Wordpress implementation

Service scope

Software add-on or extension: No
Cloud deployment model: Public cloud

Private cloud
Service constraints: For any onboarding of existing Wordpress CMS websites not built by our Wordpress agency, we will need to undergo a review of your source code in order to confirm we can support and build upon this.
System requirements: None

User support

Email or online ticketing support: Yes, at extra cost
Support response times:  Phone Calls answered within 22 seconds 90%  Answer Phone messages given update within 90 minutes 90%  Emails sent to team@ve3.global given update within 120 minutes 90% Weekends are considered out of hours and have different response times. Out of hours services come at a separate cost to a standard support package.
User can manage status and priority of support tickets: No
Phone support: Yes
Phone support availability: 9 to 5 (UK time), Monday to Friday
Web chat support: No
Onsite support: No
Support levels: Support is available 9-5.30 Mon-Fri and charged in 15 minute increments. All bugs are fixed free of charge as long as there is a support contract in place. Support bundles are available to be purchased in hourly increments. Hosting is monitored 24/7/365 using Azure alerting and external uptime.
Support available to third parties: Yes

Onboarding and offboarding

Getting started: As part of any web project, whether we have built the site using Umbraco CMS, Wordpress CMS or Kentico CMS, we provide a content management training session for any members of your organisation that will be responsible for content management and editing. This can be held in our offices, at your site, or online. Additionally, as Wordpress CMS is a widely used platform there is a vast amount of documentation online.
Service documentation: Yes
Documentation formats: HTML

ODF

PDF

Other
Other documentation formats: Video Walkthroughs
End-of-contract data extraction: Users inform our support team (or account manager if relevant) that they will no longer be continuing with our service provision. On being informed of this, after any notice period has passed, the support and development teams can arrange: the transfer of source code, transfer of website content/database, deletion of your data post completion of transfer, co-hosting overlap, freeze on development and freeze on content.
End-of-contract process: If we have arranged hosting for you, you can continue with the existing hosting provision or move your hosting to an alternative solution. We will arrange: the transfer of source code, transfer of website content/database, deletion of your data post completion of transfer, co-hosting overlap, freeze on development and freeze on content.

Using the service

Web browser interface: Yes
Supported browsers: Internet Explorer 11

Microsoft Edge

Firefox

Chrome

Safari

Opera
Application to install: No
Designed for use on mobile devices: Yes
Differences between the mobile and desktop service: Our Wordpress CMS websites are optimised for all mobile, tablet and desktop devices. Our designers provide layouts of your site in both mobile and desktop so you can always know what your site will look like on different devices.
Service interface: Yes
User support accessibility: WCAG 2.1 AAA
Description of service interface: Wordpress CMS service administration screens are browser based and can be customised almost without limit.
Accessibility standards: WCAG 2.1 AA or EN 301 549
Accessibility testing: In order to ensure that the site is technically suitable for every user, we work to strict accessibility standards as a given. Accessibility is not only a legal requirement but an important part of our design and development culture as an organisation and as such we adhere to W3C AA standards. Our designers are trained how to check colour contrasts and our developers ensure that our code ticks all the technical requirements. We develop all our websites to meet single A requirements as a minimum. We can absolutely develop your new site to AA standards or AAA as we have done so for many clients in our 15 year history. As part of our project process we do a technical accessibility check e.g. semantic markup, colour contrasts. We are very familiar with accessibility plugins such as browsealoud and have a strong relationship with Shaw Trust, with whom we can outsource accessibility testing if necessary. AA sites we’ve developed: • https://www.digitalcommunities.gov.wales/ • https://www.welshgymnastics.org/ • https://www.bcs.org/ Some examples of sites we have made accessible are: • https://www.bronafon.org.uk/ - uses browsealoud • https://www.traveline.cymru/ - uses contrasts, text size change, and browsealoud • https://www.disabilitysportwales.com/ - uses contrasts and text size change
API: Yes
What users can and can't do using the API: Wordpress CMS is capable of integrating with numerous open-source API's. Full details can be found at https://developer.wordpress.org/rest-api/
API documentation: Yes
API documentation formats: Open API (also known as Swagger)

PDF
API sandbox or test environment: Yes
Customisation available: Yes
Description of customisation: The CMS's public-facing front end and administration screens can be customised almost without limit. Depending on your CMS implementation, customisation can be achieved through: • CMS software settings • Coding using HTML and CSS (and CMS dependent configurations) • Modules and Plug-ins CMS software settings customisation would need to be undertaken by a trained user. Coding and module customisation would need to be undertaken by competent web developer familiar with the CMS platform.

