Infrastructure_Software_as_a_Service (ISaaS) _Physical_Virtual_Compute
Birlasoft Physical & Virtual Compute Services deliver comprehensive server lifecycle management, including provisioning, monitoring, OS management, hardening, performance optimization, virtualization, consolidation, and high‑availability design. With 15K+ servers managed and deep datacenter expertise, Birlasoft ensures resilient, scalable, and secure compute operations across on‑premise and hybrid environments.
Features
- 24×7×365 global Compute Operations
- Server provisioning and lifecycle management.
- OS platform management across Windows and Linux
- Virtualization using VMware, Hyper‑V, Nutanix
- Server performance optimization and tuning
- Server consolidation and modernization.
- High‑availability compute architecture design.
- OS patching, upgrades, and hardening.
- Hybrid datacenter compute operations.
- Compute automation through Ansible playbooks.
Benefits
- Improved server performance through continuous optimization.
- Higher availability with resilient compute architectures.
- Reduced operational downtime via proactive monitoring
- Lower infrastructure costs through server consolidation.
- Enhanced security with OS hardening and updates.
- Increased scalability across hybrid environments.
- Faster deployment using automated provisioning.
- Improved workload stability with virtualization
- Better capacity planning and resource utilization
- Streamlined operations with compute automation
Pricing
- Education pricing available
Service documents
Request an accessible format
Framework
G-Cloud 15
Service ID
5 9 0 4 2 5 3 4 5 2 9 9 2 2 9
Contact
Birlasoft (UK) Limited
Vikas Malik
Telephone: +447917213208
Email: vikas.malik@Birlasoft.com
About your service
- Service categories
-
Systems Infrastructure Software
Physical and virtual computing
- Virtual client computing
Operating system environments
- Core Operating Systems
- Client Operating Systems
Software defined compute
- Virtual Machine Software
- Container Infrastructure Software
- Cloud System Software
Other computing and storage software
- Remote Desktop Control Software
- Container Data and Infrastructure Management Software
- Multi cloud support
- Yes
Service scope
- Software add-on or extension
- No
- Cloud deployment model
- Hybrid cloud
- Service constraints
- Constraints are evaluated on a case-by-case basis, tailored to the unique requirements and landscape of each client engagement. We assess risk and constraints at the time of engagement to ensure alignment with client needs and project scope
- System requirements
-
- There are no specific system requirements
- Our requirements are easily customisable
User support
- Email or online ticketing support
- Yes
- Support response times
-
Here are the Birlasoft standard SLA response times by priority:
P1 (Critical): < 15 minutes
P2 (High): < 30 minutes
P3 (Medium): < 2 hours
P4 (Low): < 4 hours - User can manage status and priority of support tickets
- Yes
- Online ticketing support accessibility
- WCAG 2.2 AA
- Phone support
- Yes
- Phone support availability
- 24 hours, 7 days a week
- Web chat support
- Yes
- Web chat support availability
- 24 hours, 7 days a week
- Web chat support accessibility standard
- WCAG 2.2 AA
- Web chat accessibility testing
- To ensure the effectiveness of our web chat service, we have conducted extensive testing with assistive technology users. This testing involved individuals using a variety of assistive technologies. Through this testing process, we assessed the compatibility of our web chat interface with different assistive technologies, ensuring that all functionalities are accessible and usable. Feedback from assistive technology users has been instrumental in identifying areas for improvement and refining our web chat service to meet the diverse needs of our users. Our commitment to accessibility extends beyond testing, as we continuously monitor and update our web chat platform to maintain compliance with accessibility standards and guidelines. By engaging with assistive technology users in our testing processes, we aim to create an inclusive and accessible web chat experience for all individuals, regardless of their abilities or limitations.
- Onsite support
- Yes, at extra cost
- Support levels
-
We offer comprehensive infrastructure support tailored to customer needs, with a multi-layered structure ensuring efficient problem resolution. We provide Level 1–Level 4 infrastructure engineering support for transformation and operations.
Level 1 handles first-level interactions and troubleshoots initial issues.
Level 2 engineers diagnose and resolve most technical problems, working seamlessly with Level 1.
For complex scenarios, Level 3 specialists provide in-depth analysis and solutions, interacting with OEMs for support. Highly specialized issues are addressed by Level 3 experts with deep product knowledge.
Level 4 (Infrastructure Architects) tackle the most complex challenges. They go beyond troubleshooting, directly engaging with customers to understand unique requirements. With deep product knowledge, they craft innovative solutions, pushing the boundaries of infrastructure platforms. They also act as trusted advisors to Level 3 support, providing invaluable expertise to resolve critical issues.
