RPCuk Limited

RPC Hosting- An Oracle Primavera P6 EPPM hosting solution

RPCHosting is a complete Oracle Primavera P6 Hosted service enabling your project team secure access to their project data from their smart phone, tablet or computer anywhere and at any time.

Implemented and deployed on the Oracle Cloud Infrastructure (OCI).

Features

• Set up and available in hours not days
• Accessible using your smart phone, tablet or computer
• Available to use anywhere and at anytime
• Secure using Oracle Cloud Infrastructure (OCI)
• Hosted within UK with full back up and data recovery
• Fully supported by Accredited Oracle Primavera Specialists
• End user support available throughout
• Full onboarding support for each user

Benefits

• Start using straight away
• Usable and accessible through any device
• Work from any office or location worldwide
• Compliant and secure
• Full data recovery for peace of mind
• Supported by specialists proven in their field of expertise
• User advice and guidance on call as required

£38 to £60 a user a month

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at chris.woodbridge@rpc.uk.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

855381941337790

Contact

Chris Woodbridge
+447730214417
chris.woodbridge@rpc.uk.com

Service scope

• Service constraints: As a hosted service the appropriate number of Oracle Primavera software licences should be either already in support or can be purchased through RPCuk.
• System requirements:
  • Oracle Primavera P6 EPPM or PPM license/s
  • Internet Browser on device
  • Access to a smart phone, tablet, laptop or computer

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: All clients are given a unique support email and contact and we respond within UK working hours - Monday to Friday 9-5pm.; ; Emails and phone calls are responded to within 30 minutes when received within Office hours.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: RPCuk offers a full support service to all users.; ; The onboarding of every user to the RPC Hosting Cloud Service includes online training and documentation as standard and at no additional cost.; ; RPCuk provides a service manager for every client to ensure client satisfaction and technical advice and support is available throughout.
• Support available to third parties: No

Onboarding and offboarding

• Getting started: The onboarding of every user to the RPC Hosting Cloud Service includes online training and documentation as standard and at no additional cost. RPCuk provides a service manager for every client to ensure client satisfaction and technical advice and support is available throughout.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: Users can choose to migrate over to their new systems or archive their data locally as they wish. RPCuk will assist providing the necessary data/files as required.; ; RPCuk retain no rights over any terminated data. All data, including any data backups and users will be removed and deleted from the environment following receipt of confirmation the customer has received their provided data
• End-of-contract process: At the end of your Cloud contract we will arrange a detailed discussion regarding the decommissioning of the environment and how you would like this to processed. This will include an agreed end date/time of the service and how data will be processed, whether this be provided to the customer or removed securely.; ; RPCuk will assist providing the necessary data/files as required and at no additional cost.; ; Details on archiving data is available on request.

Using the service

• Web browser interface: Yes
• Using the web interface: Once set up on the RPC Hosting service, users will be provided with a URL and user account details to login to their application work area. Here, Oracle Primavera applications are made available to users so they can run and access as they wish.
• Web interface accessibility standard: None or don’t know
• How the web interface is accessible: Once users are logged in to their environment, they can access the applications that have been made available to them. Admin superusers set up and provide the necessary access
• Web interface accessibility testing: This interface has been tested a number of times on multiple networks. We run tests with the users as part of any demo's we run through with potential clients.
• API: No
• Command line interface: No

Scaling

• Scaling available: Yes
• Scaling type: Automatic
• Independence of resources: Each environment is partitioned from other customer’s data via the use of company specific application bootstraps and separate schemas within the database
• Usage notifications: Yes
• Usage reporting: Email

Analytics

• Infrastructure or application metrics: Yes
• Metrics types: Number of active instances
• Reporting types: Reports on request

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: Oracle

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v3.0
  • Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type: Deleted data can’t be directly accessed
• Equipment disposal approach: A third-party destruction service

Backup and recovery

• Backup and recovery: Yes
• What’s backed up:
  • Databases
  • Infrastructure
  • Data
• Backup controls: The RPC Support service contains hourly transactional backup and database snapshot as standard.; ; Users can request for database backups to be restored; ; Specific backup procedures can be discussed on a customer per customer basis, relating to individual requirements and needs.
• Datacentre setup: Multiple datacentres with disaster recovery
• Scheduling backups: Supplier controls the whole backup schedule
• Backup recovery: Users contact the support team

Data-in-transit protection

• Data protection between buyer and supplier networks: Legacy SSL and TLS (under version 1.2)
• Data protection within supplier network:
  • IPsec or TLS VPN gateway
  • Legacy SSL and TLS (under version 1.2)

Availability and resilience

• Guaranteed availability: Monthly uptime percentage of at least 99.9% during any ; calendar month.
• Approach to resilience: Available on request
• Outage reporting: We will provide email alerts and follow up phone calls where necessary to report any service outages.