Scaling

Independence of resources: For all of our projects we work to an agreed project schedule outlined in the project plan with key milestones and quality reviews identified. We also ensure that our project plan has a sensible amount of time allocated transparently to contingency so that if one element slightly overruns, it does not immediately push back the completion date. Where project pressure points arise, the VE3 project manager will bring in additional VE3 resources to our project team to ensure increased operational output. Additionally, Hosting is provided independently for each client.

Analytics

Service usage metrics: Yes
Metrics types: We use: • Google Analytics 360 Suite • Google Analytics • Google Tag Manager • Google Optimize • Google Data Studio We can also provide custom dashboards for your organisation.
Reporting types: API access

Real-time dashboards

Regular reports

Reports on request

Resellers

Supplier type: Not a reseller

Staff security

Staff security clearance: Other security clearance
Government security clearance: Up to Developed Vetting (DV)

Asset protection

Knowledge of data storage and processing locations: Yes
Data storage and processing locations: United Kingdom

European Economic Area (EEA)

Other locations
User control over data storage and processing locations: Yes
Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
Penetration testing frequency: At least once a year
Penetration testing approach: Another external penetration testing organisation
Protecting data at rest: Other
Other data at rest protection approach: Back ups are encrypted
Data sanitisation process: No
Equipment disposal approach: In-house destruction process

Data importing and exporting

Data export approach: Dependent on what data is required, we can provide backups/exports as part of support or include an automated export as part of the site functionality.
Data export formats: CSV

ODF

Other
Other data export formats: PDF

JSON

XML
Data import formats: CSV

ODF

Other
Other data import formats: PDF

JSON

XML

Data-in-transit protection

Data protection between buyer and supplier networks: TLS (version 1.2 or above)

IPsec or TLS VPN gateway
Data protection within supplier network: TLS (version 1.2 or above)

IPsec or TLS VPN gateway

Availability and resilience

Guaranteed availability: 99.95% uptime for sites hosted on Azure
Approach to resilience: Available on request
Outage reporting: Email alerts sent to designated contacts.

Identity and authentication

User authentication needed: Yes
User authentication: Username or password
Access restrictions in management interfaces and support channels: We set roles/permission levels for access
Access restriction testing frequency: At least every 6 months
Management access authentication: Username or password

Audit information for users

Access to user activity audit information: Users contact the support team to get audit information
How long user audit data is stored for: User-defined
Access to supplier activity audit information: Users contact the support team to get audit information
How long supplier audit data is stored for: User-defined
How long system logs are stored for: Between 1 month and 6 months

Standards and certifications

ISO/IEC 27001 certification: Yes
Who accredited the ISO/IEC 27001: EGAC
ISO/IEC 27001 accreditation date: 06/01/2024
What the ISO/IEC 27001 doesn’t cover: NA
ISO 28000:2007 certification: No
CSA STAR certification: No
PCI certification: No
Cyber essentials: Yes
Cyber essentials plus: Yes
Other security certifications: Yes
Any other security certifications: ISO 22301

ISO 20000-1

ISO 14000-1

ISO 9000-1

Security governance

Named board-level person responsible for service security: Yes
Security governance certified: Yes
Security governance standards: Other
Other security governance standards: Cyber Essentials
Information security policies and processes: We have developed a set of policies and standard operating procedures covering various aspects of Information security: • Information Security Policy • Hosting procedures & checks • Business Continuity • Solution Monitoring and Support • Project Quality Management • Risk Assessment • Risk Management Policy • Customer Complaints process • Data protection (GDPR) Policy • Project Delivery process • Social Media Policy • Cyber Essentials certification We have defined roles and responsibilities for information security, with overall responsibility being held by a Director.

Operational security

Configuration and change management standard: Supplier-defined controls
Configuration and change management approach: We use internal systems to manage change throughout a project life cycle. This shows a clear line of accountability and allows us to "track and trace" the impact of amendments to original requirements. Changes are notified to relevant stakeholders automatically (where possible) via emails/IM to ensure all parties are up to date.
Vulnerability management type: Supplier-defined controls
Vulnerability management approach: We monitor blogs and security announcements of the platforms we support (Umbraco, Wordpress, Kentico and Sitecore). Any critical / security vulnerabilities are assessed immediately and deployed if applicable. Timescales for deployment are dependent on the risk, with exploitable security issues taking highest priority. Our automated deployment processes ensures we can get patches onto live sites within hours or even minutes of any disclosure, if appropriate. We would always encourage clients to perform an independent penetration test of our solutions.
Protective monitoring type: Supplier-defined controls
Protective monitoring approach: We set up external uptime monitoring of sites we host to ensure that they are working as expected. In addition alerts for excessive CPU/memory/high response times are configured – any anomalies are investigated to ensure there has been no system compromise. Notifications are emailed to a group email address immediately and the support team will investigate if required.
Incident management type: Supplier-defined controls
Incident management approach: We categorise an incident in 5 levels: critical, urgent, priority, bug and support. Each level has differing response times and methods of reporting. Critical incidents must be reported over the phone, any other incident category can be reported over the phone or via email. Details of our SLA can be found in our Service definition document. Incident reports can be received on request from our support team.

