IRIS INTELLIGENCE LIMITED

IRIS Intelligence Knowledge Information Management System

IRIS Knowledge Information Management System helps organisations manage their data and information more effectively. It allows organisations to gain a clear understanding the data and information they hold, the location and format of that data and the risks, responsibilities and requirements of holding the information.

Features

• Web-based Knowledge Information Management (KIM) System accessed via any browser
• Full information asset registers and knowledge mapping
• Central record of IMA and IMR documentation
• Single-click exports to ad-hoc, custom reports in PowerPoint and Excel
• Real time on-screen reporting
• Email integration and automated reminders to ensure data remains current
• Dashboards highlight status of information assets / portfolio within teams
• Top of the range encryption and secure access permissions
• Ability to add customer specific “Custom Data Fields”

Benefits

• Comprehensive and Flexible Knowledge Information Management System
• Improve Company Know-How and Knowledge Sharing
• Quickly Embed Best Practice Knowledge and Information Management
• Ensure Use of Knowledge Repositories to Develop Effective Company Strategies
• Enhance Action to Strategy Identification
• Deliver accurate, timely and effective Management Information
• Provide secure audit trails for Knowledge Information Management activities
• Share data and knowledge across teams through secure database
• Simple, intuitive, easy to use: Configure to match user requirements

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@irisintelligence.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

615754623440435

Contact

Nayane Ferreira Huntriss
020 3286 7857
info@irisintelligence.com

About your service

• Service categories:

  Applications

  Production and operations

  • Other operations

  Service industry and public sector operations

  • Healthcare
  • Education
  • Public Order and Safety
  • Police
  • Defence
  • Other
• Multi cloud support: Yes

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Community cloud
  • Hybrid cloud
• Service constraints: None.
• System requirements:
  • Windows Server: 2012, 2016, 2019, 2022 and 2025
  • SQL Server 2012, 2014, 2016, 2017, 2019, 2022, 2025
  • Server RAM – minimum 2 GB free
  • Free Hard Disk space 5GB Minimum
  • CPU – Minimum 2 core , 1.4GHz
  • Can be run on a shared or dedicated server
  • Can be run virtualised if Host Machine has sufficient horsepower.

User support

• Email or online ticketing support: Yes
• Support response times: Initial response within 1 working day. Accelerated response times for Security or Level 1 category issues.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 AA
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Support through email and phone is available from 9 to 6, Mondays to Fridays. 24/7 Premium support for customers with larger teams, or upon premium service subscription.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: The initial default settings of the software in line with relevant Knowledge Information Management standards. Users can access a dedicated help site with user documentation, and context sensitive help within the application. Upon purchase of the software, user training, either face-to-face or online, is provided.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: The client will be provided the underlying SQL databases upon contract completion. Spreadsheet formats of the data can also be produced for client records.
• End-of-contract process: All data can be extracted via Excel, XML, CSV or SQL Query.; General Assistance with the extraction process is covered within the maintenance helpline.; Import of the data into alternate system may be subject to additional charges
• Documentation accessibility standard: WCAG 2.2 AA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: System available for use on mobile via the browser using responsive design.
• Service interface: Yes
• User support accessibility: WCAG 2.2 AA
• Description of service interface: Web-based software accessed from any major browser. System is built using the Microsoft stack in ASP.NET using the MVC framework
• Accessibility standards: WCAG 2.2 AA
• Accessibility testing: User groups include visually impaired with specific assistive technology integrated
• API: Yes
• What users can and can't do using the API: Data export API that can export the data in xls, csv, XML, JSON.
• API documentation: Yes
• API documentation formats:
  • HTML
  • ODF
  • PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Fully customisable using the standard user interface.; Users with administrative permissions can customise the system.; System also allows for local administrator access for lower level users to customise only those areas they are responsible for

Scaling

• Independence of resources: Each end customer is typically provided with their own service machine to ensure their peak demand is satisfied. Within each instance, caching is used throughout the system to reduce demand on the database and increase the speed of user access. For the Monte Carlo analysis, there is a separate dedicated server on which it is run.

Analytics

• Service usage metrics: Yes
• Metrics types: Instantaneous and historical usage of license pools.
• Reporting types:
  • Real-time dashboards
  • Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: In-house
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Encryption of all physical media
• Data sanitisation process: Yes
• Equipment disposal approach: A third-party destruction service
• Data sanitisation type: Deleted data can’t be directly accessed / Cryptographic Erasure

Data importing and exporting

• Data export approach: Data can be exported to spreadsheet and presentation formats. Users can upload their own templates for additional custom exports. Data Export API with export to JSON and XML. These files can be read directly by external applications such as R, Python, Tableau, Power BI etc.
• Data export formats:
  • CSV
  • ODF
  • Other
• Other data export formats:
  • Excel
  • Powerpoint
  • JSON
  • XML
  • MS Project
  • Tableau
  • Power BI
• Data import formats:
  • ODF
  • Other
• Other data import formats:
  • Excel
  • MS Project

