eCom Scotland

eNetAssess

eNetAssess is a digital assessment system for creating and managing bespoke tests and exams in a secure environment. It provides practice (formative) or exam (summative) testing. The system has test creation, question authoring, centre management, scheduling, authentication, invigilation and verification, through to final reporting, analysis and certification.

Features

• Mobile enabled delivery for mock and infield (observational) assessments
• eProctoring capabilities compliant to industry standards
• Secure kiosk mode with internet monitoring and auto reconnection
• Automatic marking, eMarking and eVerification
• Assignment options for evidence gathering portfolio
• Extensive question-type range: MCQ, essay, case study, rubric, bespoke
• Booking Management System(BMS) module including ecommerce
• Comprehensive report suite for learner, examiner and test centre
• Customisation with organisation branding and styling
• Certification via link to printing service or Credentialling to OpenBadges

Benefits

• Reduced management time and costs compared to paper assessment
• Better accessibility and real-time feedback for assessment stakeholders
• Reduced test creation, design and item development costs
• Eliminate paper print and postage/ courier costs
• Reduce quality assurance and site audit fees
• Reduce marking times compared to paper assessment
• Provide immediate feedback with insight to learners
• Responsive design allows learners to bring their own device (BYOD)
• Create tests on-screen, output to paper
• Deliver tests on-screen off-line for places with weak internet connectivity

£2.50 to £6.50 a person an hour

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at wendy.edie@ecomlearningsolutions.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

795686546635864

Contact

Wendy Edie
01383 630032
wendy.edie@ecomlearningsolutions.com

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: SSL, Licensing and browser limitations.
• System requirements:
  • A stable internet connection of 2Mbps minimum
  • A browser that supports HTML5

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: ECom provides informed and timely responses to most enquiries within 24 hrs. Weekends and other circumstances can occasionally extend response times to up to 72 hrs. eCom provides access to experts aligned with the needs of your stakeholder groups, face-to-face direct support from our teams when preferred or needed, engagement with real people who know (and are involved in) your projects, and service levels aligned with your needs and expectations.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.1 AA or EN 301 549
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Onsite support
• Support levels: Support for Admins with training for trainers, also configuration and setup requirements.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Admin users receive mandatory training, access to webinars, helpdesk support. Support and guidance is offered to system administrators for system implementation – face to face training, webinars and video content. Welcome emails to users contain customisable text and instructions. Manuals are provided for each user group setup.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: A request to eCom helpdesk, will estimate the export requirement dependent on the level of customisation. All data will be provided in CSV and /or XML format.
• End-of-contract process: A client data request is initiated to provide data extraction. All data is backed up and an archive is created. The accounts are closed and service is terminated with all data removed from the private cloud provider.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Content here
• Service interface: No
• User support accessibility: WCAG 2.1 AA or EN 301 549
• API: Yes
• What users can and can't do using the API: Integration of users data, Single Sign On.
• API documentation: Yes
• API documentation formats: PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: ECom operates a change request process for customisation. Areas for user customisation can include branding their logo, colour scheme log-in page, welcome text and registration email text. Only superusers/ adminstrators have user rights to enable customisation.

Scaling

• Independence of resources: Private cloud provision is load balanced and application optimised.

Analytics

• Service usage metrics: Yes
• Metrics types: Metrics types; There is usage information provided within the application.; Reporting types: Real-time dashboards, Reports on request.
• Reporting types:
  • Real-time dashboards
  • Reports on request

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest: Physical access control, complying with another standard
• Data sanitisation process: Yes
• Data sanitisation type: Explicit overwriting of storage before reallocation
• Equipment disposal approach: In-house destruction process

Data importing and exporting

• Data export approach: Export tools are provided for user data and reports, a full database export can be provided on request.
• Data export formats:
  • CSV
  • Other
• Other data export formats: XML
• Data import formats:
  • CSV
  • Other
• Other data import formats: XML

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: 99.99%
• Approach to resilience: Information available on request.
• Outage reporting: Information received via SMS message and follow up phone call along with access to a client dashboard. 24/7 support with UKFAST engineers. Account manager availability.

Identity and authentication

• User authentication needed: Yes
• User authentication: Username or password
• Access restrictions in management interfaces and support channels: User roles to restrict management interface.
• Access restriction testing frequency: At least every 6 months
• Management access authentication: Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: Yes
• Any other security certifications: GC GDPR

Security governance

• Named board-level person responsible for service security: No
• Security governance certified: Yes
• Security governance standards: Other
• Other security governance standards: Cyber Essentials.
• Information security policies and processes: Adhere to principles of ISO27001.

Operational security

• Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Configuration and change management approach: ECom's formal change management process; • Appointing a change manager responsible for the proposed changes. • Assuring all proposed changes are evaluated for their benefits and risks, and that all impacts are considered. • Prioritizing changes so that limited resources are allocated to those changes that produce the greatest benefit based on the business need. • Requiring all changes are thoroughly tested and that each deployment includes a back-out plan to restore the state of the environment in the event that the deployment fails. • Ensuring the configuration management system is updated to reflect the effect of any changes.
• Vulnerability management type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Vulnerability management approach: All applications updated via Sucunia PSI and operating systems patched via WSUS within 14 days and after testing. Regular vulnerability scans performed by penetration tester. Anti virus and anti ransomware installed on all machines
• Protective monitoring type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Protective monitoring approach: Syslog Monitoring performed by PRTG server.
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: • Incident identification • Incident logging • Incident categorization • Incident prioritization • Initial diagnosis • Escalation, as necessary, to level 2 support • Incident resolution • Incident closure • Communication with the user community throughout the life of the incident.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  Equal opportunity

  Equal opportunity

  As an organisation we nurture a unique corporate culture, maintained as we have grown. Our workforce is a mix of gender, nationality and age and other characteristics, as we believe this brings value of diverse thought to projects. ; ; eCom are signatories to the Scottish Business Pledge, and live its values with regards to paying at least the Scottish Living Wage, no use of zero hours contracts, good workforce engagement, investing in youth, a balanced workforce, innovation, internationalism, supporting our community, and ensuring prompt payment. Our approach to Fair Work is tangible and measurable during Contract Management Procedures: ; ; • We will continue to meet the Scottish Business Pledge and perpetually review all salaries to ensure fair pay for all. ; • Clear managerial responsibility to nurture talent and help individuals fulfil their potential through use of eCom Academy ; • Strong commitment to Modern Apprenticeships (continue to support Foundation apprenticeships, & support Graduate Apprenticeships in 2020) ; • Support for Learning and Development ; • Continue to NOT use Zero hours contracts ; • Continue to offer flexible working, family friendly and wider work life balance ; • Continuing our efforts of gender balance and wider representation of workforce. ; • Continue to promote workplace innovation using online tools to offer suggestions and suggest new R&D focus.; ; eCom are committed to reducing our environmental impact and continually improving our environmental performance as an integral and fundamental part of our business strategy and operating methods. ; ; It is our priority to encourage our customers, suppliers and all business associates to do the same. Not only is this sound commercial sense for all; it is also a matter of delivering on our duty of care towards future generations.

Pricing

• Price: £2.50 to £6.50 a person an hour
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at wendy.edie@ecomlearningsolutions.com. Tell them what format you need. It will help if you say what assistive technology you use.