Secure development

Approach to secure software development best practice: Supplier-defined process

Public sector networks

Connection to public sector networks: No

Social Value

Fighting climate change
Covid-19 recovery
Tackling economic inequality
Equal opportunity
Wellbeing

Fighting climate change

Our G-Cloud service provision is deeply committed to fighting climate change, recognizing the urgent need for collective action to address environmental challenges. Here's how our services deliver against this social value theme:

Environmental Sustainability in Operations:

We prioritize running efficient operations to reduce emissions and minimize environmental impacts. This includes implementing energy-efficient practices, optimizing resource usage, and adopting renewable energy sources wherever possible within our data centers and infrastructure.

Promoting Sustainable Practices:

VE3 actively engages with our suppliers and clients to promote sustainable business practices. Through our services, we advocate for the adoption of environmentally friendly technologies, responsible sourcing, and waste reduction strategies, thereby reducing carbon footprints across the supply chain.

Responsible by Design Framework:

Our G-Cloud services adhere to a 'Responsible by Design' framework, ensuring that environmental considerations are integrated into the development and deployment of digital solutions. By prioritizing environmental protection and minimizing negative impacts, we strive to deliver sustainable outcomes for our clients.

Training and Education:

VE3 invests in training and education programs focused on environmental sustainability. Through initiatives like the Sustainability Quotient (SQ) training, we equip our teams with the knowledge and skills to adopt climate-smart behaviors and implement environmentally conscious practices in their work.

Community Engagement:

We actively engage with communities to support environmental objectives and promote climate action. By partnering with local organizations and stakeholders, we contribute to initiatives aimed at addressing climate change, such as tree planting programs, clean energy projects, and environmental education campaigns.

Covid-19 recovery

Our G-Cloud service provision plays a crucial role in supporting the COVID-19 recovery effort by facilitating resilience, adaptation, and innovation in the face of unprecedented challenges. Here's how our services contribute to the recovery process:

Remote Work Enablement:

VE3's digital solutions empower organizations to transition to remote work seamlessly. By providing secure and reliable cloud-based infrastructure, collaboration tools, and remote access solutions, we enable businesses to maintain productivity while ensuring the safety and well-being of their employees.

Business Continuity Planning:

We assist organizations in developing and implementing robust business continuity plans to mitigate disruptions caused by the pandemic. Our services include data backup and recovery solutions, disaster recovery planning, and resilience testing to ensure operational continuity in the face of unforeseen events.

Digital Transformation Acceleration:

VE3 accelerates digital transformation initiatives to help organizations adapt to the new normal. By modernizing legacy systems, implementing cloud-based technologies, and digitizing processes, we enable businesses to optimize efficiency, improve agility, and remain competitive in a rapidly evolving landscape.

Healthcare Support Solutions:

We provide specialized healthcare support solutions to assist frontline workers and healthcare organizations in responding to the COVID-19 crisis. This includes telemedicine platforms, patient management systems, and data analytics tools to enhance patient care, streamline operations, and support decision-making processes.

Economic Stimulus through Innovation:

VE3 fosters innovation and entrepreneurship to stimulate economic recovery in the aftermath of the pandemic. Through our G-Cloud services, we support startups, small businesses, and enterprises in developing and deploying innovative solutions that address emerging challenges, create new opportunities, and drive economic growth.

Tackling economic inequality

We recognize the importance of tackling economic inequality and are committed to leveraging our G-Cloud service provision to address this pressing social issue. Here's how our services contribute to tackling economic inequality:

Access to Affordable Technology:

We strive to make cutting-edge technology accessible and affordable to all, regardless of economic status. By offering scalable and cost-effective cloud-based solutions, we enable organizations, including small and medium-sized enterprises (SMEs) and underserved communities, to access the tools and resources they need to compete in the digital economy.

Skills Development and Training:

VE3 invests in skills development and training programs to empower individuals with the knowledge and expertise needed to thrive in the digital age. Through initiatives like online courses, certifications, and workshops, we equip people from diverse backgrounds with the skills required for high-demand roles in technology and innovation, thereby enhancing their employability and economic prospects.

Support for Minority-Owned Businesses:

We actively support minority-owned businesses and entrepreneurs by providing access to mentorship, networking opportunities, and resources to help them grow and succeed. Through initiatives like supplier diversity programs and partnerships with minority business organizations, we promote inclusion and diversity in the technology sector and contribute to creating more equitable economic opportunities.