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: Multiple options for guaranteeing availability are available, from cold start backup servers to hot mirroring. Typical SLA includes 99.5% availability (>99.9% actual) to allow sufficient time for patches and updates. Updates are made outside of business hours to minimise disruptions. Default settings provide cold backups every 5 minutes, allowing roll back of data with minimal loss. Increased availability and hot backups available on request but may be subject to additional charge.
• Approach to resilience: Available on Request.
• Outage reporting: Email alerts.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Limited access network (for example PSN)
  • Dedicated link (for example VPN)
  • Username or password
• Access restrictions in management interfaces and support channels: IRIS software employs a role-based authorization within the system, where only an identified subset have access to management interfaces.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards:
  • ISO/IEC 27001
  • Other
• Other security governance standards: Platform security inherited from datacentre (Azure, AWS, etc). IRIS internal processes are fully aligned with ISO 27001 and the CSA CCM standards. We follow the standards set out for the Microsoft Azure platform set out here: https://cloudsecurityalliance.org/download/cloud-controls-matrix-v3-0-1/ Operational security follows in house standards based on ISO 27001.
• Information security policies and processes: Security is taken extremely seriously and is in the direct purview of the IT Director. Staff report directly about security matters and there is a no blame, and a report all, approach to security. This ensures that staff have not got any disincentives to report actual and potential security threats for further actioning. In this environment staff feel comfortable checking the previous work of other staff members during regular security audits. In development, any proposed system changes are thoroughly tested prior to roll out and back-tested against previous iterations. A robust three tier change control process is in place for an updates or changes to the system. All software development is managed through Team Foundation Server and no changes can be made to the software unless they are logged within Team Foundation Server first. We implement the highest possible security standards. In addition to the firewall, the security architecture includes IDS / IPS and SEIM technologies. The combination of these components ensures maximum security against cyber-attack and hacking. IT staff are subscribed to numerous security mailing lists and are alert to new actual and potential vulnerabilities in the underlying operating system and frameworks.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: All changes are tracked using BitBucket and Microsoft's Team Foundation Service (TFS). No change can be made without being logged and as all builds, and tests, are automated, no release can be made without a change being recorded. From initial request to release is all performed, and tracked, within BitBucket and TFS. In the development early stages automated builds and tests act as gateways. A final manual test is run before release.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Staff subscribe to multiple security mailing lists and websites to keep abreast of the latest in security vulnerabilities.; When patches are released we update our own systems first. If there are no regressions we update our production servers. Security patches are typically approved within hours if there are no immediate regressions. If there are we investigate the scale and make a judgement as to the impact of the security vulnerability versus the scale of the patch regression. This typically happens on the day of release.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Intrusion detection software runs on all servers to monitor for suspicious activity. Anti-virus and anti-malware scans run regularly as well. On detection of a compromise resolution is the priority and all relevant staff are re-tasked to the job of resolution. Our preferred solution would be to restore from clean backups where possible onto a clean virtual machine, which leaves the original virtual machine free for forensics (In simulations this would take at most an hour).
• Incident management type: Supplier-defined controls
• Incident management approach: The preferred method by which users can report events is through their assigned support contact who will provide up to date incident reports throughout the resolution process.; The staff have a number of predefined processes mostly designed to get the customer back up and running as quick as possible whilst allowing root cause analysis to be performed at a slower pace with no affect on the customer.
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: 14 day limited demonstration version

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 1%
• Between £1,000,001 and £2,500,000: 2%
• Between £2,500,001 and £5,000,000: 3%
• Over £5,000,001: 5%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 8441bb0a-f86b-4cc0-94e3-3e6d097d4190
• Other security certifications: Yes
• Any other security certifications:
  • ISO 27001 for all Data Centers (Azure, AWS, etc)
  • Defence Department RMF Award

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Plans to engage the contract workforce in deciding the most important workplace issues to address
    • Ensuring new workers are informed of their right to join a trade union
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Activities to cascade good practice on fair working conditions throughout the supply chain
    • Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
    • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
    • Plans for an appropriate income replacement policy for staff who are required to spend time away from work to care for a sick dependent or close relative
    • Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Volunteering opportunities for staff
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
    • Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
    • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling
    • How these flow down the supply chain and are monitored Illustrative examples include reporting, site visits, audits, etc.
    • How to ensure business decisions re: price/cost, short lead times, payment timescales do not create modern slavery risks in the supply chain
    • How the supplier will work with NGOs, trade unions or other businesses to address modern slavery risk
    • Means of influencing staff, suppliers, customers, communities and/or any other appropriate stakeholders with respect to modern slavery risks relating to the contract

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Activities to identify opportunities to open up sub-contracts under the prime contract to a diverse range of businesses, including new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Plans for engaging a diverse range of businesses in engagement activities prior to appointing subcontractors (including activities prior to award of the main contract and during the contract term)
    • Activities that demonstrate a collaborative way to work with a diverse range of businesses as part of the supply chain
    • Advertising of supply chain opportunities openly and to ensure they are accessible to a diverse range of businesses, including advertising all subcontracting opportunities on Contracts Finder
    • Ensuring accessibility to contracting and subcontracting opportunities for disabled business owners and employees
    • Structuring of the supply chain selection process to ensure fairness (e.g. anti-corruption) and encourages participation by a diverse range of businesses, including with regard to new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutual

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
    • Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@irisintelligence.com. Tell them what format you need. It will help if you say what assistive technology you use.