SNOWFLAKE DIGITAL LTD

Consultancy services for digital transformation

Consultancy services for digital transformation involve providing expert guidance and support to organizations seeking to leverage technology to fundamentally change how they operate, deliver value, and interact with customers

Features

• Scope
• Strategic Planning
• Technology Assessment
• Change Management
• Process Optimization
• Customer Experience Enhancement
• Data-driven Decision Making
• Risk Management and Compliance
• Training and Skill Development
• Continuous Improvement

Benefits

• Expert Guidance
• Strategic Planning
• Accelerated Transformation
• Cost Efficiency
• Change Management
• Enhanced Customer Experience
• Increased Agility
• Data-driven Insights
• Improved Efficiency
• Sustainable Growth

£1,250 a unit a day

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at marcelo@snowflakedigital.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

555922103845328

Contact

Marcelo Dornelas de Oliveira
07476 547704
marcelo@snowflakedigital.com

Service scope

• Software add-on or extension: No
• Cloud deployment model: Hybrid cloud
• Service constraints: No
• System requirements: NA

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Same day
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.1 AAA
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Consultation Services; ; Development Services; ; Design Services; ; Training and Education; ; Quality Assurance and Testing; ; Deployment and Launch Support; ; Maintenance and Support; ; Performance Optimization; ; Security Services
• Support available to third parties: No

Onboarding and offboarding

• Getting started: User Training Sessions: Conduct interactive training sessions to familiarize users with the website's features, navigation, and functionalities. Provide hands-on demonstrations and encourage questions to ensure understanding.; ; Documentation: Create user-friendly documentation, including guides, tutorials, and FAQs, to serve as reference materials for users. Cover topics such as login procedures, content creation, editing, and basic troubleshooting steps.; ; Onboarding Emails: Send personalized onboarding emails to users, welcoming them to the platform and providing essential information, such as login credentials, key features, and support resources.; ; Interactive Tours: Develop interactive tours or walkthroughs within the website to guide users through important sections and functionalities, highlighting key actions and best practices.; ; Feedback Mechanisms: Implement feedback mechanisms, such as surveys or suggestion forms, to gather user input and address any issues or concerns promptly. Actively listen to user feedback and make necessary improvements to enhance user experience.; ; Ongoing Support: Offer ongoing support through various channels, including email, chat support, or a dedicated helpdesk. Promptly respond to user inquiries, provide assistance with technical issues, and offer guidance as needed.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: SQL files, data dumps, html, etc
• End-of-contract process: The client will have access to the new system and can continue using it as long it's required.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: UI specific
• Service interface: Yes
• User support accessibility: WCAG 2.1 AAA
• Description of service interface: Designed based on customer needs
• Accessibility standards: WCAG 2.1 AAA
• Accessibility testing: Comprehensive Evaluation:; ; Interface testing covers all aspects of the user interface, including navigation menus, forms, images, multimedia, and interactive components.; Manual and Automated Testing:; ; Interface testing involves a combination of manual and automated testing techniques.; Manual testing involves human testers navigating through the website or application using assistive technologies such as screen readers, keyboard navigation, and voice recognition software.; Automated testing utilizes accessibility testing tools to scan the interface for potential issues and violations of WCAG guidelines.
• API: Yes
• What users can and can't do using the API: Can be created based on user requirements
• API documentation: Yes
• API documentation formats:
  • HTML
  • PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Everything can be customised/created based on user requirements.

Scaling

• Independence of resources: By adding more resources to the server (memory, disk, etc)

Analytics

• Service usage metrics: Yes
• Metrics types: Page Views: Monitoring the number of visits to different pages.; User Engagement: Tracking user interactions such as comments, likes, and shares.; Session Duration: Analyzing the duration of user sessions on the website.; Conversion Rates: Measuring the percentage of users who complete desired actions, such as form submissions or purchases.; Traffic Sources: Identifying the sources of website traffic, including organic search, referrals, and direct visits.; Content Performance: Evaluating the popularity and effectiveness of different types of content.; User Demographics: Collecting data on user demographics, interests, and behaviors to better understand the audience.
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Supplier-defined controls
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: ‘IT Health Check’ performed by a CHECK service provider
• Protecting data at rest: Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type: Explicit overwriting of storage before reallocation
• Equipment disposal approach: In-house destruction process

Data importing and exporting

• Data export approach: This can be created based on user requirements.
• Data export formats:
  • CSV
  • ODF
• Data import formats:
  • CSV
  • ODF

