified skills gaps and under-representation in the workforce for the contract (e.g. prison leavers, care leavers, kinship carers, disabled people)
    • Working conditions which promote an inclusive working environment and promote retention and progression
    • Inclusive and accessible development practices, including guidance for line managers on recruiting, managing and developing people with a disability or health condition

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@laminarprojects.com. Tell them what format you need. It will help if you say what assistive technology you use.