SAP UK Ltd

BW/4HANA Private Cloud Edition

A popular SAP Data Warehouse System which Extracts, transforms and loads data from SAP and Non-SAP data sources

Features

• Data Warehouse
• Development Tools
• Real Time reporting
• SAP S/4HANA Services
• Extract Transform and Load
• Queries
• Data Management

Benefits

• Automates Data Warehouse Creation
• Extracts data from SAP products
• Acts as a Data Warehouse for SAP Analytics Cloud

£35,091 an instance a month

• Education pricing available

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at UKPublicSector@sap.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

547243046609959

Contact

David Dinsdale
+44 870 608 4000
UKPublicSector@sap.com

Service scope

• Software add-on or extension: Yes
• What software services is the service an extension to: There are 6000 Operational Data Provisioning extractors, connectors to Success Factors, and BTP
• Cloud deployment model: Private cloud
• Service constraints: Limited to standard Hardware tee-shirt sizes
• System requirements: Cloud Service Provider must be specified

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Response depends on the priority of the Support Case chosen by the customer
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), 7 days a week
• Web chat support: Web chat
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: None or don’t know
• How the web chat support is accessible: Connects a user to an expert for a diagnosis and chat
• Web chat accessibility testing: None
• Onsite support: Yes, at extra cost
• Support levels: Very high: A message can be classified; as very high when there is an absolute; halt of a productive system or an imminent; going-live process or upgrade is; jeopardized. This classification is used; only for “show stoppers.”; ; High: A message can be classified as; high when it causes serious interruptions; in normal operations, normal business; transactions are seriously affected, or; necessary tasks cannot be performed.; ; Medium: A message can be classified; as medium when interruptions in normal; operations occur repeatedly, and these; problems are caused by incorrect or inoperable; functions in the SAP software.; ; Low: A message is classified as low; when minor interruptions occur in normal; operations or the defective function; is not required on a daily basis or; used only infrequently.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: SAP provides onsite training using Technical Academies and user documentation.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: The data belongs to the customer so there is no egress cost
• End-of-contract process: Included; Provision of BW4 Software; Provision of HANA Runtime Software; Provision of Cloud Service Provider Hardware; Maintenance and support; ; Not included; Add on Services

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: No differences as this is delivered via UI5
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: SAP Solution Manager
• Accessibility standards: None or don’t know
• Description of accessibility: The Solution Manager is a separate instance that provides support and diagnostic information to the customer
• Accessibility testing: None
• API: Yes
• What users can and can't do using the API: Access the data in BW4 using an RFC interface
• API documentation: Yes
• API documentation formats:
  • HTML
  • PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Use custom ABAP coding

Scaling

• Independence of resources: We can throttle usage of certain services and usage patterns. ; ; The hardware is dedicated to the customer.

Analytics

• Service usage metrics: Yes
• Metrics types: BW statistics provide service metrics
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v3.0
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Physical access control, complying with another standard
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: Yes
• Data sanitisation type:
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: SAP OpenHub for data export is included which connects to most Databases for export
• Data export formats: Other
• Other data export formats: Most Mainstream DBMS
• Data import formats:
  • CSV
  • Other
• Other data import formats: Most Mainstream DBMS

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Other
• Other protection between networks: Auditing and logging of vulnerabilities
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Legacy SSL and TLS (under version 1.2)
  • Other
• Other protection within supplier network: Auditing and logging of vulnerabilities

Availability and resilience

• Guaranteed availability: The Production systems have a 99.7% uptime SLA
• Approach to resilience: Standard Hyperscaler AZ can be used and DR can be purchased as an additional service
• Outage reporting: A public dashboard; an API; email alerts

