Titus Learning

Moodle Learning Management System (LMS)

Moodle LMS is designed to allow educators and training managers from all sectors to deliver learning online. Moodle LMS enables staff and students to take courses, sit assignments and see progress. Using Moodle you can create blended and self-directed courses and a customised eLearning platform tailored to your organisation's branding.

Features

• Fully customisable site design and layout with your branding
• Collaborative tools and activities including forums, wikis, glossaries and more
• Embed H5P content in Moodle enabling interactive presentations and more
• Gamification features through additional plugins
• All-in-one Calendar to track course dates, assignments, deadlines, group meetings
• Bespoke training programme blending face to face and remote sessions
• Customisable reporting including management and user dashboards
• Utilise Moodle's Plugin Directory to extend functionality further
• 24/7x365 Support for Critical Incidents
• Compatible with Storyline, Rise, Captivate, SCORM, xAPI/TinCan, H5P, and more

Benefits

• Manage your learners and their progress through a central platform
• ISO27001, IS09001 and Cyber Essentials Plus Accredited
• Offline content available through the Premium Moodle Mobile App
• Increase learner engagement through a wide range of activities
• Sleek and modern theme design enhancing your organisation's brand
• Open-source and fully customisable platform through integrations and plugins
• Foster and promote remote collaboration through group activities
• Responsive and accessible design allows for easy navigation
• Generate revenue through Moodle via eCommerce integrations
• Fully portable between Mobile, Tablet, and Desktop

£5,500 a unit a year

• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@tituslearning.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

780760154333504

Contact

Seb Francis
01133 200 346
sales@tituslearning.com

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: Moodle version upgrades will be discussed with the client in advance so this can be carefully planned in and a maintenance schedule is put in place. We aim to keep the downtime to approximately 1 hour and try to schedule a feasible time for both client and Titus. ; ; Any patches that need to be deployed due to vulnerability checks in place will result in zero downtime. ; ; Our solution will support Google Chrome, Mozilla Firefox, Apple Safari and Microsoft Edge on desktop, as well as Mobile Safari and Google Chrome on mobile devices.
• System requirements:
  • Internet Access
  • Current Web/Mobile Browser

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Critical - 2 hours; Non critical - 24 hours
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.1 AA or EN 301 549
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), 7 days a week
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: All clients have access to the helpdesk via phone, email or web interface. Support is included in the base contract price. The Titus service level agreement is included in the attached Service Definition Document.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: The solution is designed to offer an intuitive interface with minimal onboarding time, allow self service for basic user tasks such as password resets, and provide contextual links to help topics including FAQs or forums.; ; The training programme is bespoke, usually consisting of a blend of face-to-face sessions and online training delivered via Moodle, available to all users but tailored to their specific role. The online programme is multifaceted, including activities, training resources, webinars and instructional video.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: At the end of the contract, Titus will extract and securely transfer to the customer a full backup of the Moodle database and any associated user data in a format which allows them to transfer the platform to a new supplier or deploy and manage it in house.
• End-of-contract process: Full handover of data as described above is included, as well as decommissioning hosting infrastructure. Should any further services be required after the end of the contract they would be chargeable as per the SFIA Rate Card.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The Moodle interfaces use HTML5 and are designed and tested to ensure that they are fully responsive and automatically resize/reflow for tablet or mobile devices. For the best mobile user experience we recommend the use of the free Moodle Mobile app which is available for iOS and Android devices via their respective application stores.
• Service interface: Yes
• User support accessibility: WCAG 2.1 AA or EN 301 549
• Description of service interface: The Moodle platform is a complex system with many parts. Its code is always evolving. Modules can be enabled and disabled. The interface can be heavily customised using themes and thousands of settings. Actual content can be produced by any teacher or any student.
• Accessibility standards: WCAG 2.1 AA or EN 301 549
• Accessibility testing: Part of the process when building new code in Moodle is to follow established best practices and part of the process for accepting new code into core is to test pages carefully and gather feedback from experts.
• API: Yes
• What users can and can't do using the API: Moodle has a number of core APIs that provide tools for Moodle scripts. They are essential when writing Moodle plugins.; ; Examples include APIs for backups, calendars, messaging, privacy, search, web services and RSS, among many others.; ; A full list can be found at: https://docs.moodle.org/dev/Core_APIs with links to documentation for each individual API.
• API documentation: Yes
• API documentation formats:
  • Open API (also known as Swagger)
  • HTML
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Moodle can be configured to allow users the capability to perform varying levels of customisation (or not). Permissions set by role (e.g. administrator, course leader, learner, etc) define whether an individual may customise elements of the Moodle experience. Customisation can include the layout of personal dashboards, the reporting available, the visual theme of the interface, etc.