Cost for various levels are provided in our rate card.
Yes, we provide a dedicated Technical Account Manager (TAM) / Infrastructure Support Engineer (ISE) who serves as a trusted advisor, understanding customer business goals and requirements. This collaborative approach ensures customers receive the right level of support. - Support available to third parties
- Yes
- AI chatbot
- Yes
Onboarding and offboarding
- Getting started
-
Birlasoft ensures a smooth onboarding experience by offering a structured enablement program designed to help users start using our services effectively. We provide multiple training formats to cater to diverse customer needs:
Onsite Training: Delivered by experienced consultants for hands-on learning during implementation phases. This includes instructor-led sessions, workshops, and “train-the-trainer” programs for key stakeholders.
Online Training: Virtual instructor-led sessions and self-paced modules accessible through our learning portal, enabling flexibility for global teams.
User Documentation: Comprehensive resources such as user guides, job aids, FAQs, and quick reference materials are provided to support day-to-day operations. These documents are continuously updated to reflect new features and best practices.
Change Management Support: We integrate training with communication plans, ensuring stakeholders are informed and engaged throughout the transition. Feedback loops and adoption metrics help us refine the approach for maximum effectiveness. - Service documentation
- Yes
- Documentation formats
-
- HTML
- ODF
- Other
- Other documentation formats
-
- Powerpoint presentation
- Word document
- End-of-contract data extraction
-
When a contract ends, Birlasoft follows a structured and compliant process to ensure customers can securely extract their data. Customers are given the option to either receive all processed data back or request complete deletion of their data from Birlasoft systems. Upon termination, Birlasoft provides a Data Archival Confirmation Report and a Compliance & Audit Checklist to validate the process. If the customer opts for data return, all personal and business data is packaged and delivered in agreed formats, along with migration scripts and validation logs for integrity checks. In cases where deletion is requested, Birlasoft certifies that all copies have been erased from its infrastructure.
Until the data is fully returned or deleted, Birlasoft continues to maintain compliance with contractual and regulatory obligations. If local laws prevent immediate deletion or return, Birlasoft ensures restricted processing only as required by law and notifies the customer accordingly. Additionally, system access termination logs, license release reports, and infrastructure deletion records are shared for transparency. This multi-step approach guarantees secure data handling, minimizes risk, and provides customers with complete assurance during offboarding - End-of-contract process
-
The following is typically included in the price of contract.
Scope of Services – Clear definition of in-scope applications, infrastructure towers, L1–L3 support, monitoring, enhancements, and transformation activities.
Service Levels & KPIs – SLA metrics such as response/resolution times, availability targets, incident volumes, and penalty/credit mechanisms.
Delivery & Operating Model – Governance structures, delivery locations (onshore/offshore), shift coverage (e.g., 16×6 / 24×7), ticket flow, escalation paths, and command‑center operations.
Transition & Knowledge Transfer – Detailed transition plan, timelines, zero‑disruption approach, knowledge acquisition, reverse shadowing, documentation, and readiness criteria.
Commercials & Pricing – Fixed fee / T&M / hybrid models, YoY fee adjustments, volume change triggers, rate cards, invoicing terms, and dispute‑resolution procedures.
Security, Compliance & Audit – Data protection, access governance, compliance adherence, audit rights, and cybersecurity responsibilities.
Tools & Technology Stack – ITSM platform usage, automation tools (e.g., Sigma), monitoring tools, and customer‑specific software dependencies.
Roles & Responsibilities (RACI) – Clear accountability for customer vs. Birlasoft, including collaboration expectations.
Exclusions & Assumptions – Out‑of‑scope items, prerequisites, customer responsibilities, third‑party dependencies.
Termination & Exit Management – Notice periods, transition-out support, knowledge handover, and continuity safeguards. - Documentation accessibility standard
- WCAG 2.2 AA
Using the service
- Web browser interface
- Yes
- Supported browsers
-
- Microsoft Edge
- Firefox
- Chrome
- Safari
- Other
- Application to install
- Yes
- Compatible operating systems
-
- Android
- IOS
- Linux or Unix
- MacOS
- Windows
- ChromeOS
- Other
- Designed for use on mobile devices
- Yes
- Differences between the mobile and desktop service
- Functional differences between mobile and desktop experiences do not exist. The service is generally delivered through cloud‑based consoles, dashboards, and automated tooling that behave consistently across devices. Any variation is typically limited to interface form‑factor differences—desktop portals offer full administrative views, while mobile access may provide slightly limited options.
