Computacenter - Palo Alto Prisma Access
Prisma Access is a cloud-based security service that provides organizations with secure access to applications and data from anywhere. It offers advanced security features like threat prevention, URL filtering, and encryption to protect against cyber threats.
Features
- Cloud-based security
- Secure remote access
- Threat prevention
- URL filtering
- Advanced encryption
- Zero-trust network security
- Cloud-delivered firewall
- Global scalability
- Application segmentation
- Centralized management and visibility
Benefits
- Improved security posture
- Enhanced remote workforce productivity
- Simplified network infrastructure
- Reduced complexity and operational costs
- Scalability for business growth
- Protection against advanced cyber threats
- Seamless user experience
- Elimination of backhauling traffic
- Centralized policy management and visibility
- Compliance with regulatory requirements
Pricing
£5.92 a unit
Service documents
Request an accessible format
Framework
G-Cloud 14
Service ID
7 3 3 6 9 2 6 3 2 0 3 9 7 6 0
Contact
Computacenter (UK) Ltd
Karen Baldock
Telephone: +44 (0) 1707 631000
Email: government@computacenter.com
Service scope
- Software add-on or extension
- Yes, but can also be used as a standalone service
- What software services is the service an extension to
-
1. Virtual Private Network (VPN)
2. Next-Generation Firewall (NGFW)
3. Secure Web Gateway (SWG)
4. Cloud Access Security Broker (CASB)
5. Zero Trust Network Access (ZTNA)
6. Data Loss Prevention (DLP)
7. Threat Intelligence
8. Network Access Control (NAC)
9. Secure Email Gateway (SEG)
10. Mobile Device Management (MDM) - Cloud deployment model
- Public cloud
- Service constraints
- Prisma Access relies on a stable and reliable internet connection for proper functionality. It may have compatibility limitations with certain legacy systems or software. Implementing and maintaining Prisma Access may involve additional expenses for licensing, infrastructure, and ongoing support. Proper configuration and setup require technical expertise and time investment. Organizations may need to provide training to employees for effective and secure use of the service. Availability and coverage of Prisma Access may vary based on geographical locations. Organizations using Prisma Access rely on the service provider's infrastructure and support. Please review product documentation or consult with us for specific constraints/limitations.
- System requirements
-
- Laptops, desktops, mobile devices, and IoT devices.
- Windows, macOS, Linux, iOS, and Android operating systems such as
- Internet connection
- Google Chrome, Mozilla Firefox, Microsoft Edge, and Safari.
- Compatible network infrastructure
- VPN client software provided by Prisma Access
User support
- Email or online ticketing support
- Email or online ticketing
- Support response times
- SLA for Support-related response times are dependant on the level of support purchased with the service.
- User can manage status and priority of support tickets
- Yes
- Online ticketing support accessibility
- None or don’t know
- Phone support
- Yes
- Phone support availability
- 24 hours, 7 days a week
- Web chat support
- No
- Onsite support
- No
- Support levels
- Palo Alto Networks offers three support levels: Standard, Premium, and Elite. The Standard level provides 8x5 access to technical support, software updates, and hardware replacement. The Premium level offers 24x7 access to technical support, along with additional features such as designated support engineers and proactive monitoring. The Elite level includes all Premium features, as well as faster response times and personalized support services. Each level is designed to meet varying customer needs and service level requirements.
- Support available to third parties
- Yes
Onboarding and offboarding
- Getting started
- Palo Alto Networks assists users in starting to use Prisma Access through comprehensive documentation, technical support, training programs, and professional services. They provide step-by-step guides for setup and configuration, offer assistance and troubleshooting, educate users through training resources, and offer consulting services for a smooth deployment. Additionally, they foster a user community for collaboration and knowledge sharing. These efforts ensure that users have the necessary resources and support to effectively implement and utilize Prisma Access.
