AVOLUTION (UK) LIMITED

Enterprise Architecture

A leading tool for modeling and roadmapping, ABACUS supports collaborative enterprise architecture and connects your IT and business strategy. Cloud-based data and dashboards streamline global collaboration and remote working.

Features

• Powerful and collaborative Enterprise Architecture modelling and visualisation
• Enterprise Portfolio Management and Business Process Modelling / Management
• Supports all leading industry notations, metamodels, incl TOGAF, ArchiMate, BPMN
• Unites disparate domains into an integrated, single point of truth
• Enables analysis of complex enterprises across people, processes and technology
• Open, configurable, importing from Excel, SharePoint, Visio & 3rd-party apps
• Presents repository information tailored to different stakeholder needs
• Creates enterprise roadmaps, for predicting outcomes of planned strategies
• Builds foundation for business transformation with accurate, real-time IT landscape
• Positioned as a ‘Leader’ by analysts Gartner and Forrester

Benefits

• Provide transparency of your process, information and technology landscape
• Gain shared, collaborative understanding of enterprise IT and business operations
• Align IT and business transformation to organization objectives
• Understand cost, availability, complexity, compliance of IT and business processes
• Translate business vision and strategy into effective enterprise change
• Increase strategic collaboration across different stakeholders and departments
• Clearly articulate the organizational impacts of planned change
• Predict the benefits, costs and trade-offs of alternative strategies
• Accelerate time-to-value with preconfigured solutions and proven best-practice
• Agile repository keeps pace with changing landscape and evolving requirements

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at gus.firth@avolutionsoftware.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

540510001718932

Contact

Gus Firth
020 3176 0000
gus.firth@avolutionsoftware.com

About your service

• Service categories:

  Applications

  Enterprise resource management

  • Enterprise performance management
• Multi cloud support: Yes

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Community cloud
  • Hybrid cloud
• Service constraints: ABACUS Cloud application hosting is undertaken at an Amazon Web Services (AWS) data-center. ABACUS Cloud repository hosting will be undertaken at an AWS data-center or at the customer's on-premise data-center or at a data center provider of the customer's choosing.
• System requirements:
  • Browser compatible - any modern browser
  • ABACUS Cloud log-in credentials

