INTEGRATED BUSINESS SOFTWARE AND SOLUTIONS LIMITED

Integra Finance Management and Procurement

Integra Centros ERP SaaS for Local, Central Government, NHS. Multi-Company shared-service capability, Multi Factor Authentication (MFA). Financial Management: General Ledger, Creditors, Debtors, e-Invoicing (PEPPOL), Cash Receipting, Budgeting, Forecasting, Procurement (Contract Management, Catalogue, Punch-Out), Performance Planning, Asset Management, Document Management, Reporting, Business Analytics, AI Toolkit, Integration with Human Resources and Payroll.

Features

• Proprietary IBSS Finance solution, full development, delivery and support
• Leading industry technology platform with comprehensive, fully integrated modular solution
• Complete control and analysis across your finance and procurement operations
• Comprehensive Business Intelligence and reporting suite with AI toolkit
• Simple to use, user-defined graphical dashboard reporting, with transaction drill-down
• Definable multi-level workflow, delivering consistent, best practice business processes
• Definable scheduled automation deployment
• Secure, Cloud-hosted access anywhere with SSO & MFA
• Established, proven implementation methodology, enables seamless transition into operational service
• Access to Integra user group and sector-specific special interest groups

Benefits

• Consistent easy-to-use user interface across the end-to-end solution
• Advanced business analytics to better inform decision-making and future planning
• Shrink-wrapped onboarding model. Scalable platform
• Delivers continuous improvement. Collaborative development roadmap with regular product releases
• Delivers single version of the truth, driving increased accountability
• Simple, seamless API integration to third-party systems to maximise ROI
• Promotes agile, mobile working 24/7
• Interoperable, enabling unified Finance solutions platform across your organisation
• Long-standing heritage, experienced consultants, consistently proven to enable customer outcomes
• Flexibility assuring ‘fit-for-future’ service and informing Integra strategic direction

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at integra@advt-group.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

909213093429139

Contact

Jo Hunter
07967454075
integra@advt-group.com

About your service

• Service categories:

  Applications

  Enterprise resource management

  • Procurement
  • Order management and orchestration
  • Enterprise performance management
  • Project and portfolio management
  • Asset life-cycle management

  Financial

  • Financial and Accounting Applications
  • Accounts Payable Applications
  • Accounts Receivable Applications
  • Travel and Expense Management Applications
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Hybrid cloud
• Service constraints: There are no service constraints
• System requirements:
  • Compatible web browser supported by the vendor
  • Compatible Operating System supported by the vendor

