Bentley Systems (UK) Limited

BCDE Common Data Environment

BCDE unlocks project and asset information capabilities, enabling you to develop a competitive edge in your program, project, and asset delivery. BCDE provides a single source of truth, enabling teams to securely access trusted information following UK and international standards to make informed decisions about your projects and assets.

Features

• Project and Asset Information Management Common Data Environment
• Supports CAPEX (project) and OPEX (asset) information lifecycle workflows
• Connect disparate teams to a single source of truth
• Templated ISO19650 (PAS1192-2) CDE supporting official/sensitive and secret classifications
• Contractual information audit trails
• Collaborative document management (design reviews) with comprehensive version control
• Supports supplier check, review, approve and client acceptance workflows
• Real-time visual dashboard reporting of project performance and risk
• Integration API for 3rd party applications
• Integrated mapping interface for CDE and external geospatial data

Benefits

• Quick to mobilise and easy to use facilitating adoption
• Secure, controlled access to trusted project and asset related information
• Improve decision making through powerful searching and real-time reporting
• Drive project-wide benefits through best practice and knowledge sharing
• Improve compliance by driving use of industry/organisational standards
• Structure and track information deliverables across programmes and projects
• Deliver teamwide access to geospatial information and connected data sources
• Improve quality of project (PIM) to asset (AIM) digital handover
• Reduce costs and risks of client and supplier information exchange
• Reduce risk of mistakes/rework by using templates/industry standards (ISO 19650)

£17,800 an instance a year

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at gcloud@bentley.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

732208872786165

Contact

Nick Niknam
+44 7766 388848
gcloud@bentley.com

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: The current and previous release of the software are supported from a maintenance perspective. If defects are found in releases earlier than this an upgrade to a current release will be required to resolve.
• System requirements:
  • Access to the Internet
  • Up-to-date web browser

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: As dictated by our Service Level Agreement
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: No
• Support levels: Support shall be provided between the hours of 9:00am and 5:30pm, UK time, Monday to Friday excluding English bank holidays.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Bentley provides online e-learning content for both end-users and admins. This content is useable as a job aid and is written from a task orientated perspective. For Administrators, our approach is to provide them with E-leaning and some additional coaching around configuration-specific items. Over time we can increase these Admin skills so they can become fully self-sufficient with the system, to that end we can provide additional e-learning and coaching (at additional cost) for these users as their skills and knowledge of the system increase.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Any authorised user can download the data to which they have access via a selectable download option at any time. Optionally, we also provide an online archive at an additional cost.
• End-of-contract process: Any authorised user can download the data to which they have access via a selectable download option at any time. Optionally, we also provide an online archive at an additional cost.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The interface is a fully responsive HTML 5. The majority of the core functionality is available on both desktop and mobile.
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: Full secure systems administration via the web.
• Accessibility standards: None or don’t know
• Description of accessibility: The user interface is built using the Bootstrap 3 interface framework which provides a responsive view across desktops, laptops, tablets and phones. The interface can be zoomed/scaled as required. The interface is partially compliant with WCAG 2.1 A. The interface partially passes items defined in (Web) EN 301 549.
• Accessibility testing: There has been no testing with users of assistive technology.
• API: Yes
• What users can and can't do using the API: A set of worked examples using the API can be found here: ; ; https://gitlab.com/groupbc/webservice-examples; ; A set of available API endpoints is documented and available for users of a BCDE server. (This is documented in the above examples.)
• API documentation: Yes
• API documentation formats:
  • HTML
  • Other
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: Selected Admin users can CONFIGURE aspects of the look and feel of the system. These include Logo, Home Page Image, Portals and Views. Client Terms and Conditions of use can also be maintained.; Selected Admin users can CONFIGURE myriad aspects of the solution including folder structures, metadata, workflow and reports.; (Such CONFIGURATIONS survive Updates).

Scaling

• Independence of resources: Systems are logically separated in a virtual cloud environment. All systems are monitored for performance and availability.

Analytics

• Service usage metrics: Yes
• Metrics types: Storage summary - by Project, user; Recent user activity; User details; Commonly access items; and more
• Reporting types: Reports on request

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: In-house
• Protecting data at rest: Physical access control, complying with SSAE-16 / ISAE 3402
• Data sanitisation process: Yes
• Data sanitisation type: Deleted data can’t be directly accessed
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: Download is a standard feature of the application using a web browser
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • In the same format the information was uploaded
  • XML
• Data import formats:
  • CSV
  • Other
• Other data import formats: No restrictions to the MIME types of associated uploaded files

