RUSS CONSULTING LIMITED

Russ Consulting Ltd

Russ Consulting’s Smartsheet project management software offers a range of services to public and private sector organisations including strategy formulation, programme management, PMO development, project and programme turnaround, business case development and financial modelling, application of LEAN Methods, business intelligence and data analysis, procurement, and system development and deployment.

Features

• Remote access
• Fully tailorable
• Unlimited collaborators without the need for a full licence
• Real-time reporting via dashboards and dynamic reports
• Customisable automated workflows
• Integration with Office365 including MS Teams
• Multiple views, for example Gantt Grid or Card Calendar
• Use of a mobile app
• Use of forms for data entry
• Fully auditable; every change made is audited

Benefits

• Solutions designed to inform stakeholders what they need to know
• PMO teams can respond rapidly in mins/hours without change requests
• Solution is owned by the customer
• Reporting overhead is significantly reduced
• Alerting will tell you what is going well
• Sharing sheets, Dashboards and Data can be achieved in seconds
• Improved efficiency
• Rapid implementation and support allowing maximised benefit delivery.
• Open API and connectors allowing integration with third party applications.
• Scalable solution that grows to meet current and emerging needs.

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at chris.russ@russconsulting.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

744618338740839

Contact

Chris Russ
07718658921
chris.russ@russconsulting.co.uk

About your service

• Service categories:

  Applications

  Enterprise resource management

  • Project and portfolio management
• Multi cloud support: Yes

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: Russ Consulting do not envisage any constraints that would impact upon our service.
• System requirements: Web browser access, e.g., Edge, Chrome, Safari and Firefox.

User support

• Email or online ticketing support: Yes
• Support response times: Russ Consulting pride ourselves on delivering a 1st rate customer experience. Most queries are a straightforward “how do I” and are usually responded to within one working day.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), 7 days a week
• Web chat support: No
• Onsite support: Yes
• Support levels: We offer tailored support packages based on what the client needs. We will not oversell to our clients. Technical support is provided to clients by our partner affiliate (Smartsheet), with user support provided by Russ Consulting such as skill transfer and support in understanding the configuration of their final product.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Following the delivery of licenses, we hold project kick off meetings to deliver the PMO solution into their environment and set up premium applications such as the Control Centre. We then follow a structured approach to deployment looking at project intake and approvals (manual/automated), programme structures, automations required, and reporting needs to ensure we are configuring the solution to extract the data their need for Portfolio and Programme Level reporting whether internally or for their own clients.; ; We work jointly with the customer to build out the solution which helps with skill transfer. Documentation is not provided by Russ Consulting as each solution is unique to the customer. Some customers will produce their own documentation, and some record our MS Teams training sessions and make use of the library of documentation and videos that Smartsheet also provides. We offer end user training including PMO support and user level training, navigating around projects etc.
• Service documentation: No
• End-of-contract data extraction: Users can export data in a variety of forms including PDF and Excel, all made easy via simple menu structure.
• End-of-contract process: Users buy licences for Smartsheet annually. There are different plans, but typically Russ Consulting sell a per seat Enterprise Plan offering enhanced security, unlimited sheets and access to enhanced training. Additional premium products are also licensed annually. Upon contract expiry, we discuss with the client what they would like to achieve prior to their licence lapsing. This enables us to keep packages bespoke and prevent clients being charged for services they would not use, providing a flexible approach to contract renewal. Should the client decide they no longer require the service, we will assist them with offboarding and data extraction.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: Yes
• Compatible operating systems:
  • Android
  • IOS
  • MacOS
  • Windows
  • Other
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Our app offers many features to allow users to view their dashboard and edit sheets on the go, and is specifically designed for that purpose. Solution development is clearly recommended to be conducted using a desktop or laptop computer.
• Service interface: Yes
• User support accessibility: EN 301 549
• Description of service interface: Smartsheet incorporates an administration interface where all user access and control is managed, as well as the Control Centre where multiple workspaces can be managed from a central source. In addition to this, we use a standard API that integrates with third party systems such as ServiceNow so that users can report problems and issues with Smartsheet directly into customer service desks.
• Accessibility standards: EN 301 549
• Accessibility testing: N/A
• API: Yes
• What users can and can't do using the API: Smartsheet API 2.0 allows you to programmatically access and manage your organisation's Smartsheet data and account information. The API allows you to read and update sheets, manage folders and workspaces, and administer user accounts and organisation accounts. The Developer Reference section allows users to view code examples in the programming language of their choice by clicking a corresponding tab. Each tab corresponds to a Software Development Kit (SDK) that Smartsheet provides to make working in that programming language easier.
• API documentation: Yes
• API documentation formats: HTML
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: SMARTSHEET is a work management platform that allows users to build work management solutions and customise these. Russ Consulting has already created a PMO solution allowing our customers to hit the ground running. We work with our customers to tailor the solution to meet their specific requirements and build out acceptable solutions for their organisation and users.

