AudEx Media Monitoring
AudEx is an online media data platform, providing intuitive and meaningful visualisations of the vast industry data available. Users can curate dashboards to understand the media landscape, explore media performance, monitor changing behaviours or maintain audience engagement. Together, Sopra Steria and TRP Research have reimagined media insights and analysis requirements.
Features
- Beautiful visualisations creating engaging and interactive media data insights
- Enhanced industry standard data, uniquely tailored to user requirements
- Widely accessible on PC or mobile for access anytime, anywhere
- Advanced cloud-based technology supporting fast, extensive data streams rendering
- Personalised experience, with customised widget views and bespoke reporting
- Exportable data, for easy dissemination of insights or reports
- Innovative support for advertising campaign planning, monitoring and performance
- Support services from experienced media and technology industry professionals
- Designed by media experts providing accessible media insight
Benefits
- Cost efficient by combining data requirements into one source
- Simplification of complicated data sources into beautiful visualisations
- Visualisations rendered at speed
- Data accuracy as standard
- Able to easily disseminate Barb data company-wide
- Admin features control who has access to which widget
- Regular releases of new data and ensured future proofing
- Customisable off the shelf to fit personal preferences
- All your media reporting requirements in one place
- User support provided by media data experts
Pricing
£455 a user a day
- Free trial available
Service documents
Request an accessible format
Framework
G-Cloud 14
Service ID
8 5 2 7 2 0 9 0 8 5 8 5 5 6 1
Contact
Sopra Steria Ltd
Sopra Steria G-Cloud Team
Telephone: 0370 600 4466
Email: soprasteria-gcloud@soprasteria.com
Service scope
- Software add-on or extension
- No
- Cloud deployment model
- Public cloud
- Service constraints
-
The service is constraint to a Software as a Service offering. There is no ability to self-host the service.
The AudEx application is available 24x7, excluding:
a) scheduled Routine Maintenance (typically undertaken outside normal business hours)
b) essential maintenance in order to prevent or resolve an Incident;
c) Unexpected failure due to a P1 or P2 Incident; or
d) any downtime as a result of AWS being unable to provide their hosting service. - System requirements
-
- Each customer must hold their own valid, active BARB license
- Mobile applications are available on iOS and Android operating systems
- Internet access is required to connect with AudEx
- Chromium based browser (Chrome & Edge) on Windows operating system
- Safari browser supported on iOS and Mac operating systems
User support
- Email or online ticketing support
- Email or online ticketing
- Support response times
-
The service aims to confirm receipt of queries within 2 hours. Detailed responses or resolutions will depend upon the priority level of the triaged request.
At weekends, a response will be made on the next working day for requests that are not a P1. - User can manage status and priority of support tickets
- Yes
- Online ticketing support accessibility
- WCAG 2.1 AA or EN 301 549
- Phone support
- No
- Web chat support
- No
- Onsite support
- Yes, at extra cost
- Support levels
-
Audex support is provided by a first line service desk, with 2nd & 3rd line support being undertaken by application and cloud infrastructure support teams. Incidents are raised to the service desk via email.
Whilst Audex is intended to be available on a 24*7 basis (excluding planned maintenance), the service desk are operational from 08:00 to 18:00 Monday to Friday excluding UK (England and Wales).
Issues are prioritised from P1 (site unavailable) down to P5 (user query or cosmetic issue) with various targets depending on the severity of the calls. For example, P1 calls have an initial response target of 30 minutes, with a target resolution time of 3 hours.
Priority 1 & 2 calls are handled using a Major Incident Management process, led by a Senior Service Manager.
There are no additional costs for the service provision as this is included in the license fees.
A technical account manager lead is not typically allocated to a client for Audex - any escalations would be via a nominated client manager. - Support available to third parties
- No
Onboarding and offboarding
- Getting started
- The onboarding process involves registering users on to the AudEx portal. The customer provides a list of names & email addresses that are imported into AudEx, generating an email to the end-user asking them to register & set a password. Once this is completed, users can log on to AudEx. This process may allow for delegated customer “super-users” to maintain their users.
- Service documentation
- Yes
- Documentation formats
-
- HTML
- End-of-contract data extraction
- The service does not hold any user data beyond user profile details. There is no context for end of contract data extraction.
- End-of-contract process
- There is no client data stored in the AudEx service and hence no additional costs relating to data extracts. The end of contract process involves any registered end user accounts being terminated and no longer having access to the AudEx portal. The mobile app will not display any data.
Using the service
- Web browser interface
- Yes
- Supported browsers
-
- Internet Explorer 11
- Microsoft Edge
- Firefox
- Chrome
- Safari
- Application to install
- No
- Designed for use on mobile devices
- Yes
- Differences between the mobile and desktop service
- The mobile service offers high-level summary data, providing quick access to headline figures. The various dashboard and interactive charts/tables are only available via the browser version.
