ASSESSMENT360 LIMITED

Turas360

Plan-Track-Report
Turas360 is the complete planning and assessment tool designed for Scotland’s Curriculum for Excellence.
Assessment for learning is at the heart of what we do. Turas360 offers a clear view of pupil’s abilities.
Monitor progress, coverage, and next steps on an individual pupil, class, cohort, and whole school level.

Features

• Use schools customised frameworks or CfE experiences and outcomes
• Designed for use with Curriculum for Excellence
• Create plans across all Curriculum Areas and interdisciplinary learning areas
• Track progress across all five curriculum levels
• Use assessments to generate reports for parents
• 360 degree view of pupils including next steps
• Extracts pupil and teacher data directly from SEEMiS
• Generate reports showing pupils achievement levels
• See overviews at pupil, class and cohort level
• Cyber Essentials accredited

Benefits

• Allows teachers to track progress through Curriculum for Excellence
• Shows all relevant data about pupils in one place
• Immediately reports pupils achievement levels
• Uses assessment data to generate reports for parents
• Highly visual tool to support Curriculum for Excellence
• Able to work remotely from anywhere, home, school, ipad
• Outstanding support including help with framework creation
• Fast to setup, easy to use and flexible adoption
• Use Xporter to securely refresh data from SEEMiS overnight
• Data securely stored on UK servers and Cyber Essentials accredited

£385 a licence a year

• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at support@assessment360.org. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

907662961271224

Contact

Sally Bliwert
0330 8281 360
support@assessment360.org

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: Turas360 can be used in conjunction with the School MIS. The Wonde API can be used to sync with these softwares to import data such as Student and Class/Group information.; It can also be used as a standalone service, with all data entered directly into Turas360.
• Cloud deployment model: Public cloud
• Service constraints: There are no significant constraints that buyers should know about.
• System requirements:
  • Standard desktop or laptop capable of running web browser
  • Mobile devices are supported but some functionality might be limited
  • Internet Connection

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Queries regarding errors or bugs will be answered within 0-8 working hours (8am-4:30pm Mon-Fri).; For other support related issues, they will be answered within 2 working days.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: No
• Support levels: Hosting of Turas360, with regular system health checks, bug fixes, and updates are all performed by Assessment360. ; ; Telephone and email support is available 8am - 4:30pm Mon-Fri. In addition calls can be set up via Microsoft Teams. Telephone calls and emails outside of these hours are collected, and will be returned and/or actioned on the next working day.; ; The service hosting, support and licensing of Turas360 is included in the annual cost. The cost is determined by the size of the school.
• Support available to third parties: No

Onboarding and offboarding

• Getting started: All schools are offered an online demonstration of the system at the start of their use. They have access to online documentation which they can access through the system itself or via our website. Training is also available, and users have different options but in the main it is delivered online unless requested to be onsite. This is in addition to any support requests which can made be via email, phone, or a Microsoft Teams call.
• Service documentation: Yes
• Documentation formats: HTML
• End-of-contract data extraction: When schools request data, we work with them to see what data it is they need, normally this is in excel, or csv form, but it is not limited to this We send all information to the school via a secure online portal.
• End-of-contract process: When a school ends their contract with us, they are requested to fill out a data retention form in which they specify how long they wish us to hold onto their data. Failure to fill this out means we only hold the data until the end of the following academic year. Records of the data retention specification are then kept and acted upon at the specified time. Included in the contract is to retain the data up to the end of the next academic year.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: No
• User support accessibility: None or don’t know
• API: No
• Customisation available: Yes
• Description of customisation: Turas360 can be customised in a number of ways. Bespoke frameworks created by the school can be uploaded to replace, complement, or supplement the default frameworks drawn from government guidance. Additional sub-steps can also be added in to any framework installed on the system. Schools are able to supply their own planning and reporting to parents templates as MS Word files to replace the default outputs. School logos can also be added to show on any pdf outputs. Customisations are submitted by schools and applied by the support team at Assessment360.

Scaling

• Independence of resources: The service is hosted on a scalable platform. As usage increases the number of servers used to host automatically scales up to cope with demand.

Analytics

• Service usage metrics: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: Less than once a year
• Penetration testing approach: In-house
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v3.0
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type: Deleted data can’t be directly accessed
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: Turas360 has a variety of reports which can be downloaded through normal use of the system.; If the user wishes a full export of data, or a custom export of data, they can obtain this by contacting the support team, who will provide them with a report.
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Defect Response and Resolution Time; 1 – Major response within 2 working hours, resolution within 2 working days;; 2 – Medium response within 4 working hours, resolution within 4 working days;; 3 – Minor response within 8 working hours, resolution within 10 working days;; 4 – Cosmetic response within 2 working days, resolution time not specified
• Approach to resilience: The database runs a duplicate copy in a second location (AWS AZ). In the case of database failure, will automatically switch over. The servers running use multiple instances at once, which are also spread over both locations. If any were to fail they would be replaced, with users redirected to healthy servers in the meantime. ; In the case of failure or user error causing loss of data, database backups can be used to restore data to a minute prior to the error within the past month.
• Outage reporting: Outage reporting is communicated via a system message on the login page, or if the login page is unavailable via a temporary page.; Major issues are communicated via email and Twitter (X).