- Service interface
- Yes
- User support accessibility
- WCAG 2.2 AA
- Description of service interface
- We can provide a secure, web-based portal designed for ease of use and accessibility. It provides a unified dashboard for monitoring, reporting, and managing services. Users can view real-time performance metrics, submit service requests, and track incident status. Role-based access ensures personalised views and functionality, while integrated APIs enable automation and third-party tool integration. The interface supports multi-factor authentication, responsive design for mobile access, and includes embedded help resources and documentation
- Accessibility standards
- WCAG 2.2 AA
- Accessibility testing
- Our approach include collaboration with individuals using screen readers, voice recognition tools, and keyboard-only navigation.
- API
- Yes
- What users can and can't do using the API
-
Birlasoft provides APIs that allow customers to programmatically interact with its managed IaaS services across major public cloud providers. Using the API, users can set up core service components such as provisioning requests, configuration initialization, and integration with third‑party tools. Initial setup typically includes authentication, defining required resources, and registering workloads or environments
Through the API, users can also modify configurations—adjusting resource parameters, updating alert thresholds, managing access controls, and performing lifecycle operations such as scaling or deprovisioning. Changes can be triggered directly from customer automation platforms, allowing seamless governance and workflow integration.
Some advanced configurations, including specialized OEM integrations or complex workflow modifications, may require Birlasoft’s support team to implement. Additionally, while the API supports extensive customization, not all dashboard or reporting elements may be fully API‑driven; some must be configured through the self‑service portal. - API documentation
- Yes
- API documentation formats
-
- HTML
- Other
- API sandbox or test environment
- Yes
- Customisation available
- Yes
- Description of customisation
-
Users can modify dashboards, report layouts, alert settings, workflow steps, and permission levels. They can also adjust service tiers, escalation workflows, and integrations with external solutions.
Customization is performed through the self-service portal, which allows users to update configurations, set automation logic, and manage notification preferences. For more advanced tailoring, Birlasoft offers API-based extensions and supports custom scripting to enhance workflow automation.
Only authorized personnel—such as admins, technical leads, or nominated customer stakeholders—are permitted to apply these configurations. Any high‑impact changes require oversight and approval from Birlasoft’s support team to maintain compliance and security
Scaling
- Independence of resources
- Birlasoft guarantees service stability through multi-tenant isolation and resource segmentation. Each customer environment is logically separated, ensuring workloads do not interfere with others. We implement auto-scaling, load balancing, and capacity planning to handle peak demand without performance degradation. Dedicated resource pools and proactive monitoring prevent resource contention. Additionally, QoS policies prioritize critical workloads, while predictive analytics forecast usage trends to maintain optimal performance. Regular audits and governance reviews ensure compliance with agreed SLAs. This approach provides consistent service quality, regardless of demand from other users, safeguarding customer experience and operational continuity.
Analytics
- Service usage metrics
- Yes
- Metrics types
- Birlasoft provides key service metrics to ensure transparency and performance tracking. These include Incident Response and Resolution Times by priority, Service Availability/Uptime, and Mean Time to Resolve (MTTR). Additional metrics cover Change Success Rate, First Contact Resolution, and SLA Compliance Percentage. Regular Capacity and Performance Reports, Patch Compliance, and Security Incident Metrics are shared through monthly dashboards. These metrics help customers monitor operational efficiency, identify trends, and validate adherence to contractual obligations. By offering detailed insights, Birlasoft empowers clients to make informed decisions and maintain confidence in managed service delivery.