User support

• Email or online ticketing support: Yes
• Support response times: The service desk operates Monday to Friday 08:00 – 18:00 (excluding English public holidays).; ; Level | Initial Response time | Target Response Time; P1 1 Hour 1 Day; P2 4 Hours 2 Days; P3 4 Hours 10 Days; P4 4 Hours 20 Days; ; 24 hour and weekend support can be provided at an extra cost.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: As a hosted solution, we provide our Gold service level as default, which includes, full database management, a dedicated DBA, Real time database alerts, quarterly service review process, backup & recovery, service management, monthly statistics, real time system alerts & fix, access to system administrator (Mon - Fri: 08:00 - 18:00), security management, yearly product upgrade, cloud managed 'DR on demand' solution, point of time restore, annual DR test, DR management.; ; A service delivery manager will be assigned to you that will provide you with updates, upgrades and patches to both the underlying infrastructure components as well as the Integra application itself, ensuring that the you will not need to be concerned with any of the technical operations of the solution. This gives our customers peace of mind when it comes to the upkeep and maintenance of the system.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: IBSS advocate a Train the Trainer approach with key staff being trained on the system during the implementation stage. These staff then cascade the necessary training to the various users within the organisation.; ; In addition, training material is provided in electronic format, context sensitive help is available throughout the solution and when launched will produce help relevant to the screen on which the user invoked help.; ; Field level tool tips can also be customised on a per implementation basis to be relevant to your organisation and policies.; ; IBSS are happy to work with you to develop a training plan to meet your training requirements.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
  • Other
• Other documentation formats: Microsoft Office
• End-of-contract data extraction: IBSS will agree an off-boarding plan with the customer detailing the tasks, responsibilities and timescales. As standard the off-boarding process will include a standard data extract taken and passed securely back to the customer and/or controlled destruction of the data that has been held on the system. All customer user accounts will also be removed from the service.; ; Where customers do not require consultancy services to off-board and would instead prefer to extract the data themselves to not incur additional charges, this can be achieved by the use of the solution’s standard extraction tools to export the data into industry standard formats such as xml and csv.
• End-of-contract process: In the event of the termination of a contract it is imperative that the customer can continue to carry out the vital tasks that our solution has provided for, such as continuing to pay suppliers and allowing orders to be made. IBSS are committed to ensure that during a decommission, a professional services consultant is provided to ensure a smooth transition away from our solution to an alternative systems supplier.; ; We understand that, as part of an exit strategy, expert knowledge may be required to extract data from Integra in agreed formats to be imported in to another solution. Whilst this is not included as part of the commercial contract, IBSS provide this service on a Time and Materials basis using the agreed rate card provided.
• Documentation accessibility standard: WCAG 2.2 AA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Integra Mobile provides a secure, quick and simple way to allow users to access key functions on the go by providing a secure online gateway which a user’s mobile/smartphone can connect to through their device’s Mobile Internet or Wi-Fi. As the vast majority of devices are connected at most times, remote/travelling users will be able to quickly review and approve key items even when on the move.; ; Integra Mobile currently includes Order Approval, Invoice Approval, and Expense Claim Entry, Enquiry, and Approval.
• Service interface: No
• User support accessibility: WCAG 2.2 AA
• API: Yes
• What users can and can't do using the API: Integra is also fully capable of supporting APIs/Web Services, such as for instance connecting to an external system using RESTful API to pull or inject data, and we are would happy welcome to discussing these interface approaches further where required.
• API documentation: No
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: Admin users of the solution can amend and customise individual user access permissions within the solution. Including menu / program access permissions.; ; Users can customise their 'homepage' view to ensure ease of access to frequently used functions within the solution.; ; Reference files throughout allow an organisation to customise the solution to your exact requirements. Several reporting tools are provided again allowing you to create any reporting requirements not delivered within the standard reports provided.; ; Admin users can customise reference files and user management (add/remove/amend users). Users can customise the layout of their homepage, add their own personal favourites.

Scaling

• Independence of resources: Microsoft Azure is resilient, scalable cloud platform and ensures high availability and reliability without any additional investment, management or concern by the customer enabling IT resource to be devoted to the your other projects.; ; We recognise that you may change your shape/size and requirements over the term. We believe that both the topology and technologies used in the solution will provide you with the agility to respond to these changes – Integra can be easily scaled both horizontal, for example, adding more application servers into a load balance cluster and vertically such as, increasing CPU/ RAM on the application servers.

Analytics

• Service usage metrics: Yes
• Metrics types: Dependent on the contract, reports are either provided on a monthly or quarterly basis. These reports include:; ; Incident/SLA Management,; Change Management,; Performance management,; Capacity Management,; Workload/Time Management
• Reporting types:
  • Real-time dashboards
  • Regular reports
• Resource tagging: Yes
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Physical access control, complying with another standard
  • Encryption of all physical media
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase

Data importing and exporting

• Data export approach: Download to variety of file formats including xls, xlsx, pdf, csv, txt and xml using the Integra Extraction profile generator.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • XML
  • Text
  • XLS
  • XLSX
  • PDF
  • HTML
  • Native Application Reporting
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • XML
  • Text