Digital Inclusion Initiatives:

VE3 is committed to promoting digital inclusion and bridging the digital divide by ensuring that everyone has access to essential digital services and technologies. We collaborate with governments, nonprofits, and community organizations to implement initiatives such as digital literacy programs, affordable internet access schemes, and community technology centers, thereby empowering underserved populations and promoting economic equity.

Fair and Transparent Procurement Practices:

We adhere to fair and transparent procurement practices to create opportunities for businesses of all sizes and backgrounds to participate in government contracts and procurement processes.

Equal opportunity

We recognize the importance of tackling economic inequality and are committed to leveraging our G-Cloud service provision to address this pressing social issue. Here's how our services contribute to tackling economic inequality:

Access to Affordable Technology:

We strive to make cutting-edge technology accessible and affordable to all, regardless of economic status. By offering scalable and cost-effective cloud-based solutions, we enable organizations, including small and medium-sized enterprises (SMEs) and underserved communities, to access the tools and resources they need to compete in the digital economy.

Skills Development and Training:

VE3 invests in skills development and training programs to empower individuals with the knowledge and expertise needed to thrive in the digital age. Through initiatives like online courses, certifications, and workshops, we equip people from diverse backgrounds with the skills required for high-demand roles in technology and innovation, thereby enhancing their employability and economic prospects.

Support for Minority-Owned Businesses:

We actively support minority-owned businesses and entrepreneurs by providing access to mentorship, networking opportunities, and resources to help them grow and succeed. Through initiatives like supplier diversity programs and partnerships with minority business organizations, we promote inclusion and diversity in the technology sector and contribute to creating more equitable economic opportunities.

Digital Inclusion Initiatives:

VE3 is committed to promoting digital inclusion and bridging the digital divide by ensuring that everyone has access to essential digital services and technologies. We collaborate with governments, nonprofits, and community organizations to implement initiatives such as digital literacy programs, affordable internet access schemes, and community technology centers, thereby empowering underserved populations and promoting economic equity.

Fair and Transparent Procurement Practices:

We adhere to fair and transparent procurement practices to create opportunities for businesses of all sizes and backgrounds to participate in government contracts and procurement processes.

Wellbeing

Environmental Sustainability:

We are committed to environmental sustainability as a core component of wellbeing. By prioritizing eco-friendly practices, resource conservation, and carbon reduction efforts in our operations and services, we contribute to creating a healthier and more sustainable environment. We prioritize the wellbeing of individuals and communities in all aspects of our G-Cloud service provision. Here's how our services contribute to enhancing wellbeing:

User-Centric Design:

VE3 designs our G-Cloud services with a user-centric approach, prioritizing usability, accessibility, and intuitive design. By focusing on the needs and preferences of users, we create digital experiences that enhance overall wellbeing by reducing frustration, stress, and cognitive load.

Health and Safety Protocols:

We implement robust health and safety protocols to protect the wellbeing of employees, clients, and partners. This includes adherence to strict security standards, data privacy regulations, and compliance with industry best practices to ensure the safety and integrity of our digital infrastructure and services.

Promotion of Work-Life Balance:

VE3 recognizes the importance of work-life balance in maintaining overall wellbeing. Through our G-Cloud services, we enable remote work, flexible scheduling, and collaboration tools that empower individuals to achieve a healthy balance between their professional and personal lives, leading to greater job satisfaction and wellbeing.

Mental Health Support:

We prioritize mental health support for our employees and clients by offering resources, programs, and initiatives aimed at promoting mental wellbeing. This includes access to counseling services, mindfulness training, stress management workshops, and employee assistance programs designed to support individuals in times of need.

Community Engagement and Social Impact:

VE3 actively engages with communities to address social determinants of health and promote holistic wellbeing. Through partnerships, philanthropic initiatives, and volunteer efforts, we support local organizations and projects focused on improving access to healthcare, education, housing, and other essential services that contribute to overall community wellbeing.

Pricing

Price: £175 to £850 a unit
Discount for educational organisations: Yes
Free trial available: No

Features

Benefits

Service documents

Framework

Service ID

Contact

Service scope

User support

Onboarding and offboarding

Using the service

Scaling

Analytics

Resellers

Staff security

Asset protection

Data importing and exporting

Data-in-transit protection

Availability and resilience

Identity and authentication

Audit information for users

Standards and certifications

Security governance

Operational security

Secure development

Public sector networks

Pricing

Service documents

Cookies on Digital Marketplace

Wordpress implementation

Features

Benefits

Pricing

Service documents

Framework

Service ID

Contact

Service scope

User support

Onboarding and offboarding

Using the service

Scaling

Analytics

Resellers

Staff security

Asset protection

Data importing and exporting

Data-in-transit protection

Availability and resilience

Identity and authentication

Audit information for users

Standards and certifications

Security governance

Operational security

Secure development

Public sector networks

Social Value

Pricing

Service documents