- Service documentation
- Yes
- Documentation formats
-
- HTML
- End-of-contract data extraction
-
When a Prisma Access contract ends, users have different options to extract their data and ensure a smooth transition. Here are some steps users can take:
1. Data Backup: Before the contract ends, it is crucial to perform a comprehensive data backup. This includes saving any configuration files, security policies, user profiles, and other relevant data associated with Prisma Access.
2. Export Logs and Reports: Users should extract logs, reports, and any other relevant data generated by Prisma Access during the contract period. This information can be essential for compliance, auditing, or historical analysis purposes.
3. Data Migration: If users plan to transition to a different solution or platform, they should explore data migration options. This may involve exporting and converting configurations, policies, and user data to a format compatible with the new platform.
4. Vendor Assistance - End-of-contract process
- At the end of a Prisma Access contract, the services provided by Prisma Access will cease. The contract will reach its agreed-upon end date, and the customer will no longer have access to the Prisma Access platform and its associated features and benefits. The customer will need to make alternative arrangements for their network security needs.
Using the service
- Web browser interface
- Yes
- Supported browsers
-
- Internet Explorer 11
- Microsoft Edge
- Firefox
- Chrome
- Safari
- Opera
- Application to install
- Yes
- Compatible operating systems
-
- Android
- IOS
- Linux or Unix
- MacOS
- Windows
- Windows Phone
- Designed for use on mobile devices
- Yes
- Differences between the mobile and desktop service
- N/A
- Service interface
- Yes
- User support accessibility
- None or don’t know
- Description of service interface
- The service interface for Prisma Access is primarily accessed and managed through the Strata Cloud Management console, which is a web-based interface. The management console provides a centralized platform for administrators to configure and monitor the Prisma Access service. Through this interface, administrators can manage security policies, view logs and analytics, configure user access, and perform other administrative tasks related to the Prisma Access service.
- Accessibility standards
- None or don’t know
- Description of accessibility
- Prisma Access Strata Cloud Manager is accessed via any web browser.
- Accessibility testing
- N/A
- API
- Yes
- What users can and can't do using the API
- With Prisma Access APIs, users can programmatically interact with and automate various aspects of the Prisma Access service. Users can use APIs to automate the configuration of various settings and policies within the Prisma Access service. This includes managing network and security policies, user access controls, and other configuration parameters. APIs allow users to programmatically onboard and provision users, manage user roles and permissions, and authenticate users accessing the Prisma Access service. Users can leverage APIs to retrieve logs, statistics, and other data related to network traffic, security events, and user activity. This enables custom reporting, analysis, and integration with third-party tools. Prisma Access APIs enable integration with other security solutions and services. Users can integrate Prisma Access with SIEM (Security Information and Event Management) systems, threat intelligence platforms, or custom security workflows to enhance their overall security posture. APIs allow users to monitor the health and performance of the Prisma Access service by retrieving real-time status, metrics, and alerts. This helps in proactive monitoring and incident response. Users can refer to the official Prisma Access API documentation provided by Palo Alto Networks for detailed information on available APIs, their capabilities, and usage guidelines.
- API documentation
- Yes
- API documentation formats
- HTML
- API sandbox or test environment
- No
- Customisation available
- Yes
- Description of customisation
- Yes, users can customize the Prisma Access service to align with their specific requirements. They can define and customize security policies, user access controls, network segmentation, and integrate it with their existing security ecosystem. Additionally, users can customize reporting and analytics to generate insights based on their unique needs. It's important to note that the extent of customization may vary based on the specific features and licensing agreement. Users should refer to the documentation provided by Palo Alto Networks for detailed information on customization options and limitations.
Scaling
- Independence of resources
- Prisma Access utilizes a distributed architecture and scalable infrastructure to ensure that users are not affected by the demand placed by other users on the service. It dynamically allocates resources based on demand to maintain optimal performance and availability. Load balancing techniques are employed to distribute traffic evenly across multiple servers and data centers. Additionally, Prisma Access leverages advanced traffic management and prioritization mechanisms to ensure that critical applications and users receive the necessary resources and are not negatively impacted by other users' activities.