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: Service Credits are due in case of failure to meet the SLA 99.9% uptime assured by contractual commitment.
• Approach to resilience: Available on request.
• Outage reporting: An emailed report of outages is available on request.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
  • Other
• Other user authentication: Bentley IMS may also be used to authenticate users, providing a single identity for all Bentley products.
• Access restrictions in management interfaces and support channels: Bastion hosts on a management network.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: Between 6 months and 12 months

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber essentials plus: No
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: No
• Security governance approach: Bentley has various externally audited programmes including an ISO 27001 programme with certification for our Managed Services hosted deployments, and a SOC 2 programme which includes a report for our cloud services platform. While BCDE is not currently in scope of either of those certifications, Bentley has a mature ISMS program with appropriate corporate and enterprise level polices.; BCDE’s cloud hosting provider Secura carries a current ISO27001 certification. BCDE has Cyber Essentials Plus Certification.; To review Bentley’s third-party audits and certifications by relevant attestation bodies such as ISO, SOC, CSA Star, please visit our Trust Center at https://www.bentley.com/en/trust-center.
• Information security policies and processes: All Bentley colleagues are required to review and acknowledge Bentley's Information Security Policy upon hire and thereafter annually. The policies themselves are emailed out at least annually and reside permanently on Bentley's intranet site for quick retrieval.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Available on request.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Potential threats and information about threats are identified by using Internet Security Communities such as OWASP and by making the knowledge and defensive coding against threats part of the development team responsibilities. The level of the threat will determine the speed of the deployment of the patches.
• Protective monitoring type: Undisclosed
• Protective monitoring approach: Enhanced Intrusion Protection and Detection can be provided at additional cost.
• Incident management type: Supplier-defined controls
• Incident management approach: Incidents are managed in an Incident Database solution that stores, tracks and reports on incidents. Where an incident involves a customer interaction, the interaction is logged and tracked through the online help-desk system.; The support team will respond in a common fashion to events reported by the automated monitoring tools.

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  Bentley is more than a software company — we are engaged members of the global community dedicated to advancing the world’s infrastructure. Our success is determined by the skills, dedication, and involvement of extraordinary Bentley colleagues and users around the world. ; Advancing infrastructure is key to addressing climate change and other environmental challenges and is essential to sustaining economies and improving quality of life. We are proud to support this essential work of our users through our products and expertise in infrastructure engineering software. ; Bentley has been focused on sustaining and advancing infrastructure since our founding. Building on our 40-year history of positive impact, we are embedding Environmental, Social, and Governance (ESG) priorities across our business. ; ; Bentley embraces our responsibility for minimizing our environmental impact. We seek to reduce our footprint even as we work to increase the size of our handprint. Through many measures, we are working to reduce carbon emissions across our operations, advance a strong climate strategy, and fortify the culture of sustainability within our global teams. ; Bentley’s Environmental Policy (https://www.bentley.com/legal/environmental-policy/) governs our enterprise environmental management practices and details our commitment to environmental responsibility, including the ways in which we expect our colleagues, visitors, vendors, and suppliers to help drive progress towards our environmental goals and priorities. We aim to be a model for best practices in environmental stewardship and in 2023 took addition steps to reduce the environmental impacts in our business. ; ; In 2023, Bentley:; • Received SBTi approval for near-term (2030) decarbonization targets.; • Developed and launched two Bentley-specific educational pathways courses on sustainability for colleagues.; • Expanded our environmental management team and monitoring solutions.; • Implemented a new travel platform to monitor related emissions in real time and inform our Travel with Purpose Policy.

  Covid-19 recovery

  Our colleagues are essential in driving Bentley’s continued success. Our talent strategy focuses on creating an environment where our colleagues can develop their careers in an inclusive and engaging workplace – one where they feel energized to realize their full potential and talents while making a positive impact by advancing the world’s infrastructure. Our Social strategy focuses on supporting our colleagues, who foster our innovative and welcoming culture, support our communities, and inspire future infrastructure professionals. ; ; In 2023, Bentley:; • Entered a first-of-its-kind partnership with Engineers Without Borders (EWB) International that includes five years of core funding and executive insights. ; • Launch of iTwin4Good and Your Voice, Your Action competitions, encouraging the next generation of infrastructure engineers. ; • Prioritized colleague wellness through two first-time events: OCTO Wellness Challenge and Mental Health Week. ; • USD 500,000 in STEM-related giving in the Bentley headquarters community ; ; The Infrastructure Empowered Workforce Plan (IEWP) is our global strategy enabling managers and colleagues to make responsible and effective choices on the right balance between working from the office and remotely. The IEWP strategy is built on these key principles: ; • A solid foundation of trust and accountability ; • A focus on support and flexibility ; • The belief that meaningful collaboration creates success for all of us ; ; In 2023, we formalized the IEWP strategy to ensure all colleagues had the flexibility to succeed whether working from home, in a Bentley office, or in a hybrid environment. Part of the process included launching a hardware update program where colleagues were equipped with state-of-the-art technology, regardless of where they were working from. Colleague feedback also led to plans for increased collaboration and meaningful connections both in person and virtually in 2024.

