PA Consulting Services Limited (UK)

Hospital Insights

PA’s cloud hosted Hospital Insights service provides access to high quality information for operational improvement and scheduling. Visualising data from patient to organisation level, it creates actionable insights for increased productivity. Coaching from PA’s healthcare experts embeds evidence-based decision-making, enabling more effective productivity, performance, quality and financial improvement.

Features

• Applications showcasing productivity insight for Outpatients, Theatres, Recruitment, Inpatients
• Operational scheduling tools for Theatres, Outpatients and Radiology demand management
• Further applications are in development, to support decision making
• Benchmarking, opportunity analysis and quantification
• Drilldown from organisation to clinician; high-level to granular insight
• Online access via web browser, mobile and tablet enabled
• Stepped insight from hospital site, division, specialty, clinician, theatre/clinic/ward
• Highly intuitive user-friendly tool emphasising visual display over data tables
• Designed with frontline clinicians and hospital staff
• Monthly, weekly or even daily refresh options

Benefits

• Insight into every-day pain points with a button click
• Puts information in the hands of clinicians and operational teams
• One version of the truth within a single environment
• A genuine driver of effective and sustainable change
• Deliver financial efficiency in theatres, outpatients and inpatients
• Intended for use across all functions within an organisation
• Engage clinicians and operational teams in programme delivery
• Increase speed and effectiveness of operational decision making
• From data request to operational test environment within two weeks
• Track performance improvements to evidence benefit realisation

£12,000 a unit

• Free trial available

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at GCloudFramework@PACONSULTING.COM. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

911586455343128

Contact

Lia Shaw
02073335398
GCloudFramework@PACONSULTING.COM

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: PA also provides managed support services for digital solutions, both commercial off-the-shelf (COTS) software and custom, bespoke, cloud hosted software.
• Cloud deployment model: Public cloud
• Service constraints: PA will work with the client define and agree the most appropriate services to meet the requirements and needs
• System requirements:
  • Minimum Windows 7
  • Minimum Internet Explorer 8
  • GPSoC compliant GP IT system (or GPITF compliant)

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: The service hosts a mailbox for support queries which is managed by the development team. Additionally, customers raise queries to PA consultants who work with them on the ground for implementation. We also build support and service levels into our client SLAs
• User can manage status and priority of support tickets: No
• Phone support: No
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: To be agreed with customers on a case by case basis
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: We offer upfront onboarding and also ongoing coaching support
• Service documentation: Yes
• Documentation formats:
  • PDF
  • Other
• Other documentation formats: Documentation provided within the service
• End-of-contract data extraction: When the contract ends, assuming there is no renewal, the PA team will delete all data and close user accounts. All the data that is loaded onto the platform has been generated by the customer's database / datawarehouse so if they wish to gain access to it outside the platform they can ask their information team to run an extract locally.
• End-of-contract process: We will offer an extension to the initial term. We will agree the exit process as part of the initiation phase of the contract. The cost of this will be agreed as part of the contracting process.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The application uses responsive design principles to allow the application to adapt to smaller mobile devices and tablets
• Service interface: Yes
• User support accessibility: WCAG 2.1 A
• Description of service interface: PA provides a standard service interface for the solution.
• Accessibility standards: None or don’t know
• Description of accessibility: PA will agree the requirements for assistive technology support on a case by case basis.
• Accessibility testing: PA will agree the requirements for assistive technology support on a case by case basis.
• API: No
• Customisation available: Yes
• Description of customisation: This is agreed with customers on a case by case basis. Customers can request specific changes to the visualisations or calculations.

Scaling

• Independence of resources: We design the service to be highly scalable and provide a resilient and highly scalable infrastructure.

Analytics

• Service usage metrics: Yes
• Metrics types: On request we can report on activity/usage metrics to a organisation/location/named individual level over multiple time periods. We can show what pages users have been to and what they have viewed
• Reporting types: Reports on request

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: In-house
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v3.0
  • Encryption of all physical media
  • Other
• Other data at rest protection approach: To add
• Data sanitisation process: No
• Equipment disposal approach: In-house destruction process

Data importing and exporting

• Data export approach: Through the user interface.
• Data export formats:
  • CSV
  • Other
• Other data export formats: Excel / XLS
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Our base level of resilience is 99.85% but we can provide higher resilience on request.
• Approach to resilience: We use public cloud providers who provide highly resilient data centres, typically 99.85%. This level of availability can be increased on request using multiple availability centres.
• Outage reporting: We report outages using email alerts, and if agreed, we also notify named personnel in the buyer's organisation via phone. We notify planned outages via email alerts as well as online dashboard / web pages if they are available for the digital solutions.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Username or password
  • Other
• Other user authentication: Access is provided via the web and Hypertext Transfer Protocol Secure (HTTPS) to maintain. The connection to the site is using a valid, trusted server certificate issued by Microsoft IT SSL SHA2. The connection to the site uses TLS 1.2, ECDHE_RSA with P-256, and AES_256_CBC with HMAC-SHA1. KeyVault, an added security layer provided by MS Azure, holds passwords to authenticate against Power BI in an encrypted secure store. Azure KeyVault uses 2048-bit RSA keys. There are processed in software by Key Vault but stored encrypted at rest using system key in an HSM. RSAES-PKCS1-V1_5 [RFC3447] key encryption
• Access restrictions in management interfaces and support channels: Users cannot access the platform at all, they can only request support via email, phone or face to face interaction. The access provided to users only enables them to view the embedded dashboard web page.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Username or password
  • Other
• Description of management access authentication: Access is provided via the web and Hypertext Transfer Protocol Secure (HTTPS) to maintain. The connection to the site is using a valid, trusted server certificate issued by Microsoft IT SSL SHA2. The connection to the site uses TLS 1.2, ECDHE_RSA with P-256, and AES_256_CBC with HMAC-SHA1. KeyVault, an added security layer provided by MS Azure, holds passwords to authenticate against Power BI in an encrypted secure store. Azure KeyVault uses 2048-bit RSA keys. There are processed in software by Key Vault but stored encrypted at rest using system key in an HSM. RSAES-PKCS1-V1_5 [RFC3447] key encryption