- Reporting types
-
- API access
- Real-time dashboards
- Regular reports
- Reports on request
- Resource tagging
- Yes
- FOCUS resource tagging
- Yes
Resellers
- Supplier type
- Reseller providing extra support
- Organisation whose services are being resold
- Microsoft, HP, Dell-EMC, VMware, IBM, United Layer
Staff security
- Staff security clearance
- Conforms to BS7858:2019
- Government security clearance
- Security Clearance (SC)
Asset protection
- Knowledge of data storage and processing locations
- Yes
- Data storage and processing locations
-
- United Kingdom
- European Economic Area (EEA)
- Other locations
- User control over data storage and processing locations
- Yes
- Datacentre security standards
- Complies with a recognised standard (for example CSA CCM version 4.0)
- Penetration testing frequency
- At least every 6 months
- Penetration testing approach
- NCSC approved service provider
- Protecting data at rest
-
- Physical access control, complying with CSA CCM v4.0
- Physical access control, complying with SSAE-18 / ISAE 3402
- Encryption of all physical media
- Scale, obfuscating techniques, or data storage sharding
- Other
- Other data at rest protection approach
- Birlasoft protects data at rest using encryption across all storage systems, ensuring strong cryptographic security. Encryption keys are managed through secure Key Management Systems (KMS) with strict rotation policies. We implement role-based access controls and enforce least privilege principles to restrict unauthorized access
- Data sanitisation process
- Yes
- Equipment disposal approach
- Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
- Data sanitisation type
-
- Data Erasure
- Explicit overwriting of storage before reallocation / Secure Erase
- Physical Destruction / Hardware containing data is completely destroyed
Data importing and exporting
- Data export approach
- Users can export their data through the self-service portal, which provides options to download reports, logs, and configuration details in standard formats such as CSV, JSON, or PDF. For large datasets or full-service exports, Birlasoft offers secure file transfer via SFTP or encrypted cloud storage links.
- Data export formats
-
- CSV
- ODF
- Other
- Other data export formats
-
- XML
- HTML
- TXT
- Data import formats
-
- CSV
- ODF
- Other
- Other data import formats
-
- XML
- TXT
Data-in-transit protection
- Data protection between buyer and supplier networks
-
- TLS (version 1.2 or above)
- IPsec or TLS VPN gateway
- Legacy SSL and TLS (under version 1.2)
- Data protection within supplier network
-
- TLS (version 1.2 or above)
- IPsec or TLS VPN gateway
- Legacy SSL and TLS (under version 1.2)
- Other
- Other protection within supplier network
- Birlasoft protects data within its network using multiple layers of security. We implement end-to-end encryption for data in transit and at rest, alongside firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) to block unauthorized access. Network segmentation isolates critical systems, while role-based access controls limit privileges. Continuous SIEM monitoring detects anomalies, and multi-factor authentication (MFA) secures administrative access. Regular vulnerability scans, patching, and compliance audits ensure resilience against evolving threats.
Availability and resilience
- Guaranteed availability
-
Birlasoft guarantees high availability through defined SLAs. Availability is measured monthly and excludes scheduled maintenance windows agreed upon with customers. Continuous monitoring, redundancy, and failover mechanisms ensure service resilience.
If availability falls below the guaranteed level, Birlasoft offers service credits as compensation. These credits are calculated based on the percentage of downtime and applied to future invoices, ensuring fairness and transparency. The refund process is documented in the Master Service Agreement (MSA) and triggered automatically upon SLA breach verification. - Approach to resilience
- Available on request.
- Outage reporting
-
Birlasoft reports outages through multiple channels to ensure transparency and timely communication. We maintain a status dashboard, accessible to customers, which displays real-time service health, ongoing incidents, and maintenance schedules. This dashboard is continuously updated and includes historical uptime data for reference.
For integration and automation needs, we can provide an API that allows customers to programmatically retrieve outage and status information, enabling seamless incorporation into their internal monitoring systems.
Email alerts are sent to designated customer contacts whenever an outage occurs or a critical incident is detected. These alerts include details on the impact, estimated resolution time, and progress updates.
Identity and authentication
- User authentication needed
- Yes
- User authentication
-
- Multi-Factor Authentication (MFA)
- Public key authentication (including by TLS client certificate)
- Identity federation with existing provider (for example Google Apps)
- Limited access network (for example PSN)
- Dedicated link (for example VPN)
- Username or password
- Access restrictions in management interfaces and support channels
-
Access is role-based, ensuring only authorized personnel can perform administrative actions. Multi-factor authentication (MFA) and secure VPN are mandatory for privileged accounts. All activities are logged and monitored through SIEM for anomaly detection.
Support channels use identity verification before processing requests, and sensitive actions require additional approval. Privileged sessions are time-bound and audited to prevent misuse. - Access restriction testing frequency
- At least every 6 months
- Management access authentication
-
- Multi-Factor Authentication (MFA)
- Public key authentication (including by TLS client certificate)
- Identity federation with existing provider (for example Google Apps)
- Limited access network (for example PSN)
- Dedicated link (for example VPN)
- Username or password
Audit information for users
- Access to user activity audit information
- Users receive audit information on a regular basis
- How long user audit data is stored for
- User-defined
- Access to supplier activity audit information
- Users receive audit information on a regular basis
- How long supplier audit data is stored for
- User-defined
- How long system logs are stored for
- User-defined
Security governance
- Named board-level person responsible for service security
- Yes
- Security governance certified
- Yes
- Security governance standards
-
- CSA CSM version 4.0
- ISO/IEC 27001
- Information security policies and processes
-
Birlasoft follows stringent information security policies aligned with ISO 27001, SOC 2, and GDPR standards to safeguard customer data. Our framework includes policies for access control, data encryption, vulnerability management, incident response, and business continuity.