Scaling

• Independence of resources: Titus uses AWS Elastic File Service, which automatically scales horizontally by adding unlimited storage in 10GB increments as required and vertically by scaling or bursting the network throughput as the amount of data to be transferred increases. Amazon EC2 uses Xen virtualisation for all server instances.

Analytics

• Service usage metrics: Yes
• Metrics types: Within Moodle, reporting is available via a dashboard, as well as by exporting customisable reports. The information reported can be tailored to the role of the user. Customer administrators have full access to all Moodle logs, including access and usage data. Customers also have access to dashboard reports on service usage from AWS (hosting/infrastructure). Specific metrics to be made available are agreed with the individual customer during project initiation.
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: Moodle

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
• User control over data storage and processing locations: Yes
• Datacentre security standards: Supplier-defined controls
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: In-house
• Protecting data at rest: Physical access control, complying with CSA CCM v3.0
• Data sanitisation process: Yes
• Data sanitisation type:
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: At a user level, options for data export are provided within the platform, allowing data to be selected using a variety of criteria (date ranges, user groups, roles, etc) and in a variety of formats.; ; At a site level, exports of the entire Moodle database are provided by Titus via secure file transfer.
• Data export formats:
  • CSV
  • ODF
  • Other
• Other data export formats:
  • JSON
  • HTML
  • PDF
• Data import formats:
  • CSV
  • ODF
  • Other
• Other data import formats:
  • JSON
  • HTML

Data-in-transit protection

• Data protection between buyer and supplier networks: Legacy SSL and TLS (under version 1.2)
• Data protection within supplier network: Legacy SSL and TLS (under version 1.2)

Availability and resilience

• Guaranteed availability: Guaranteed availability: 99.95% annually with 99.99% also available at additional cost. ; ; We do not provide service credits where availability is less than this, but clients are entitled to terminate due to breach of contract in that event.
• Approach to resilience: The AWS architecture is designed to be disaster resistant by using a Multi Availability Zone (AZ) setup, so that in the event of a disaster in one AZ, the system would still function.; ; Database read replicas will be implemented to provide backup copies of the db in the event of the master failing, and AWS Snapshot Manager will be used to take snapshots of the web server and database automatically and to retain a certain number of agreed snapshots e.g. last 7 days. The backups facilitate disaster recovery in the unlikely event that all servers are compromised by recovering from server and database snapshots.
• Outage reporting: AWS Cloudwatch logging is implemented to provide a monitoring dashboard and raise alerts based on specified metrics and thresholds allowing action to be taken before services are affected.; ; Different notification methods can be implemented including API, email or SMS alerts as well as dashboard displays, which ensure immediate attention by the Titus helpdesk/support team by which appropriate remedial action will be taken.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: Employees are given access to client Moodle sites and client server infrastructure on an as-needed basis by their line manager. Access is granted using a password management tool.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • 2-factor authentication
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: BSI
• ISO/IEC 27001 accreditation date: 13/12/2020
• What the ISO/IEC 27001 doesn’t cover: N/A
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Titus has a named Director who acts as the chief security officer, and oversees our working relationships with Moodle, Amazon Web Services, our suppliers and partners as well as our internal processes. We take information security seriously, and incorporate it into company policies and procedures which are regularly audited in line with ISO 27001 standards.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Hardware and software versions are tracked in our server information database and regularly checked to ensure that supported versions are in use. Information is collected on the system to be changed, such as security components and network architecture, to gain a full picture of the current system. Threats that may result from the change are assessed for likelihood and impact, giving a visualisation of the severity of the threat. We create a change plan and communicate this to involved parties along with required actions such as server reboots. Post change, we analyse the process to identify areas for future improvement.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Potential threats are assessed on a number of criteria - the age of the vulnerability, importance of the target system, skills required to exploit the vulnerability, and potential damage caused by exploitation.; ; Patches are prioritised by severity - a patch deemed critical will be deployed without delay. Otherwise, patches are deployed to our servers on a monthly basis, with end-users informed in cases where downtime is required.; ; Our Network Vulnerability Tests come from the Greenbone Security Feed, and are used in vulnerability scanning to determine server vulnerability. We also examine software release notes and security vulnerability reports for potential vulnerabilities.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Potential compromises are identified through monitoring services (EG: Cloudwatch, New Relic, SIEM software) and investigated by our tech team.; ; Potential compromises are assessed for impact and likelihood and prioritised accordingly. They are then assigned to our technical operations team for investigation and remediation.; ; We aim to respond to such incidents within an hour and resolve the incident within 24 hours.
• Incident management type: Supplier-defined controls
• Incident management approach: Common events (e.g. loss of connection to server, disk space shortage) have pre-defined processes the tech team follows to resolve them.; ; There are a number of channels for users to report incidents, including email, web portal and telephone.; ; Incidents are reported on in daily team briefings, retrospectively to end-users in root-cause analysis reports, and users are proactively warned of future downtime or security issues through email notifications.; ; Depending on the severity of the incident, it will be resolved within a set period of time, with automated monitoring systems alerting staff to incidents that are approaching their resolution target.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: No