Analytics
- Service usage metrics
- Yes
- Metrics types
-
1. User activity and behavior monitoring.
2. Application usage and performance tracking.
3. Network bandwidth consumption analysis.
4. Threat detection and prevention metrics.
5. VPN tunnel utilization and performance monitoring.
6. User authentication and access control metrics.
7. Firewall rule effectiveness and usage metrics.
8. Web filtering and content inspection statistics.
9. Incident response and security incident metrics.
10. Compliance and regulatory reporting metrics. - Reporting types
-
- API access
- Real-time dashboards
- Regular reports
Resellers
- Supplier type
- Reseller providing extra support
- Organisation whose services are being resold
- Palo Alto
Staff security
- Staff security clearance
- Other security clearance
- Government security clearance
- Up to Developed Vetting (DV)
Asset protection
- Knowledge of data storage and processing locations
- Yes
- Data storage and processing locations
-
- United Kingdom
- European Economic Area (EEA)
- Other locations
- User control over data storage and processing locations
- Yes
- Datacentre security standards
- Supplier-defined controls
- Penetration testing frequency
- At least every 6 months
- Penetration testing approach
- In-house
- Protecting data at rest
-
- Physical access control, complying with CSA CCM v3.0
- Physical access control, complying with SSAE-16 / ISAE 3402
- Physical access control, complying with another standard
- Encryption of all physical media
- Scale, obfuscating techniques, or data storage sharding
- Other
- Other data at rest protection approach
-
Google Security statement
https://cloud.google.com/security/overview/
https://cloud.google.com/security/
AWS Security Statement
https://aws.amazon.com/compliance/data-center/controls/
https://d1.awsstatic.com/whitepapers/aws-security-whitepaper
https://aws.amazon.com/compliance/data-center/data-centers/
All logs are stored in the Cortex data lake, user activity is monitored and stored in the Cortex data lake for the agreed retention period. - Data sanitisation process
- Yes
- Data sanitisation type
-
- Explicit overwriting of storage before reallocation
- Deleted data can’t be directly accessed
- Equipment disposal approach
- Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001
Data importing and exporting
- Data export approach
- Users can export data from Prisma Access by logging into the management console, navigating to the desired data section, selecting the export format (e.g., CSV, PDF, JSON), specifying any parameters, and initiating the export process. Upon completion, users can download the exported file or receive a download link via email. Specific steps and options may vary, so it's advisable to consult the official documentation or Palo Alto Networks support for detailed instructions based on the specific setup.
- Data export formats
-
- CSV
- Other
- Other data export formats
-
- JSON
- Data import formats
-
- CSV
- Other
- Other data import formats
-
- JSON
- XML
Data-in-transit protection
- Data protection between buyer and supplier networks
-
- Private network or public sector network
- TLS (version 1.2 or above)
- IPsec or TLS VPN gateway
- Other
- Other protection between networks
-
Segmentation and micro-segmentation techniques to isolate and compartmentalise different parts of the network preventing lateral movement of threats and limits the impact of any potential security breaches.
Advanced firewall capabilities to monitor/control the traffic within the network. Includes deep packet inspection, intrusion prevention, and application-level controls to detect/prevent unauthorised access/malicious activities.
Incorporates robust encryption protocols to protect data at rest/in transit within our network. Ensures that if unauthorised access occurs, the data remains unintelligible and protected.