The reporting structure is centralized under the Chief Information Security Officer (CISO), supported by dedicated security teams for governance, risk, and compliance. Regular audits, penetration tests, and compliance reviews ensure adherence to policies.
We enforce policies through mandatory employee training, automated monitoring tools, and strict role-based access controls. Non-compliance triggers corrective actions and escalation to senior management.
Security incidents are logged, investigated, and reported promptly, with root cause analysis and preventive measures documented. This structured approach ensures robust protection and continuous improvement of our security posture. - Software Security Code of Practice
- Yes
Operational security
- Configuration and change management standard
- Supplier-defined controls
- Configuration and change management approach
-
Configuration Management: All service components are tracked throughout their lifecycle using a Configuration Management Database (CMDB). Each asset is assigned a unique identifier and linked to related services, dependencies, and change history. Regular audits and automated discovery tools keep the CMDB accurate and up to date.
Change Management: Every change request undergoes a formal assessment for security, compliance, and operational impact. This includes risk analysis, vulnerability checks, and approval by the Change Advisory Board (CAB). High-risk changes require additional security validation and rollback planning. - Vulnerability management type
- Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
- Vulnerability management approach
-
We assess potential threats through continuous vulnerability scans, penetration testing, and risk analysis of all service components. Threat intelligence is sourced from global security advisories, OEM bulletins, CERT alerts, and industry threat feeds.
Once a vulnerability is identified, patches are prioritized based on severity. Critical patches are deployed within 24–48 hours, while medium and low-risk updates follow scheduled maintenance windows.
Regular audits and automated tools ensure timely remediation and compliance with security standards, minimizing exposure and safeguarding customer environments against evolving threats. - Protective monitoring type
- Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
- Protective monitoring approach
-
We identify potential compromises through continuous log analysis, anomaly detection, and real-time alerts from SIEM tools. Threat indicators include unusual access patterns, privilege escalations, and suspicious network activity.
When a potential compromise is detected, our Security Operations Center (SOC) initiates incident triage, containment, and forensic analysis.
Response is immediate—critical incidents are addressed within 15 minutes, with full remediation and root cause analysis following established incident response protocols.
This proactive approach minimizes impact, safeguards data, and ensures compliance with security standards. - Incident management type
- Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
- Incident management approach
-
Birlasoft’s incident management process follows ITIL standards with pre-defined workflows for common events like system outages, security breaches, and performance issues.
Users can report incidents via the service desk portal, email, or phone, ensuring multiple channels for quick logging.
Once resolved, we provide detailed incident reports through the ITSM platform, including root cause analysis, resolution steps, and preventive measures. Reports are shared with stakeholders during governance reviews and stored for audit compliance. - Post-quantum cryptography secure
- Yes
Secure development
- Approach to secure software development best practice
- Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)
Public sector networks
- Connection to public sector networks
- No
Pricing
- Discount for educational organisations
- Yes
- Free trial available
- No
Discount percentage by annual call-off contract value (excluding VAT)
- Less than £250,000
- 0%
- Between £250,000 and £500,000
- 0.5%
- Between £500,001 and £1,000,000
- 0.75%
- Between £1,000,001 and £2,500,000
- 1%
- Between £2,500,001 and £5,000,000
- 1.25%
- Over £5,000,001
- 1.5%
Non-mandatory Standards and certifications
- ISO/IEC 27001 certification
- Yes
- Who accredited the ISO/IEC 27001
- BSI
- ISO/IEC 27001 accreditation date
- Monday 17 November 2025
- What the ISO/IEC 27001 doesn’t cover
- Any services, operations, or activities including customer support not linked to IT services, physical security beyond facilities management, non-IT operations, legacy systems not included in the ISMS, subcontracted services not formally incorporated, or any new services introduced after the scope date are not covered under this certification.
- ISO 28000:2022 certification
- No
- ISO 9001 certification
- Yes
- Who accredited the ISO 9001 certification
- TÜV NORD
- ISO 9001 accreditation date
- Monday 7 July 2025
- What the ISO 9001 doesn’t cover
-
Any products or services outside software and IT service delivery.