- Service interface
- No
- User support accessibility
- None or don’t know
- API
- No
- Customisation available
- Yes
- Description of customisation
- Users can customise their user experience to create their own custom dashboards selecting a mixture of the available widgets.
Scaling
- Independence of resources
- The AudEx service is a multi-tenant/shared service using serverless AWS technology to deliver a scalable service. Performance of the service is continuously monitored and action taken to increase capacity if performance degrades.
Analytics
- Service usage metrics
- No
Resellers
- Supplier type
- Not a reseller
Staff security
- Staff security clearance
- Other security clearance
- Government security clearance
- Up to Developed Vetting (DV)
Asset protection
- Knowledge of data storage and processing locations
- Yes
- Data storage and processing locations
- United Kingdom
- User control over data storage and processing locations
- No
- Datacentre security standards
- Complies with a recognised standard (for example CSA CCM version 3.0)
- Penetration testing frequency
- At least once a year
- Penetration testing approach
- In-house
- Protecting data at rest
-
- Physical access control, complying with CSA CCM v3.0
- Physical access control, complying with SSAE-16 / ISAE 3402
- Encryption of all physical media
- Data sanitisation process
- No
- Equipment disposal approach
- Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001
Data importing and exporting
- Data export approach
- The visual widget in the dashboard supports a “Export to Excel” feature to the local laptop. This file contains the data presented in the browser widget.
- Data export formats
- Other
- Other data export formats
- Excel format
- Data import formats
- Other
- Other data import formats
- There is no import feature
Data-in-transit protection
- Data protection between buyer and supplier networks
- TLS (version 1.2 or above)
- Data protection within supplier network
- TLS (version 1.2 or above)
Availability and resilience
- Guaranteed availability
-
The AudEx application is available 24x7, excluding:
a) scheduled Routine Maintenance (typically undertaken outside normal business hours)
b) essential maintenance in order to prevent or resolve an Incident;
c) Unexpected failure due to a P1 or P2 Incident; or
d) any downtime as a result of AWS being unable to provide their hosting service. - Approach to resilience
- AudEx uses AWS Cloud technology and utilises their serverless cloud services to span multiple data centres (Availability Zones). This provides a very resilient service.
- Outage reporting
- Any outages will be reported via email alerts.
Identity and authentication
- User authentication needed
- Yes
- User authentication
- Username or password
- Access restrictions in management interfaces and support channels
- Internal management interfaces are only accessible from within the private cloud environment. Access to the environment is via a bastion approach. Access to the AWS management portal is restricted to a limited IP range and controlled via MFA.
- Access restriction testing frequency
- At least every 6 months
- Management access authentication
-
- 2-factor authentication
- Username or password
Audit information for users
- Access to user activity audit information
- No audit information available
- Access to supplier activity audit information
- Users contact the support team to get audit information
- How long supplier audit data is stored for
- At least 12 months
- How long system logs are stored for
- At least 12 months
Standards and certifications
- ISO/IEC 27001 certification
- Yes
- Who accredited the ISO/IEC 27001
- DNV Business Assurance, London, SE1 9LQ, United Kingdom
- ISO/IEC 27001 accreditation date
- Date of last re-certification: 01 December 2023
- What the ISO/IEC 27001 doesn’t cover
- N/A
- ISO 28000:2007 certification
- No
- CSA STAR certification
- No
- PCI certification
- No
- Cyber essentials
- Yes
- Cyber essentials plus
- Yes
- Other security certifications
- No
Security governance
- Named board-level person responsible for service security
- Yes
- Security governance certified
- Yes
- Security governance standards
- ISO/IEC 27001
- Information security policies and processes
-
Sopra Steria has a suite of information security and data protection policies, standards and procedures that are contained in the Sopra Steria Business Management System (BMS). These policies and procedures form the core implementation of the Information Security controls. Sopra Steria have an Information Risk Framework in place that uses the ISO27005 methodology and initiates frequent risk assessments.
Sopra Steria have obtained the following certifications and accreditations:
- ISO/IEC 27001
- UK Government Cyber Essentials Plus
- ISO/IEC 20000 IT Management
- ISO/IEC 22301 Business Continuity
Sopra Steria's Information Security Management capability is led by the Chief Information Security Officer (CISO), Phillip Yockney.
Employees are required to complete security awareness training upon starting with the company and must complete and pass refresher training modules throughout the year. These modules cover the corporate Information Security Policy, GDPR and other relevant topics. Company wide communications create security-positive behaviours by circulating policy updates, providing best practise guidance and offering support through one-to-one drop-in sessions with domain experts.
Operational security
- Configuration and change management standard
- Supplier-defined controls
- Configuration and change management approach
-
AudEx follows an Agile development approach with the outcome of several Sprints combined into a single release. Releases are firstly deployed to testing environments to undergo integration and performance testing. Once validated the release details are shared with customers and made available on the live service.