Leverages threat intelligence/machine learning algorithms to identify/mitigate potential security risks. Actively monitors network traffic, analyses patterns, identifies anomalies/suspicious behaviour, enabling proactive threat prevention/response. - Data protection within supplier network
-
- TLS (version 1.2 or above)
- IPsec or TLS VPN gateway
- Other
- Other protection within supplier network
- Prisma Access protects data within the network through segmentation, advanced firewall controls, encryption, and threat detection. Segmentation isolates network parts to prevent threats from spreading. Advanced firewalls monitor and control traffic with intrusion prevention and deep packet inspection. Robust encryption secures data at rest and in transit. Threat intelligence and machine learning identify and mitigate risks. Prisma Access actively monitors traffic, detects anomalies, and responds to threats. These measures reduce the risk of data breaches, ensuring data confidentiality and integrity within the network.
Availability and resilience
- Guaranteed availability
- Palo Alto Networks aims to maintain at least 99.99% availability for Prisma Access. If this commitment is not met, customers may be eligible for a service credit. Monthly uptime availability is calculated by subtracting the percentage of downtime, excluding planned or emergency outages. To claim a service credit, customers must open a case within 24 hours of an outage and submit a claim within 5 business days. Palo Alto Networks will promptly review the claim within 15 days after determining the root cause and closing the case.
- Approach to resilience
-
Prisma Access is designed with built-in resiliency to ensure continuous and reliable network security. It employs several key mechanisms to enhance its resilience.
Firstly, Prisma Access utilises a global network of Points of Presence (PoPs) strategically distributed across different regions. This distributed architecture enables load balancing and automatic failover, ensuring uninterrupted service even in the event of a localised failure.
Secondly, Prisma Access incorporates redundant components and multiple layers of fault tolerance. This includes redundant hardware, network connections, and power supplies, minimising the impact of hardware failures and ensuring high availability.
Thirdly, Prisma Access leverages dynamic routing protocols and intelligent traffic management algorithms. These mechanisms allow for efficient rerouting of traffic in the event of network congestion or failure, optimising performance and maintaining connectivity.
Moreover, Prisma Access employs proactive monitoring and alerting systems to promptly detect and respond to any issues or anomalies. This enables quick identification and resolution of potential problems, minimising downtime and maximising uptime.
Overall, the combination of distributed architecture, redundancy, fault tolerance, intelligent routing, and proactive monitoring makes Prisma Access resilient to disruptions, ensuring continuous and reliable network security for organisations. - Outage reporting
-
Prisma Access provides various mechanisms to report service outages and communicate with customers regarding any disruptions or incidents.
Firstly, Palo Alto Networks maintains a dedicated status page or portal where customers can access real-time information about the status of Prisma Access services. This status page provides updates on any ongoing incidents, maintenance activities, or service outages.
Additionally, Prisma Access offers proactive monitoring and alerting capabilities. Palo Alto Networks monitors the service infrastructure and network health to promptly detect any issues or potential outages. In the event of a service outage, customers may receive automated notifications or alerts via email, SMS, or through the Prisma Access management console.
Furthermore, customers can also reach out to Palo Alto Networks' support team directly for assistance and information regarding service outages. The support team is available to provide timely updates, answer queries, and address any concerns related to service disruptions.
By utilising these reporting mechanisms, Prisma Access ensures transparent communication and keeps customers informed about any service outages or incidents, enabling them to take necessary actions and plan accordingly.
Identity and authentication
- User authentication needed
- Yes
- User authentication
-
- 2-factor authentication
- Public key authentication (including by TLS client certificate)
- Identity federation with existing provider (for example Google Apps)
- Limited access network (for example PSN)
- Dedicated link (for example VPN)
- Username or password
- Access restrictions in management interfaces and support channels
- User authentication in Prisma Access involves users providing their username and password, followed by multi-factor authentication (MFA) using methods like one-time passwords (OTPs) or biometric identifiers. Device verification may also be performed to ensure compliance with security standards. Access control is then applied based on predefined policies, granting or denying access to resources and applications.