Information security, data privacy, or cybersecurity controls.
Customer‑owned infrastructure, systems, applications, or environments.
Third‑party suppliers, subcontractors, or partners.
Financial controls, regulatory compliance, risk management, or governance frameworks. - Quality management systems (QMS)
- Yes
- CSA STAR certification
- No
- PCI certification
- No
- Cyber essentials
- Yes
- Please provide your Cyber Essentials Certificate Number
- 81d090a3-960b-4e97-94c5-4086190155fe
- Cyber essentials plus
- Yes
- Please provide your Cyber Essentials Plus Certificate Number
- 5b07766b-d1b5-469a-bb87-d1fd849f6e98
- Other security certifications
- Yes
- Any other security certifications
-
- SOC 2 Type 2
- ISO27701:2019
- NIST CSF 2.0
Social value
- Section B - Commitment for Future: Delivery
-
-
Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.
Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority
- New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
- New apprenticeships on the contract workforce in the relevant area that meet the criteria set out in MAC 1b
- Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
- Plans to engage the contract workforce in deciding the most important workplace issues to address
- Ensuring new workers are informed of their right to join a trade union
- Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
- Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
- Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
- Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
- Activities to cascade good practice on fair working conditions throughout the supply chain
- Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave
- Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
- Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
- Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
- Plans for an appropriate income replacement policy for staff who are required to spend time away from work to care for a sick dependent or close relative
- Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
- Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
- Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas
- Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
- Volunteering opportunities for staff
- Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
- Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
- Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling
- How these flow down the supply chain and are monitored Illustrative examples include reporting, site visits, audits, etc.
- How to ensure business decisions re: price/cost, short lead times, payment timescales do not create modern slavery risks in the supply chain
- How the supplier will work with NGOs, trade unions or other businesses to address modern slavery risk
- Means of influencing staff, suppliers, customers, communities and/or any other appropriate stakeholders with respect to modern slavery risks relating to the contract
-
Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.
Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises
- Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
- Activities to identify opportunities to open up sub-contracts under the prime contract to a diverse range of businesses, including new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
- Plans for engaging a diverse range of businesses in engagement activities prior to appointing subcontractors (including activities prior to award of the main contract and during the contract term)
- Activities that demonstrate a collaborative way to work with a diverse range of businesses as part of the supply chain
- Advertising of supply chain opportunities openly and to ensure they are accessible to a diverse range of businesses, including advertising all subcontracting opportunities on Contracts Finder
- Ensuring accessibility to contracting and subcontracting opportunities for disabled business owners and employees
- Structuring of the supply chain selection process to ensure fairness (e.g. anti-corruption) and encourages participation by a diverse range of businesses, including with regard to new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutual
- Understanding of local demographics, needs and opportunities for the co-design of the goods, services and works to be delivered under the contract
- Methods for engaging with different parts of the community (including the education system and charities representing the community) and how communities come together to inform decisions, strategy and projects to leave a positive legacy for future generations
- Measures to involve local stakeholders and/or users in design (e.g. in the design of services, systems, products or buildings)
- Plans for positive actions with community groups.
- Measures for making facilities used in the delivery of the contract available for community groups, education or training
- Measures to engage users and communities and build relationships to increase community integration build trust and influence how the contract is delivered
- Plans to respond flexibly and adapt approaches to community engagement and initiatives
- Support for community-led initiatives relevant to the contract. Illustrative examples: improving transport links; reducing loneliness; helping with English language proficiency; and facilitating social mixing among people with different backgrounds
- Collaborating with anchor institutions and community groups to make facilities available for education, training or community events
-
Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero
Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.
- Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
- Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
- Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
- Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
- Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it
-
Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain
Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.
- Understanding of the issues affecting the development of new skills by target cohort
- Understanding of the underlying factors affecting improvements to reduce barriers to entry and training schemes for the target cohort(s) related to the contract workforce
- Other measures to offer development opportunities for the target cohort(s) in the contract workforce
- Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort
- Understanding of issues relating to entering the contract workforce
- Creation of outreach activities to create a pipeline of employees for the future contract delivery
- Content of the outreach activity is designed to suit the target cohort
- Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort
-
Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.
Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.
- Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
- Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion
- Inclusive and accessible recruitment practices, development practices and retention policies that support-focused activities including those provided in the Guide for line managers on recruiting, managing and developing which support people with a disability or health condition
- Actions to invest in the physical and mental health and wellbeing of the contract workforce
-