New releases are deployed to the live service automatically without the need for customers to request the change. - Vulnerability management type
- Supplier-defined controls
- Vulnerability management approach
-
The AudEx cloud provider AWS follows CSA CCM V3 for the infrastructure and services.
The AudEx components are developed using modern CI/CD pipelines that include vulnerability checking tools as part of the standard build processes. The outcomes of these tools are reviewed as part of the release process and issues rectified before a release.
Any serious vulnerabilities that come to light after a release will trigger a high priority patch release.
The underlying cloud services are upgraded following the advice from AWS maintenance schedule - Protective monitoring type
- Supplier-defined controls
- Protective monitoring approach
-
The solution uses AWS services and tools to monitor the various components and deliver events into a Azure Sentinal SIEM service. This being monitored by a security team.
The live service components are serverless generating events and subsequence alarms for unexpected behaviour.
Virus scanning events are also delivered to the SIEM service. - Incident management type
- Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
- Incident management approach
- Sopra Steria implement a pre-defined process to handle common events, which conforms to ITIL and ISO/IEC 20000. AudEx users may report incidents by raising a ticket on AudEx’s ITSM tool or contacting the service support team directly via email. Incident reports will be issued following the closure of an incident or following a regular review of the incident management process and its effectiveness.
Secure development
- Approach to secure software development best practice
- Conforms to a recognised standard, but self-assessed
Public sector networks
- Connection to public sector networks
- No
Social Value
- Social Value
-
Social Value
- Fighting climate change
- Covid-19 recovery
- Tackling economic inequality
- Equal opportunity
- Wellbeing
Fighting climate change
Sopra Steria has committed to becoming Net Zero by 2028 and has been ranked in the top 1% of companies globally by CDP placing us on the A-list for our work tackling climate change over the past 5 years.
Our work has a direct positive impact on our client’s services, for example through lower emissions, reduced waste, and more sustainable supply chains.
Additional environmental benefits: We also provide contract-specific sustainability programmes for clients, which are designed & deployed by our team of Sustainability Consultants. During procurement, these experts will develop a sustainability programme based on a clients objectives, the material impacts, and opportunities within the service.
We have experience in…
• Undertaking service environmental impact assessments
• Measuring energy consumption, and emissions generated, required to deliver a particular service (e.g., office use, business travel, use of technology and supply chain)
• Evaluating the sustainability of technology products (e.g., GGICT, Energy Star, as well as product and service foot printing)
• Making business case-backed recommendations, implementation roadmaps for improvements
• Delivering improvement programmes
• Reporting performance, using recognised reporting standards, accounting methods
Influencing staff, suppliers, customers and communities: regarding our staff, we feature sustainability in our employee communications, and offer all employees paid volunteering time which can be used to support sustainability activities, such as beach cleans and climate hackathons.Covid-19 recovery
Employment, re-training and other opportunities: In the high-growth Digital sector, Sopra Steria is continually developing the skills of our workforce, including via upskilling and reskilling initiatives, e.g. via a new Career Coach, or by extending our apprenticeship programme.Through our ‘Tech for Good’ programme, and the various Social Value programmes we design and deliver for our customers, we focus on jobs and skills for disadvantaged and under-represented groups, including those disproportionately affected by Covid.
People and communities: Our ‘Tech for Good’ programme is designed to provide people, small businesses and VCSEs with skills they need to thrive and is focused on those from disadvantaged or under-represented communities. Since the beginning of the pandemic, we have transitioned to a hybrid-virtual programme to ensure continued accessibility. For example, we worked with ELATT, a digital skills charity, to create hybrid learning, ensuring those who were shielding or otherwise unable to access classroom learning, as well as those who most needed to be in a classroom to support their learning, could still participate.
Organisations and businesses: In the first year of the pandemic, we ran free training courses for charities and SME’s – offering Microsoft Teams training and modules on cyber security and resilience. We continue to offer pro-bono consulting for charities to help them use technology to better serve their communities.
Physical and mental health needs: Since the pandemic, we have put in place measures to prevent and manage risks to employee wellbeing – including the wellbeing of contracted staff – together with appropriate training and individual support, and initiatives to raise awareness of mental health issues at work. We have also trained ca. 60 Mental Health First Aiders.
Workplace conditions: All our office locations have strict Covid safety protocols, with considerations for cleaning, ventilation, and occupancy.Tackling economic inequality
1) New businesses, jobs, and skills
Entrepreneurship and SMEs: Sopra Steria adheres to the Prompt Payment Code. SMEs provide us with innovative and agile solutions and deliver 50% of our work.
Barriers to employment: We provide education, skills training and employment opportunities, such as mentoring, for those facing barriers to employment.