Social Value

• Fighting climate change:

  Fighting climate change

  Titus is committed to reducing the environmental impact including promoting recycling, reducing business travel using remote meeting's/training and measuring and aiming to reduce overall energy expenditure as a business. We select suppliers in part based on their environmental credentials. As a technology business our paper use is low, however we are moving towards a paper-free operation. We provide environment impact training for staff and champion cycle to work schemes, provide reusable water bottles and encourage remote working where possible. Titus are currently formulating a Carbon Reduction Plan to formalise our approach to reducing and mitigating carbon output. ; ; Our solutions are hosted on AWS ensuring low environmental impact. AWS is 2.5 times more energy efficient than the median of surveyed enterprises with a rating above 20. This difference is the result of much higher utilisation of servers and an infrastructure that is heavily weighted toward more recent server technology generations that are more energy efficient. When factoring in data centre facility efficiency, AWS is over 3.6 times more energy efficient (in the efficiency-rating range of 34-37) in its data centre operations than the median of surveyed enterprises. This additional advantage is due to its more efficient data centres with much stronger PUEs than typical on-premises enterprise data centres, a result of free cooling methods and a leaner electrical infrastructure that introduces lower losses to power distribution. When we factor in grid carbon intensity and renewable energy to calculate relative carbon efficiency, AWS’s advantage extends even more, to over 8.5. This means that the carbon footprint for the same server performance on the AWS cloud is 88% lower than the median of surveyed enterprises.
• Tackling economic inequality:

  Tackling economic inequality

  To tackle economic inequality, we run an IT Hardware donation programme for local organisations, promoting and supporting volunteering opportunities for staff. We support the UK Apprenticeship scheme, two of our permanent staff joined as apprentices. L&D is our passion, and for client communities, we can provide public access to our online training sites, resources and materials.; ; We provide an annual training budget for each member of Titus to obtain relevant skills and qualifications pertaining to their role within the organisation to promote learning and development. Alongside this we also provide a separate annual budget for L&D outside of the workplace to fund development which is not related to the workplace but benefits our team and their individual development.
• Equal opportunity:

  Equal opportunity

  Titus understands our commitments under the Equality Act 2010. Our approach to Equality and Diversity is governed by our Head of People and implemented through our Equality and Diversity Policy. We ensure that all people with protected characteristics are free from discrimination and vice in the workplace. On induction all new starters are required to read and understand our equality and diversity policy. Titus’ HR Department ensures that staff undertake yearly refresher training on Equality and Diversity to ensure it is continually embedded within our culture. We undertake regular campaigns to increase awareness of issues encountered by people of a protected characteristic including our Black Lives Matter campaign. As part of our commitment, we regularly review employment practices and procedures when necessary to ensure fairness, and also update them and the policy to take account of changes in the law. Our Head of People monitors the make-up of the workforce regarding information such as age, sex, ethnic background, sexual orientation, religion or belief, and disability in encouraging equality, diversity and inclusion, and in meeting the aims and commitments set out in our equality, diversity and inclusion policy. Where appropriate we will implement action plans to ensure the aims of our equality, diversity and inclusion policy are met in full.
• Wellbeing:

  Wellbeing

  Titus Learning aim to create a working environment free of bullying, harassment, victimisation and unlawful discrimination, promoting dignity and respect for all, and where individual differences and the contributions of all staff are recognised and valued. Our commitment to equality, diversity and inclusion underpins this. ; ; To promote and ensure wellbeing of our team within the workplace, we take measures to ensure both the physical and mental health of our team. To promote mental health, all of our managers are trained mental health first aiders able to assist and point staff in the right direction to obtain necessary help. During mental health awareness week, we organise a series of speakers across the week to talk about their experiences of mental health and signposting where to get help for specific issues. One of company benefits we provide to our team is access to therapists and talking services through Simply Health. ; ; To promote physical health in the workplace we operate a cycle to work scheme to promote the advantages of being active. This is alongside activities such as our three peaks challenge and more. Furthermore, staff have access to a range of health services through the Simply Health including private healthcare for a range of issues and conditions,

Pricing

• Price: £5,500 a unit a year
• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: Demonstration Portal available to all Public Sector Clients which covers the basic functionality of Moodle LMS.

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@tituslearning.com. Tell them what format you need. It will help if you say what assistive technology you use.