User support

• Email or online ticketing support: Yes
• Support response times: The response time goal for Avolution's Helpdesk during working hours (Mon-Fri 09.00 - 17.30) is 2 hours.; ; Support & Maintenance is included in ABACUS Cloud pricing and provides:; - Unlimited (minor/dot-point i.e. 6.1, 6.x etc. plus major/full-point i.e. 7.x etc 8.x etc) upgrades of ABACUS; - 24 hours per day by 7 days per week (i.e. 24/7) email support; - Access to the ABACUS portal / knowledge base. Avolution takes full advantage of its geographically separated structure with Helpdesks in Australia, North America and the United Kingdom to successfully realize a 24x7 / follow-the-sun support strategy.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 AA
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), 7 days a week
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: ABACUS has 3 support tiers.; ; Standard Support - Included within the subscription fee. ; Professional Support - Additional cost of £21,899.40; Premier Support - Additional cost of £45,250.08; ; Technical and customer account managers are provided with all tiers of support.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: ABACUS on boarding training can be carried out both onsite or online.; ; ABACUS has 6 checkpoints in the onboarding process.; ; 1. Kick-Off; 2. Goal Orientation; 3. Configuration Training; 4. Meta-model Workshop; 5. Reporting & Adoption; 6. Onboarding Completion; ; ABACUS is supported by an online support and help portal, which comprises the following key areas:; ; Solution - Knowledge base; comprising how-to articles, self-guided tours, tutorials, and supporting collateral and templates. Articles are a combination of text-based instructions and gif-based demonstrations, and accessed via an easy to navigate menu, or keywords and phrase searching.; ; Forums – which is the Avolution online community which comprises Customer and Avolution suggestions, Guides, Tips&Tricks from the Avolution team, Product updates and frequently asked questions. The forum allows customers to start new or contribute to existing topics.; ; In addition to the above, the following self-study and training materials are available:; ; In-app Help and PDF Guides. ABACUS has context-sensitive help, detailing all aspects of the application, accompanied by PDF product and reference guides.; ; Training is supported by slideware, videos, LMS, and handouts.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • ODF
  • PDF
• End-of-contract data extraction: ABACUS has an established handover process in which customers can export, at any time, their entire repository in XLS / XML format upon termination of the service.
• End-of-contract process: Avolution will take instruction from the customer as to what happens with their data and service towards the end of the contract.; ; Avolution will provide customers with their entire repository in XLS or XML format on request and without charge on termination of the service for a period of 30 days.
• Documentation accessibility standard: WCAG 2.2 AA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
  • Other
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: While not specifically designed for mobile devices, ABACUS Cloud and Enterprise can be accessed through any smart device with a compatible browser.
• Service interface: No
• User support accessibility: WCAG 2.2 AA
• API: Yes
• What users can and can't do using the API: ABACUS Cloud has an optional Read / Write REST API, for which full documentation is provided.; ; The ABACUS REST API can be exposed through an ABACUS Enterprise instance, allowing data from ABACUS to be exposed as a web service.; ; REST APIs conform to the REST (Representational State Transfer) architectural style which runs over HTTP/S. REST is stateless, therefore no states or sessions are maintained on the web server; instead all the information necessary to understand requests must be provided in the request from the client.
• API documentation: Yes
• API documentation formats:
  • HTML
  • PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: ABACUS has been cited by industry analysts Gartner and Forrester as being much more flexible than other EA tools, and is underpinned by the ability to create and model any type of entity, in a true ontological sense.; ; This means there are no limitations to the customisation of notations and meta-models, so any component and connection type (object) can be defined, to which any attributes can be associated, and any view templates or diagram styles can be constructed with these elements.; ; All of which can be undertaken by users (with the appropriate access rights) themselves. ABACUS also provides .Net and REST API's for integrating with external systems, and utilizes a powerful scripting environment to facilitate extensive customization options.

Scaling

• Independence of resources: Customers have the option for ABACUS Cloud servers (Application and Repository) to be hosted via their own instance in a dedicated hosting environment, thereby ensuring the highest levels of performance are guaranteed.

Analytics

• Service usage metrics: Yes
• Metrics types: Comprehensive metrics in relation to server availability and performance are available as standard upon request.
• Reporting types:
  • Regular reports
  • Reports on request
• Resource tagging: Yes
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: ‘IT Health Check’ performed by a CHECK service provider
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Physical access control, complying with SSAE-18 / ISAE 3402
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type: Deleted data can’t be directly accessed / Cryptographic Erasure

Data importing and exporting

• Data export approach: Data can easily be exported from ABACUS either manually or automatically.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • XLS
  • XML
  • SQL
  • ArchiMate
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • XLS
  • XML
  • Visio
  • ArchiMate
  • Google Sheets

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Avolution will use commercially reasonable efforts to make the Cloud Services available with a Quarterly Uptime Percentage of at least ninety-nine-point five percent (99.5%) (“Service Commitment”). In the event the Cloud Services do not meet the Service Commitment, Customers may be eligible to receive a Service Credit as described below.; ; This SLA applies to the Cloud Services purchased by Customer in a particular Order, and does not apply to any other Avolution Products and Services.; ; Service Credits will be calculated as a pro-rata percentage of the total Fees paid by Customer for the Cloud Services Term for the billing cycle in which the Unavailability occurred, in accordance with the schedule below. For purposes of this SLA, total Fees paid by Customer shall mean only the annual Cloud Services Subscription Fees and will not include any Pass-Through Expenses, other special one-time payments, Taxes or any Professional Services fees paid; and Service Credits will be a percentage of one-fourth of the applicable Customer annual Fees paid.; ; Quarterly Uptime Percentage Cloud Services Credit Percentage; ; Less than 99.5% but equal to or greater than 99.0%. Penalty = 1.5% of one-fourth of annual Fees.; ; Less than 99.0%. Penalty = 5.0% of one-fourth of annual Fees
• Approach to resilience: The Avolution Business Continuity plan details the process that Avolution follows in the case of an outage, from detection to deactivation. The ABACUS Cloud solution maintains a ubiquitous security control environment across all regions. Each data centre is built to physical, environmental, and security standards in an active-active configuration, employing an n+1 redundancy model, ensuring system availability in the event of component failure. Components (N) have at least one independent backup component. All data centres are online and serving traffic. In case of failure, there is sufficient capacity to enable traffic to be load-balanced to the remaining sites. Avolution also maintains a robust contingency plan to ensure the solution adheres to our customers high standards. Furthermore the ABACUS Cloud solution is fully tested by our third party penetration test provider.
• Outage reporting: Avolution continuously monitors its AWS infrastructure and is alerted to anomalous behaviour. If the anomalous behaviour affects customer's services, CSMs will reach out to customers with further instruction.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: Management interfaces are supported through the use of an Administrator license which has a separate set of credentials. Granular permissions can be set within the tool to manage access privileges in order to restrict access for specific users and roles.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