Identity and authentication

• User authentication: Username or password
• Access restrictions in management interfaces and support channels: The RPC team access the hosting service using secure VPN's and two factor authentication. More information available on request
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Dedicated link (for example VPN)
  • Username or password
• Devices users manage the service through:
  • Any device but through a bastion host (a bastion host is a server that provides access to a private network from an external network such as the internet)
  • Directly from any device which may also be used for normal business (for example web browsing or viewing external email)

Audit information for users

• Access to user activity audit information: No audit information available
• Access to supplier activity audit information: No audit information available
• How long system logs are stored for: Between 6 months and 12 months

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: The company operates using Cyber Essentials Plus procedures which requires a full reporting structure. More information available on request.

Operational security

• Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Configuration and change management approach: There are two types of change that apply to the service, these are infrastructure and software versioning. Every year, as part of the service, RPC complete a infrastructure and software change/upgrade evaluation. During the evaluation the impact of any change is analyzed and the result of this analysis drives all decisions in the upgrading and changing of the platform. As part of this analysis a comprehensive risk, issue and mitigation report is compiled. More information available on request
• Vulnerability management type: Undisclosed
• Vulnerability management approach: Security threats are evaluated monthly for all aspects of the service with threat levels assigned to all points and any corrective action executed as a matter of urgency. High severity security patches and implemented within a maximum of 5 working days from identification. Threats are identified by Oracle, including all threats for both infrastructure and software. More information available on request
• Protective monitoring type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Protective monitoring approach: Proprietary software is utilised to provide all monitoring including availability, security and user access. Compromises are identified within 1 hour using automated notifications based on a configured thresholds and threat levels. Notifications are received by the service support team and acted upon immediately . More information available on request
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: There are 3 types of incidents recognised within the instance which include user generated, threat generated, and technology generated. regarding user generated incidents, users will contact the support service who document the service request using a secure report request platform where all actions are identified and service request reports can be provided. Regarding threat and technology generated incidents, users will be contacted by the RPC support service identifying the incident, the actions being taken and a return to service timeframe. More information available on request

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Separation between users

• Virtualisation technology used to keep applications and users sharing the same infrastructure apart: Yes
• Who implements virtualisation: Supplier
• Virtualisation technologies used: Oracle VM
• How shared infrastructure is kept separate: The service is designed as a multi tenanted environment whereby the underlying infrastructure is shared. Within the environment every customer is completely segregated using Oracle Pluggable database technology and dedicated application server deployments. As a result, it is not possible for any cross access at any point or level within the platform. Further details are available on request.

Energy efficiency

• Energy-efficient datacentres: Yes
• Description of energy efficient datacentres: The RPC Hosting service sits within a UK Oracle Datacentre and as part of Oracle's robust and enduring commitment to protecting our clients’ data, it has signed to the EU Data Protection Code of Conduct for Cloud Services (The EU Cloud Code of Conduct).; ; Through Oracle's attainment, RPCuk and our clients are assured that the RPC Hosting service goes far beyond regulatory compliance for data privacy and security and as such delighted to offer our customers this transparent, independent endorsement.; ; Further details to this adherence are available to any client upon request.

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  Implement energy-efficient practices including working from home we promote a culture of sustainability among employees.

  Covid-19 recovery

  We follow health guidelines, provide flexible work options, and support local businesses.

  Tackling economic inequality

  We pay fair wages, provide opportunities for skill development including graduate placements, and hire from diverse backgrounds.

  Equal opportunity

  Implemented non-discriminatory hiring practices, provide equal opportunities for advancement, and foster an inclusive work environment.

  Wellbeing

  We promote work-life balance, provide mental health resources, and create a safe and healthy work environment.

Pricing

• Price: £38 to £60 a user a month
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at chris.woodbridge@rpc.uk.com. Tell them what format you need. It will help if you say what assistive technology you use.