Skills shortages: We address the digital skills gap inside and outside of our business through in-work and community learning opportunities.
Educational attainment: We offer a number of skills development programmes, including apprenticeships.
Influence: Staff are encouraged to use paid volunteer time to support our community innovation, entrepreneurship and employability initiatives.
Suppliers must comply with our Supplier Code of Conduct, which requires workforce skills development.
Our customer social value programmes include business competitions and work experience placements.
We work with community organisations such as Villiers Park and Career Ready to deliver business, jobs, and skills programmes.
2) Supply chain resilience and capacity
Diverse supply chain: We work to improve supplier diversity by…
• Making it easier to do business with us
• Measuring current supply chain diversity
• Creating new VCSE partnerships
Innovation & new methods: Through horizon-scanning, supplier & industry collaboration, we support development of new technologies that improve public services, like our ethical data-driven approaches to serving vulnerable citizens.
Collaboration: We have obtained the ISO44001 Collaborative Business certification.
Cyber security: We are certified to Cyber Essentials Plus and ISO27001 standards. We require our suppliers to have resilient information security processes, and flow down necessary cyber standards.
Influence: Staff undertake cyber security training, and participate in our innovation processes.
Suppliers are engaged through our Collaborative Business approach and must adhere to strict security requirements.
We share knowledge with customers via our social value programmes, continual service improvement, industry engagements.
We participate in community resilience, innovation forums such as techUK.Equal opportunity
Sopra Steria’s vision is to create an inclusive culture that embraces difference as a source of creativity, innovation, and competitive advantage. Our Equality, Diversity & Inclusion (EDI) strategy, overseen by a dedicated EDI Manager, applies to contract workforces.
1) Disability employment gap
Representation: We are a Disability Confident Committed Employer. Our partnership with Vercida helps us improve diversity through recruitment.
Skills development: All employees are given access to on-and-off-the-job development. We also have initiatives such as our Disability Network, and also our partnership with Business Disability Forum which supports disabled employees in their skills development.
Staff, suppliers, customers and communities:
Staff - all employees can join our Disability Network. Our Disability Steering Group has employee representation and executive-level sponsorship.
Suppliers - our Supplier Code of Conduct requires all suppliers to maintain high standards of EDI in their workforces.
Customers - we regularly work with clients to improve accessibility in digital services. Example, we are providing insight to a client on the effects of digital transformation on accessibility.
Communities - we work with community representatives in the design and delivery of our disability work.
2) Workforce inequality
Identify and tackle inequality: We have a range of initiatives to identify, tackle inequality in our workforce, e.g.:
• Diversity data dashboards help us understand EDI indicators and inform our programmes.
• Employee inclusion networks give employees in under-represented groups a voice in our EDI strategy.
• We are working to recruit more people from under-represented groups.
In-work progression: We offer opportunities for people from under-represented groups, such as our Female and Black and Ethnic Minority Employee mentoring programmes.
Modern Slavery: as signatories to the UN Global Compact, we actively work to prevent human trafficking through pre-employment checks and transparent recruitment practices. Our Supplier Code of Conduct includes requirements for demonstrably preventing modern slavery.Wellbeing
Sopra Steria is fostering a workplace where our people are actively supported to be healthy & well, and can talk openly about their mental health.
1) Improve health and wellbeing: Our company-wide health and wellbeing programme is for all our employees, including contracted staff, and includes…
• Work-life balance policy providing flexible and remote working options
• Extensive employee assistance programme
• Range of healthcare benefits
• Employee Trust, providing financial support in times of hardship
• Mental Health First Aiders, now with 60 trained staff
• Calendar of virtual classes, including fitness, meditation, stress management, nutrition, and resilience
2) Improve community integration:
Our outcomes-focused, and user-centred approach to Social Value means that in creating programmes for our clients, we engage community representatives by conducting user research and needs analysis.
Health, wellbeing & community integration: influence staff, suppliers, customers, and communities: We engage all stakeholders in our Social Value work on Wellbeing, for example…
Staff - in addition to the staff support described, we also equip our people to support others’ wellbeing, for example by ensuring people managers have additional wellbeing training and objectives.
Suppliers - our Supplier Code of Conduct requires all suppliers to support the health and wellbeing of their workforce.
Customers - our Social Value consulting team designs Social Value programmes tailored to clients’ Social Value priorities, including Health & Wellbeing. For example, we are providing pro-bono consulting to a national mental health charity to help them identify how to use technology to improve outcomes for service users.
Communities - To play a positive role in all our communities, all employees are given 3 days paid volunteering annually, and we offer matched funding to support charitable fundraising.
Pricing
- Price
- £455 a user a day
- Discount for educational organisations
- No
- Free trial available
- Yes
- Description of free trial
- A free trial for up to five users per organisation is available for up to two weeks. This includes full access to the AudEx platform and an initial training session, if required.