• Access to user activity audit information: Users receive audit information on a regular basis
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Avolution is ISO 27001 certified. ; ; Avolution has a top-down and bottom-up approach to information security. We believe security is everybody's responsibility and we routinely train and test our staff on security issues across the organisation.; This includes LMS training, security drills and more.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Changes to ABACUS services and features follow intensive testing; both internally and externally with members of our Beta program. Additionally, regular updates, performance monitoring, vulnerabilities and recovery procedures are periodically reviewed. Production environment changes are reviewed, tested and approved through multiple stages in line with industry best practice to ensure each release adheres to our standards.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: CHECK and CREST certified 3rd party vendors conduct external assessments (BSI). Identified vulnerabilities are monitored, evaluated and then mitigated through regular patch updates during maintenance windows. All recommendations are fed directly into our development team to ensure the overall solution adheres to the latest industry standards for security. Patches are released on a rolling basis in line with industry best practices, and are applied to the ABACUS Cloud solution outside of office hours to reduce the impact of planned maintenance on ABACUS Cloud users.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Protective monitoring is deployed by monitoring the service with regards to intrusions, unauthorized connection attempts, CPU usage, network reliability and application activities. Relevant user logs are used to identify any security alerts and for user defined management reports. Incidents are rated against an established prioritization matrix which determines the required Response & Resolution timeline.
• Incident management type: Supplier-defined controls
• Incident management approach: ABACUS Cloud is covered by Avolution's Standard Support Agreement. Incidents can be raised to the Global Support Team and are managed from start to finish by the Ticket Owner and/or Account Manager . Each support issue is handled accordingly depending on the priority/criticality of the issue - an escalation process is also applied for issues that may require 2nd line or 3rd line support. Customers are routinely updated in line with our response matrix regarding resolution timelines.
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Avolution offers a trial environment for an agreed timeline with the customer as part of a proof-of-concept.

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 5%
• Between £250,000 and £500,000: 6%
• Between £500,001 and £1,000,000: 7%
• Between £1,000,001 and £2,500,000: 8%
• Between £2,500,001 and £5,000,000: 9%
• Over £5,000,001: 10%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: SGS
• ISO/IEC 27001 accreditation date: Friday 1 December 2023
• What the ISO/IEC 27001 doesn’t cover: Data on customer owned or managed equipment
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Cyber essentials plus: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials Plus certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials Plus certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Other security certifications: Yes
• Any other security certifications:
  • AWS datacentres certified in ISO27001 and CSTAR
  • AWS datacentres certified in ISO9001, ISO27017, ISO27018
  • AWS certified in DoD SRG, FedRAMP, FIPS, IRAP, MLPS, MTCS
  • AWS certified in MTCS, PCI DSS, SEC Rule 17a4f
  • AWS datacentres certified in SOC1, SOC2 and SOC3

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Plans for positive actions with community groups.

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Inclusive and accessible development practices, including guidance for line managers on recruiting, managing and developing people with a disability or health condition

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Inclusive and accessible recruitment practices, development practices and retention policies that support-focused activities including those provided in the Guide for line managers on recruiting, managing and developing which support people with a disability or health condition

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at gus.firth@avolutionsoftware.com. Tell them what format you need. It will help if you say what assistive technology you use.