Identity and authentication

• User authentication needed: Yes
• User authentication: Username or password
• Access restrictions in management interfaces and support channels: User access is role based, which determines restrictions. General users have a either Teacher or School Administrator roles, or both. General users are also restricted by School, limiting them to one or more schools. The users for a school are controlled by the School Administrators once a school is setup.; ; Assessment360 Support users have either SystemAdmin or SuperAdmin roles, or both. The SystemAdmin and SuperAdmin roles also require 2 factor authentication to be used by their users.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • 2-factor authentication
  • Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: No
• Security governance approach: All security policies have been developed in collaboration with the cloud systems manager and DPO and approved by the directors.; Document Control exists to ensure the policies are checked annually, or more frequently if necessary, and updated as required.; Updates are communicated to the whole company and compliance actively encouraged from board down.
• Information security policies and processes: Our Information Security Policy includes policies for: Acceptable Use, Data Breach Response, Disaster Recovery, Business Continuity, Remote Access, Access Control, data protection policy, information security policy, DSAR policy, data retention policy, data destruction policy, and incident management plan and Clean Desk.; ; Issues are reported to the COO and the Data Protection Officer who provide follow-up as directed by the policies.; ; Assessment360 staff are required to read the policies, and take yearly training on Information Security.; ; Policies are reviewed yearly to ensure they are being followed, and determine if they require any adjustment to improve security.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: All changes to our software are tested by an external programming team, and again by our own support team in a UAT environment. All configuration changes are tested on a like-for-like setup within the UAT environment. Changes are tested using appropriate tools and tests based on the change in question.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Bugs and issues are assessed from low to high. With preventing use of a feature being low, and errors or deletions with data or unauthorised access to data being high.; OS Updates are installed weekly, to ensure all security related updates are installed within 14 days of release. ; Hotfix updates to our software are released the same day that they are ready. Where necessary a temporary measure to disable the issue may be deployed sooner.; User and Server activity is monitored and reviewed for unusual behaviour. Service is also tested regularly, and all reports of issues checked.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Turas360 systems are monitored, with various logs and alarm on each of it's systems. These will help alert Assessment360 if a potential compromise has occurred, and how. This is in addition to our support team regularly using the system, and being informed of issues.; In the case of a potential compromise, we will initially prevent further exploitation of the issue, then test and fix the cause.; A potential compromise to security is considered a major issue. So would be treated with a 2 working hour response time. With a 2 day resolution deadline.
• Incident management type: Supplier-defined controls
• Incident management approach: When an incident is detected, the support manager is responsible for co-ordinating the incident based on our Disaster Recovery Policy.; After verifying that the issue exists, all information is supplied to the Cloud Systems Manager who will use the recovery scenarios located in the ‘Cloud Systems - Documents’ folder to resolve the incident.; Once the immediate incident is resolved, a retrospective is undertaken which analyses the root cause and develops a comprehensive fix.

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Tackling economic inequality
  • Wellbeing

  Tackling economic inequality

  Research finds the attainment gap between disadvantaged pupils and their peers has widened across all educational phases since 2019 and is becoming a key issue for the whole of the UK.; Turas360 includes contextual information about all of the students, which is kept up-to-date with an overnight sync from SEEMiS. This allows schools to monitor and analyse the data for all groups of students to ensure that nobody is left behind regardless of their background.

  Wellbeing

  Keeping track of what your students do and don’t know is a difficult and time-consuming job, and how do you use that information to help move the students along? We aim to reduce teachers non-teaching workload by having all this information at your fingertips in Turas360.; This frees teachers up from the admin of tracking to focus on the reason they came into teaching, planning creative lessons for their students and spending time in the classroom with them, while also allowing them to improve their work-life balance.; ; There are many products on the market that monitor students’ wellbeing but they are often aimed at the more vulnerable students. By including a wellbeing tracker in Turas360, schools can prioritise the wellbeing of all of their students. It also enables them to review this wellbeing data alongside other key pieces of information such as their attitude to learning, attendance and attainment to help find potential causes and solutions for the individual children.

Pricing

• Price: £385 a licence a year
• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: New customers may use the full service for one month prior to committing to purchase. This month period starts after the school is first setup on the service.

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at support@assessment360.org. Tell them what format you need. It will help if you say what assistive technology you use.