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: As an operational support system, the Service is designed to be available ‘24 x 7 x365/6’. Based on a 13 week rolling period (less any agreed requirement for planned service outages) the system is expected to be available for a minimum of 99.5% of core hours (09:00-17:30 Mon-Fri excluding Bank Holidays).
• Approach to resilience: Our cloud architecture involves the deployment of multiple data centres in each region with ultra-low latency interconnections and providing the capability to easily design the solution across all parts of the region.; ; Integra is deployed using a multi-tier architecture with different IP subnets and firewall controls separating the tiers.; ; Our Cloud services will be delivered from UK locations and the service will be managed by IBSS’s UK teams. The Client will access the service using the internet with no specific infrastructure requirements.; ; Solution is monitored by Microsoft 24x7x365 and contain security teams in conjunction with the intrusion detection and prevention capabilities.; ; Our Cloud data centres are built in a modular way, meaning that each data centre can be thought of as many smaller data centres built next to each other. This means that your data and system will be physically spread over different parts of the data centre, in turn meaning that even if an entire part of the data centre fails, you are unlikely to notice. Physically, all data centres have multiple redundant power grid connections, multiple redundant internet connections, redundant backup generators, and batteries to ensure resilience and mitigation of a wide variety of risk.
• Outage reporting: Real time system alerts will notify your assigned Service Delivery Manager of any service outages. The Service Delivery Manager will then alert you of the outage via email. Update emails will be sent to notify you of progress in resolution, cause of the incident, and steps taken to rectify. In the case of a Major incident, a Major Incident report will also be provided within 48 hours of the incident.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Limited access network (for example PSN)
  • Dedicated link (for example VPN)
  • Username or password
• Access restrictions in management interfaces and support channels: Access details for client systems are held securely in our Customer Service software and access is restricted to only those staff that support the customers cloud based system. The support teams access the customer cloud based system via terminal services and each member of the support team has their own login credentials.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: Between 1 month and 6 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: IBSS is committed to maintaining the highest risk management standards and ensuring compliance with legal and regulatory requirements. To this end, IBSS has developed a policy portfolio, which includes a Cyber & Information Security Policy and associated standards, which must be adopted as the minimum requirements. Implementing a programme of internal information security audits provides assurances that the level of conformance with the IBSS baseline Cyber & Information Security requirements are being continually assessed and any identified areas of non-conformance are being addressed by appropriate corrective actions/ risk management framework.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: ITIL based processes are followed.; - Full configuration management system tracking service components; - Full change advisory board; - All changes are assessed for risk and impact; - Includes dedicated test environments; ; Whilst we have our own controls for change management (in line with our ITIL-oriented service management processes) we will ensure that any upgrade process meets the requirement of your change management policies as well, including liaising with the relevant internal stakeholders to ensure the right people are aware of what is going to take place and when.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: - Internal QA and test process; - Test and deploy patches in accordance with severity; - Support regular independent penetration testing; - Active monitoring and management of network vulnerability and security threats.; - Relationships with key vendors to understand potential threats
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: - Monitor entire environment both at infrastructure and software level; - Includes monitoring individual files and folder configuration changes automatically; - Dedicated personnel for monitoring and managing the environment; - Relationships with vendors; - ITIL - deploy emergency change control and emergency escalation processes; - Incidents will be triaged; - Remediation plan in case of security incident
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: - Fully ITIL based service desk management , includes a dedicated incident management process.; - Incident knowledge-based database, each with a predefined process for resolution; - phone, email, customer support portal as available contact methods to the service desk.; - Service delivery managers provide reports, in addition self service is available through the customer support portal
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: Yes
• Connected networks:
  • Public Services Network (PSN)
  • Health and Social Care Network (HSCN)

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 2.5%
• Between £2,500,001 and £5,000,000: 5%
• Over £5,000,001: 10%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: Bmtrada
• ISO/IEC 27001 accreditation date: Thursday 11 July 2024
• What the ISO/IEC 27001 doesn’t cover: Nothing - all design, development and testing of financial accounting and purchasing software solutions are covered including training, consultancy, implementation, managed services and support.
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: Bmtrada
• ISO 9001 accreditation date: Monday 17 March 2025
• What the ISO 9001 doesn’t cover: Nothing - all products and services, software design, development and testing, training, consultancy, implementation, managed services and support, both package and bespoke are covered
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: F2bd2602-41f5-43c4-acd9-2f00865b92c0
• Cyber essentials plus: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials Plus certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials Plus certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Volunteering opportunities for staff
    • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at integra@advt-group.com. Tell them what format you need. It will help if you say what assistive technology you use.