- Access restriction testing frequency
- At least every 6 months
- Management access authentication
-
- 2-factor authentication
- Public key authentication (including by TLS client certificate)
- Identity federation with existing provider (for example Google Apps)
- Limited access network (for example PSN)
- Dedicated link (for example VPN)
- Username or password
Audit information for users
- Access to user activity audit information
- Users have access to real-time audit information
- How long user audit data is stored for
- User-defined
- Access to supplier activity audit information
- Users contact the support team to get audit information
- How long supplier audit data is stored for
- User-defined
- How long system logs are stored for
- User-defined
Standards and certifications
- ISO/IEC 27001 certification
- Yes
- Who accredited the ISO/IEC 27001
- BSI
- ISO/IEC 27001 accreditation date
- 28/04/2022
- What the ISO/IEC 27001 doesn’t cover
- Our ISO/IEC 27001 certification relates to the information security management system and not the products or services of the certified organisation.
- ISO 28000:2007 certification
- No
- CSA STAR certification
- No
- PCI certification
- Yes
- Who accredited the PCI DSS certification
- Gemserv Ltd
- PCI DSS accreditation date
- 22/09/2021
- What the PCI DSS doesn’t cover
- As per section 2a of the PCI-DSS certificate, there are no areas that were marked as ‘Not Included’. We therefore confirm we are compliant across all relevant requirements for our services as a Hosting Provider, Managed Services and Payment Processing.
- Cyber essentials
- Yes
- Cyber essentials plus
- Yes
- Other security certifications
- No
Security governance
- Named board-level person responsible for service security
- Yes
- Security governance certified
- Yes
- Security governance standards
- ISO/IEC 27001
- Information security policies and processes
- Palo Alto Networks has a formal Enterprise Risk Management program, which includes the performance of an annual risk assessment, with periodic updates, as applicable, to identify and assess key risks and their mitigation approaches. The scope of the program encompasses information security risks and product risks. Our security program consists of a risk-based approach that includes administrative, technical and physical safeguards reasonably designed to protect the confidentiality, integrity and availability of customer data. Palo Alto Network's information security program is aligned to ISO 27001/2, and includes key controls from HIPAA, PCI and SOC2.
Operational security
- Configuration and change management standard
- Supplier-defined controls
- Configuration and change management approach
-
Both Palo Alto Networks and the end-user organisation are in full control of their relevant and respective change control processes.
Additional details are available upon request. - Vulnerability management type
- Supplier-defined controls
- Vulnerability management approach
-
Prisma Access follows a proactive vulnerability management process to identify, assess, prioritize, and mitigate vulnerabilities:
1. Identification: Regular scanning and assessment are conducted to identify vulnerabilities.
2. Assessment: Vulnerabilities are evaluated for severity and potential impact.
3. Prioritization: Vulnerabilities are assigned priority levels based on severity and impact.
4. Mitigation Planning: A plan is developed to address vulnerabilities.
5. Remediation: The plan is executed, coordinating with relevant teams.
6. Monitoring and Reporting: Ongoing monitoring and reporting track progress in vulnerability remediation efforts. - Protective monitoring type
- Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
- Protective monitoring approach
-
Prisma Access employs continuous monitoring/analysis of system activities/network traffic/user-behaviour to detect/respond to potential security incidents.
Logs/events are collected for analysis from sources such as network devices/endpoints.
Logs are analysed/correlated to identify patterns/anomalies/potential security-incidents.
Advanced security analytics and machine learning algorithms detect known/unknown threats using threat intelligence feeds/behavioural analytics.
Automated actions may be taken to block malicious IPs/isolate compromised endpoints. Security personnel are alerted for further investigation/response.
Security personnel investigate/analyse incidents to understand scope/impact/root cause. Actions are taken to contain/mitigate/remediate the incident.