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: Availability and Uptime:; ; The website will strive for a minimum uptime of 99% per month, excluding scheduled maintenance windows.; ; Response Time:; ; Technical support requests will be acknowledged within 24 hours of receipt during standard business hours (e.g., Monday to Friday, 9 am to 5 pm).; Critical issues affecting website functionality will be addressed immediately, with a target resolution time of 4 hours.; Performance:; ; The website will maintain optimal performance levels to ensure fast page loading times and smooth user experience.; ; Security:; ; Regular security audits and updates will be conducted to protect against vulnerabilities and ensure compliance with industry best practices.; Security patches and fixes for critical vulnerabilities will be applied promptly to mitigate risks.; ; Backup and Disaster Recovery:; ; Regular backups of website data and files will be performed to prevent data loss.; A disaster recovery plan will be in place to restore the website to full functionality in the event of a catastrophic failure or data breach.; ; Scalability:; ; The website infrastructure will be designed to accommodate growth and spikes in traffic without compromising performance or availability.; Scalability measures will be implemented to ensure seamless expansion of resources as needed.; Reporting:
• Approach to resilience: It’s available on request
• Outage reporting: Emails alerts

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Username or password
• Access restrictions in management interfaces and support channels: This will be developed based on user requirements.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • 2-factor authentication
  • Username or password

Audit information for users

• Access to user activity audit information: You control when users can access audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: You control when users can access audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: CSA CCM version 3.0
• Information security policies and processes: We offer various measures to safeguard data and mitigate risks. This includes defining access controls, encryption protocols, and regular security audits. Incident response plans outline procedures for detecting and responding to security breaches promptly. User training ensures awareness of security best practices. Additionally, compliance with regulations such as GDPR or HIPAA is maintained. Continuous monitoring, patch management, and vendor risk assessments are integral to maintaining a robust security posture for the Drupal website.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: It’s available on request
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: The vulnerability management process involves continuous monitoring, assessment, and mitigation of potential security threats. This includes regularly scanning the website for vulnerabilities, staying updated on security advisories and patches, promptly applying security updates, and conducting periodic security audits. Additionally, implementing strict access controls, using secure coding practices, and employing web application firewalls are essential measures to enhance resilience against cyber threats and protect sensitive data.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Protective monitoring involves real-time monitoring of system activities and network traffic to detect and respond to security incidents promptly. This includes implementing intrusion detection systems, logging and analyzing access logs for suspicious behavior, and setting up alerts for unauthorized access or unusual activity. Regular security audits and penetration testing help identify vulnerabilities, while incident response plans outline procedures for mitigating and recovering from security breaches to safeguard the website and its data.
• Incident management type: Supplier-defined controls
• Incident management approach: The incident management process involves swift identification, assessment, and resolution of security incidents. Upon detection of an incident, such as a data breach or unauthorized access, a designated incident response team investigates the issue, containing and mitigating its impact. Clear escalation procedures and communication protocols ensure timely reporting to stakeholders. Post-incident analysis is conducted to identify root causes and implement preventive measures, strengthening the website's security posture and minimizing future risks.

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Equal opportunity
  • Wellbeing

  Equal opportunity

  Your company can address equal opportunity by implementing policies and practices that promote fairness and inclusivity. This involves creating a diverse workforce through unbiased hiring and promotion processes, ensuring equal pay for equal work, and providing opportunities for professional development regardless of gender, race, religion, or other characteristics. Additionally, fostering a culture of respect and tolerance, offering accommodations for individuals with disabilities, and providing training on diversity and inclusion further reinforce the commitment to equal opportunity. Regular monitoring and evaluation of these initiatives help identify areas for improvement and ensure ongoing compliance with equal opportunity principles.

  Wellbeing

  We address wellbeing by prioritizing employee health and happiness. This involves offering comprehensive wellness programs that include physical fitness, mental health support, and stress management resources. Flexible work arrangements, such as remote work options and flexible hours, promote work-life balance. Providing access to counseling services, mindfulness workshops, and ergonomic workstations contributes to overall wellbeing. Encouraging open communication, recognizing achievements, and fostering a supportive work environment also play crucial roles. Regular feedback surveys and employee assistance programs help gauge satisfaction levels and address concerns promptly, ensuring a workplace culture that values and prioritizes employee wellbeing.

Pricing

• Price: £1,250 a unit a day
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at marcelo@snowflakedigital.com. Tell them what format you need. It will help if you say what assistive technology you use.