Scaling

• Independence of resources: Smartsheet manages system level resources and has millions of users globally. Performance is consistently high. Performance testing takes place on a regular basis, together with a regimented performance monitoring process.

Analytics

• Service usage metrics: Yes
• Metrics types: Smartsheet offers an Administration centre that provides a wealth of data on user activity/inactivity such as which sheets they have access to and have accessed. This is available to anyone with system admin access on the account. At sheet level there is a full activity and individual cell report showing who changed what and when, showing both the historic data and new data.
• Reporting types: Real-time dashboards
• Resource tagging: Yes
• FOCUS resource tagging: Yes

Resellers

• Supplier type: Reseller providing extra support
• Organisation whose services are being resold: Smartsheet

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • European Economic Area (EEA)
  • Other locations
• User control over data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: ‘IT Health Check’ performed by a CHECK service provider
• Protecting data at rest: Physical access control, complying with CSA CCM v4.0
• Data sanitisation process: Yes
• Equipment disposal approach: A third-party destruction service
• Data sanitisation type: Explicit overwriting of storage before reallocation / Secure Erase

Data importing and exporting

• Data export approach: Data is exported via PDF, Excel, and Google Sheets.
• Data export formats:
  • CSV
  • Other
• Other data export formats: PDF
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • MS Projects
  • Google Sheets
  • Trello

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: Smartsheet currently targets a 99.9% uptime for our core platform. More information on SLAs can be found here: https://www.smartsheet.com/legal/sla
• Approach to resilience: Our Data Centre resilience information is available on request.
• Outage reporting: Any service reports are posted on the Smartsheet website and specific direct messages via the application.

Identity and authentication

• User authentication needed: Yes
• User authentication: Username or password
• Access restrictions in management interfaces and support channels: Access is restricted to an administrator via the admin interface, with admin access is assigned by the user.
• Access restriction testing frequency: At least every 6 months
• Management access authentication: Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Smartsheet maintains SOC 2 Type ll and ISO 27001 certifications.; Our current leadership team is outlined on our website at https://www.smartsheet.com/about/management. You can also learn about Smartsheet's Board of Directors by going to https://www.smartsheet.com/about/board-of-directors.; Anyone who violates the standards in Smartsheet’s code of conduct will be subject to disciplinary action, which, in appropriate circumstances, may include termination of employment for cause, legal action, or referral for criminal prosecution.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Both infrastructure-level and code changes (SDLC) practices are reviewed during our annual SOC2 Type II assessment.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: We continually test our solutions for vulnerabilities and apply appropriate patches at will providing they do not affect users’ ability to access or use Smartsheet. Other fixes will be introduced on a scheduled basis, usually at times where they will not affect system performance.; ; Smartsheet's security team maintains subscriptions to relevant industry bulletins and alerts. This activity is validated during our annual SOC2 Type II assessment with our third-party assessor.
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: System monitoring is reviewed during our annual SOC2 Type II assessment.; Incident Response details are communicated in Security Schedule 1 of our User Agreement.
• Incident management type: Supplier-defined controls
• Incident management approach: Service and client support is covered in our Master Licence Agreement. We offer 3 levels of support via the web interface and data on incidents reported can be provided as requested.
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Situation dependent, users can get a free Smartsheet licence for 30 days. Access to premium applications cannot be given as these have to be configured
• Link to free trial: https://russconsulting.co.uk/#8f11ce66-8055-48e2-8734-7fc1608ec10f

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Cyber essentials plus: No
• Cyber Essentials Alternative: None of the criteria
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at chris.russ@russconsulting.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.