Reports provide insights into Prisma Access's security posture. Lessons learned are used to enhance security controls/update policies/improve overall security. - Incident management type
- Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
- Incident management approach
- This information is available upon request
Secure development
- Approach to secure software development best practice
- Supplier-defined process
Public sector networks
- Connection to public sector networks
- No
Social Value
- Social Value
-
Social Value
- Fighting climate change
- Covid-19 recovery
- Tackling economic inequality
- Equal opportunity
- Wellbeing
Fighting climate change
Computacenter ensures that our business practices deliver effective stewardship of the environment in line with the Social Value Model. Computacenter's science-based emissions reductions targets are approved with the SBTi. Our Net Zero Journey Group Emissions is now just 16% of 2015 levels as outlined in our carbon reduction plan to achieve ‘Net Zero’ carbon emissions by 2040.
Business travel is necessary, both for our customer requirements and for our staff. We have materially reduced business travel, ensuring all business trips are necessary, helping reduce carbon emissions. We are investing in technology to allow greater use of existing communication platforms as part of our ‘hybrid working’ strategy. One of the key benefits we believe this will help us realise is reducing emissions from business travel by 35 per cent by 2025 (compared to 2019). For G-Cloud services this means that we will drive the use of virtual, technology-enabled meetings as much as possible for all internal and external sessions, including those with our wider supply chain.
Further to this we can provide customer advisory services which include guidance and recommendations on how to improve their sustainability performance to help inform customer decision making whilst achieving the desired commercial and technical outcomes through the services being provided.
Computacenter has introduced incentives to encourage the replacement of the existing Fleet with Ultra Low Emission Vehicles. We have 44 electric charging points across 2 of our locations to encourage the adoption of electric and hybrid vehicles, either through our company car scheme or privately. For this framework specifically, this means that our consultants, project managers and engineering resource will have access to a ULEV vehicle via our company car scheme and the ability to charge a vehicle at Computacenter office locations.Covid-19 recovery
Throughout the pandemic we have closely followed and implemented government guidance relating to the workplace and COVID-19. We created a COVID-19 risk assessment to enable us to understand the improvements that need to be made to our workplace conditions in line with the Government COVID-19 secure workplace guidelines and the business advice that is now current. It looks at the risks of COVID-19 in the workplace, such as hygiene, & cleaning and then states what we must put in place to mitigate these risks.
As we enter the recovery phase of the pandemic, we have introduced hybrid working for our employees. This will allow most employees including those delivering G-Cloud services increased flexibility in how and where they work ensuring that we still deliver the best service to our customers whilst looking after our people.
Our COVID-19 steering committee is there to identify activities that will improve workplace conditions then plan, build and regularly monitor various programmes focused on supporting the COVID-19 recovery effort. At these meetings, chaired by our Chief People Officer (‘CPO’) Sarah Long, our CIO John Gibbs and Services operations, the steering committee discuss changes that need to be implemented, identify areas of improvement, and review our roadmap of new activities.
Throughout the life of the contract, we will use our existing activities (as well as those that are in development in due course) to continue to improve workplace conditions in support of the COVID-19 recovery effort.
Questions relating to travel were included in the COVID-19 surveys that were issued through the pandemic. The assessment highlighted concerns people had about public transport. To help all employees; managers were coached and given guidance about being flexible with start/finish times. We continue to adapt our approach based on feedback received through the steering committee and employee surveys.Tackling economic inequality
As a diverse and inclusive organisation with a strong focus on equality and driving in-work progression, our approach to recruitment and employment is aligned to recognised industry best practices such as the 5 principles of quality work as set out in the Good Work Plan.
Our Employee Impact Groups for disadvantaged or minority groups provide representation, support, and community engagement, feeding into our People Panel ensuring all voices are heard, underpinning our wider ambition of building a sustainable business for the long term.
We put specific measures in place to provide opportunities to under-represented groups or those who face barriers to employment, including comprehensive outreach programmes for schools and universities, as well as partnerships with non-profit organisations within our communities. We continue focus on reaching harder to reach groups and people who are underrepresented in our sector by working with charities and schools in the local community to offer career talks and work experience opportunities. Our school outreach programme has over 130 volunteers dedicating over 2,600 hours running activities for employability and life skills in schools, colleges, and universities.