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Username or password
• Access restrictions in management interfaces and support channels: SAP’s comprehensive administrative user; access management follows the principles; of minimal authorization (the need-to-know; principle) and segregation of duties.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: KPMG
• ISO/IEC 27001 accreditation date: 3/5/2021
• What the ISO/IEC 27001 doesn’t cover: All modules
• ISO 28000:2007 certification: Yes
• Who accredited the ISO 28000:2007: KPMG
• ISO 28000:2007 accreditation date: 3/3/2021
• What the ISO 28000:2007 doesn’t cover: All Modules
• CSA STAR certification: Yes
• CSA STAR accreditation date: 3/3/2021
• CSA STAR certification level: Level 3: CSA STAR Certification
• What the CSA STAR doesn’t cover: All modules
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards:
  • CSA CCM version 3.0
  • ISO/IEC 27001
• Information security policies and processes: CSA CCM version 3.0; ISO/IEC 27001

Operational security

• Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Configuration and change management approach: OS Changes are tracked; ; Upgrades are available on demand
• Vulnerability management type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Vulnerability management approach: We constantly monitor potential threats to our services and we quickly deploy patches to the OS. Our information about potential threats comes from multiple sources
• Protective monitoring type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Protective monitoring approach: Vulnerability scanning: Vulnerability scans are; performed at least four times a year to ensure; the highest possible level of security while at; the same time adhering to relevant controls; in compliance and certification audits. SAP; prioritizesvvulnerability remediation to reduce; risk and impact to customer data and business; processes. ; External penetration testing: All Internet-facing; systems (for example, firewalls, load balancers,; gateways, and Web application servers) are; scanned on a weekly basis. In addition, manual; verification and penetration testing is performed; to validate risk and priority. Biannual assessment; and penetration tests are performed by independent; security researchers/
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: SAP has; implemented; a security incident management; process that is aligned with the International; Organization for Standardization (ISO) and; International Electrotechnical Commission (IEC); 27035:2011 information security principles.; Security incidents are monitored and tracked by; security specialists in cooperation with defined; communication channels until resolved.

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: Yes
• Connected networks:
  • Public Services Network (PSN)
  • Police National Network (PNN)
  • NHS Network (N3)
  • Joint Academic Network (JANET)

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  SAP is committed to a future sustainable world and acts as both an exemplar and enabler of sustainability. For the 16th consecutive year, SAP was named the Software Industry Leader in the Dow Jones Sustainability Index - https://www.sap.com/sustainability/our-approach.html. SAP is committed to fighting climate change by reducing carbon and other emissions. SAP became Carbon Neutral by 2023 and will be Net Zero by 2030. ; On any G-Cloud Contract, SAP will create a Social Value Action plan in collaboration with the buyer. Progress will be reviewed, and the plan will be refreshed annually. For fighting climate change, we expect that this plan will include:; • supporting your journey to Net Zero by ensuring renewable energy is used in the data centres providing the services and that all services will be 100% carbon neutral from the first day of service.; • offer a workshop to the buyer’s team on the sustainability features of the product that has been purchased and / or the wider SAP suite of sustainability offerings such as the Sustainability Control Tower.; • Work with the buyer’s team to promote the free, high-quality learning about sustainability that is available and free to any member of the public on the Open SAP learning portal at https://learning.sap.com.

  Covid-19 recovery

  On any G-Cloud Contract, SAP will create a Social Value Action plan in collaboration with the buyer. Progress will be reviewed, and the plan will be refreshed annually. To help local communities to manage and recover from the impact of COVID-19, SAP can support buyers in several areas. As part of the Social Value Action plan, SAP will:; • To support re-training and other return to work opportunities for those left unemployed by COVID-19, particularly new opportunities in high growth sectors. SAP will offer a range of free on-demand and facilitated training to communities served by the buyer. This will be delivered free using the SAP learning portal at https://learning.sap.com. Currently available courses include topics like Circular Economies, Opportunities from a Digitally Transformed Economy and New Work and Purpose.; • SAP offers buyers support in key areas for social value relating to COVID 19 Recovery – new ways of working to deliver services; support for the physical and mental health of people affected by COVID-19 and improved workplace conditions such as remote working and sustainable travel solutions. As part of the Social Value Action plan, we will offer a workshop to explain the support we can offer and add tasks to the plan where appropriate.