  Tackling economic inequality

  At Bentley, our colleagues come from many cultures and backgrounds. They are based in 45 countries around the world and speak 66 languages. All these colleagues contribute their own unique and valued perspectives that drive our success as an organization. We empower colleagues to be highly productive and own their work and careers by supporting an environment where all colleagues feel heard, valued, represented, and welcomed. ; ; We continue to expand and deepen our commitment to Diversity, Equity, and Inclusion (DEI) through programming, offerings, and partnerships that allow us to grow a more diverse, more inclusive, and more innovative workforce that is helping to shape the world’s infrastructure. ; While our priorities did not change in 2023, we focused more on supporting colleagues to take the lead in their own growth, leadership, and community-building efforts. We announced an increased budget for colleague resource groups and compensation for group leaders to show our appreciation for their incredible work in supporting a workplace that values belonging. Our renewed focus on philanthropy and impact encourages colleagues to look internally and extends their support for communities. ; ; Bentley’s Inclusion, Diversity, and Equity Alliance (IDEA) Program includes resource groups that allow colleagues to join peers from across the business and the globe to build community and foster diversity and inclusion. Since 2020, these colleague-led groups have provided a safe space for Bentley colleagues to have courageous conversations, propose changes to our culture, and create a sense of community. In 2023, IDEA programming continued to be a critical resource for support and education. Members of Bentley’s executive management have been key partners for providing access to resources and our leadership team. IDEA includes six colleague resource groups: OpenAbilities, OpenPride, People of Color in the U.S. (POCUS), Women at Bentley, Veterans at Bentley, and IDEA India.

  Equal opportunity

  Bentley is an equal opportunity employer and considers all qualified applicants for employment without regard to race, color, sex, sexual orientation, gender identity, disability, protected veteran status, religion, national origin, age, or any other protected characteristic. This commitment extends to all aspects of employment, including, but not limited to, hiring, placement, promotion, compensation, and training. EEO is the Law (https://www.eeoc.gov/sites/default/files/migrated_files/employers/poster_screen_reader_optimized.pdf) and EEO is the Law Supplement (https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf) documents provide additional information about your rights as an applicant under the law.; ; Bentley Policy on EEO, Affirmative Action and Pay Transparency Non-Discrimination - https://www.bentley.com/wp-content/uploads/Bentley-EEOAA-Statement-of-Policy.pdf; Bentley participates in e-Verify / Bentley participate in e-Verify / Right to Work Notice - https://www.bentley.com/wp-content/uploads/E-Verify-Poster.pdf

  Wellbeing

  Core to Bentley’s health and wellness programs is My Wellbeing, promoting health-related initiatives where the outcomes strengthen engagement so that colleagues around the world can share resources and ideas to inspire healthy living. ; ; In 2023, Bentley’s wellness programs focused on supporting the mental health of colleagues and ensuring a healthy work-life balance. We prioritized colleague wellness by reminding colleagues regularly to take time off to rest and unwind outside of work, facilitating our inaugural Bentley Mental Health Week, and continuing a focus on the Mental Health First Aid Program (https://mhfainternational.org/). Bentley Mental Health week encouraged self-reflection, highlighting real stories of mental health in the workplace, promoting internal and external resources, and encouraging team and individual activities focused on mental health. To further engage our colleagues, we encouraged colleagues to complete a Mental Health Awareness quiz and donated USD 500 to a qualified nonprofit mental health charity, chosen by a participating colleague. ; One popular wellness initiative posed the question: could 300 Bentley colleagues collectively walk, run, and cycle around the globe in a month? The goal of the first OCTO (Office of the Chief Technology Officer) Wellness Challenge was to get colleagues moving outdoors with the bonus that if they together travelled approximately 40,000 kilometers around the globe, Bentley would donate USD 5,000 to Water for People. Seventy-seven teams of colleagues participated, collaborating on a fitness app to share photos of inspirational locales, examples of #wellnessatwork, and engage in friendly competition. Colleagues met the initial 40,000-kilometer goal within 10 days. By the close of the month, participants had run the equivalent of 221 marathons, walked the length of the Great Wall of China six times over, and cycled the distance of the Tour de France nine times. The challenge embodied the #OneBentley spirit and raised USD 12,500 for Water for People.

Pricing

• Price: £17,800 an instance a year
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at gcloud@bentley.com. Tell them what format you need. It will help if you say what assistive technology you use.