Computacenter is one of the 9 founding members of ‘Technology Community for Racial Equality’ (‘TC4RE’), a group set up to drive racial equality throughout the technology industry, with which we are delivering a half-day virtual event on ‘Enabling Ethnic Diversity’ featuring a series of expert keynotes, live panel discussions and interactive workshops with representation from across the UK technology community.
Furthermore, Computacenter are a silver level partner in the Armed Forces Covenant and has introduced a programme that provides the opportunity to attain a degree and ServiceNow certification whilst receiving full salary for armed forces leavers. This programme is the first of many programmes we intend on running to help ex-forces personal transition back into the workplace and the IT industry.Equal opportunity
Computacenter is committed to providing equal opportunities to all through fair recruitment practices and employment conditions across our organisation.
We are a Disability Confident ‘Committed’ employer, committed to making lasting changes to our business creating a diverse talent pool. We work with partners through our community outreach, who are specialists in disability. An example is our work with Knightsfield School in Welwyn Garden City, a specialist school for deaf children. We run at least 3 ‘get work ready’ events with them, as well as offer up to 4 work experience opportunities and onsite visits every year.
For this contract, we will use existing initiatives (as well as others that are in development) to provide career opportunities for individuals from under-represented groups to address requirements for specific skills or roles with a focus on increasing skillsets through the life of the contract. This will include apprenticeships aligned to security and cloud/infrastructure departments, as well as industrial placements and graduate schemes for our ServiceNow Centre of Excellence, with specific focus on delivering cloud-based services to our customers.
Our workforce for services delivered under this framework will have access to existing initiatives aimed at supporting in-work progression and development for those from disadvantaged/minority groups. For example, our gender diversity initiatives include our Growing Together programme, which over 150 women have been through so far, of which over one-third have been promoted or taken a new role within a year following the mentoring and coaching provided.
We are also committed to driving racial equality across our business and the wider technology industry. We are a founding member of ‘Technology Community for Racial Equality’ which recently delivered a half-day virtual event on ‘Enabling Ethnic Diversity’ featuring a series of expert keynotes, live panel discussions and interactive workshops with representation from across the UK technology community.Wellbeing
We understand how important employee Wellbeing is for a sustainable business model, therefore we are committed to creating a sustainable supply chain. Ensuring the wellbeing of our employees are looked after will positively affect productivity, recruitment, and retention rates.
In November 2021, a designated UK wellbeing manager was appointed and has since launched our wellbeing strategy, which aligns with the Social Value Model and the 6 standards of the Mental Health at Work Commitment, signed in July 2021. We are actively implementing the enhanced mental health standards as recommended through the ‘Thriving at Work’ review, and NICE mental health at work guidelines, as part of our Wellbeing strategy. The strategy encompasses four pillars of wellbeing, mental, physical, financial, and social. We are a Menopause friendly organisation and have created a support network for those in need.
We have 109 Mental Health First Aid (MHFA) accredited staff in the UK, trained by Mind, who act as Wellbeing Champions providing mental health first aid support and promoting our wellbeing services which those delivering G-Cloud service provisions will have access to. These champions are from every business area and from different seniority. We hold events throughout the year organised by our UK wellbeing manager and Champions, which have included celebrating World Mental Health days, Menopause awareness, financial wellbeing webinars and sponsored events to raise money for our mental health charity partners.
2021 also saw the launch of our new groupwide app-based programme ‘Be Well’ which gives our people access to over 3,000 fitness, nutrition, health and wellbeing courses through Humanoo. Through this app we have launched an extremely popular groupwide step challenge and has encouraged our people to be more active, with over 35% of our workforce now using the app and covering over 1.8bn steps so far.
Pricing
- Price
- £5.92 a unit
- Discount for educational organisations
- No
- Free trial available
- No