  Tackling economic inequality

  There are two themes outlined in the guidance relating to this area of social value - Create new businesses, new jobs and new skills; and increase supply chain resilience and capacity.; With respect to skills, as part of the annual Social Value Action plan: ; • SAP will offer a range of free on-demand and facilitated training to communities served by the buyer. This will be delivered free using the SAP Learning portal at https://learning.sap.com. Currently courses cover a range of in demand skills in the IT industry such as Artificial Intelligence, Analytics and Application Development. For these courses, where relevant, SAP will also provide access to technical platforms at no charge so that students may complete the practical learning components of each course.; With respect to increasing supply chain resilience and capacity, as part of the annual Social Value Action plan:; • SAP will offer to brief the buyer’s procurement and finance teams on the opportunities relating to the SAP Ariba Procurement offering. This could include on-boarding the buyer’s suppliers to the SAP Business Network, a €3.2TN marketplace for suppliers where they can grow their businesses. SAP Ariba Procurement also offers capabilities around supplier risk management to ensure that the buyer’s supply chain achieves the desired level of resilience. The guided buying capabilities of SAP Ariba Procurement also allow the buyer to make it easy for staff to support and comply with organisational social objectives, for example spending with sustainable enterprises or local small businesses. SAP will also share our learnings from 5 by 5 in ’25, an initiative designed to encourage organizations across industries to direct more of their addressable spend toward certified social-enterprise and diverse-business suppliers. https://news.sap.com/2020/10/sap-launches-55by25-purposeful-procurement/

  Equal opportunity

  SAP is committed to being one of the most diverse and inclusive software companies in the world. We proactively promote diversity, inclusion, and social justice and work to ensure that our workforce reflects the gender parity and demographics of all the regions where we have employees. We make every effort to ensure that all stages of the employee lifecycle are inclusive to enable employee success. As part of the Social Value Action plan, SAP will propose a Social Innovation Workshop to explore areas of equal opportunity and look at how we approach diversity and inclusion to see how a shared approach with the buyer could help the buyer’s staff and communities that the buyer serves. For example, SAP supports the following organisations and initiatives:; Stemettes is an award-winning social enterprise working across the UK & Ireland and beyond to inspire and support young women and young non-binary people into Science, Technology, Engineering and Maths careers (known collectively as STEM).; Enactus UK – SAP is the Platinum technology partner for Enactus UK, giving access to one of the UK’s largest innovation and entrepreneur networks in the UK. Enactus allows teams of students all over the country to work together to find innovative solutions to social issues within their local and international communities;; Apps For Good believes that all young people should be empowered to take action on the things they care about most. They provide free tech innovation courses to schools, giving teachers ready-made education content, so young people from all backgrounds can develop computing and essential skills to create a brighter future through technology. Apps For Good partner with leading brands to keep their course content 100% free of charge to schools, as well as giving students the opportunity to directly benefit from their industry expertise.

  Wellbeing

  As part of the Social Innovation Workshop described in the Equal Opportunity section, SAP will include the theme of ‘Wellbeing’ to review optional initiatives that can be added to the Social Value Action plan. For example:; • Innovation – SAP offers clients the ability to run innovation workshops on themes that are important to clients. This is often in collaboration with users and communities who can codesign and create a proof of concept of solutions that would address specific challenges and opportunities. We will also offer free training on innovation topics via our SAP Learning portal - https://learning.sap.com. Current courses include Intrapreneurship – Employee-driven Innovation.; • Employee and community pulse – SAP is a leading provider of solutions relating to personal wellbeing. We offer to share our learnings of what works well for different challenges and situations that clients wish to explore. We can share examples of how organisations have supported the physical and mental health of their workforce. A current example would be around working practices and return to work in a post COVID pandemic world. ; • Self-service and a great user experience are key principles of SAP services. We will share insights learned from working with many public service organisations and the world’s most recognised brands on how digital services can bring people and communities together. These insights may then trigger actions that can be added to the Social Value Action plan.

Pricing

• Price: £35,091 an instance a month
• Discount for educational organisations: Yes
• Free trial available: No

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at UKPublicSector@sap.com. Tell them what format you need. It will help if you say what assistive technology you use.