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: Between 1 month and 6 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: Between 1 month and 6 months
• How long system logs are stored for: Between 1 month and 6 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: DNV GL - Business Assurance
• ISO/IEC 27001 accreditation date: 13/12/2019
• What the ISO/IEC 27001 doesn’t cover: None - The entirety of PA Consulting Group's operations are certified to ISO27001. Additionally, any office that is not in scope is aligned to this standard
• ISO 28000:2007 certification: Yes
• Who accredited the ISO 28000:2007: DNV GL - Business Assurance
• ISO 28000:2007 accreditation date: 17/12/2015
• What the ISO 28000:2007 doesn’t cover: None - PA's certification is against the 2013 standard and covers PA Operations globally.
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: Yes
• Any other security certifications: Cyber Essentials Plus

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Our processes are aligned to ISO27001 and Cyber Essentials Plus.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Our change management processes follow an agile process.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Microsoft Azure security management - base level
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Microsoft Azure security management - base level
• Incident management type: Supplier-defined controls
• Incident management approach: Each client is provided with a security plan including an incident management process.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  "PA has implemented a fully documented environmental management system in compliance with ISO14001 to reduce our environmental impacts. We are Carbon Trust Standard (UK) accredited. PA is a signatory to the UN Global compact. We believe working towards net-zero brings social, economic and environment prosperity to our world, and would be delighted to share our net-zero action plan with you and others, for the benefit of us all.How we will continue our work towards net-zero during our partnership with you:; ; Building the business case. We will conduct a discovery phase with you to build a consistent, ambitious, and clear contract strategy, aligned to net-zero. Allowing us to build the policy and regulatory design for the contract and support the development of agreements with industry partners. Our work will include engaging senior stakeholders, conducting user research, mapping key challenges and opportunities and binding people together under a shared purpose for achieving Net-Zero. By the end of the discovery phase, we will have a clear net-zero strategy for the contact, coupled tangible actions required to successfully implement during the contract management phase, and the benefits associated with achieving them.; ; Measuring the carbon footprint. We will measure the ‘as-is’ state of the contract to give us an accurate benchmark to work from, and how we need to progress throughout the contract lifecycle. This will include measuring against scope 1,2&3 emissions, for example: Water use, electricity use, conducting a materiality checklist, measuring business travel, working from home, business travel accommodation, employee commuting etc. We will gather data across all scope of emissions and utilise carbon calculator tooling to give an accurate and transparent measurement, avoiding confusion and unintentional greenwashing. We will then be able to present these findings back to you and key stakeholders."

  Covid-19 recovery

  "Following the return to the workplace after COVID-19, we continue to improve workplace conditions supporting COVID-19 recovery effort including supporting hybrid working, and sustainable travel solutions , we will:; ; -Continue to maintain workplace policies, such as safe virtual spaces, cyber security, and remote working best practice, which facilitate workers to work more efficiently/productively in both a day to day and a COVID-safe environment if needed in the future.; ; -Remind workers of existing anonymous reporting channels which can be used to highlight health and safety breaches.; ; -Support hybrid working for employees who wish to work remotely for part of the week, as well as being set up for remote working should it be needed in the future, as per government guidance.; ; -Track effectiveness of workplace conditions and any changes on staff safety and mental health through an anonymous health check in, taken live during a regularly scheduled meeting.; ; To support the physical and mental health of people affected by COVID-19, including reducing the demand on health and care services, we will:; ; -Share, and support you to implement where agreed, initiatives we have rolled out to support the physical and mental health of our people through the pandemic. Take on board any learning/initiatives you have which are further developed than ours.; ; -Improve understanding and empathy across key stakeholders of the physical/mental health impacts of the pandemic, either direct or indirect."

  Tackling economic inequality

  "At a high level, we tackle economic inequality by managing supply chain resilience and capacity in the following two ways depending on the nature of the specific work and client environment.; ; -Discrete work packages that the SME deliver the end-to-end scope. These are effectively managed at a work package level with regular reviews with the SME leadership team.; ; -Embedded with our people working as one team. These are effectively managed day to day as part of the delivery team with monthly reviews with the SME leadership team.; ; We will meet economic inequality social value objectives through the following.; ; Demonstrate collaboration throughout the supply chain, and a fair and responsible approach to working with supply chain partners in delivery of the contract.; ; - Collaborate through regularly communicating expected future resource demand to suppliers enabling them to effectively plan and manage resource changes that can have material impacts to small businesses.; ; - Engage fairly by recognising the importance of cash flow to our SME partners and support them to maintain this through 30-day invoice payment.; ; - Contributions made by subcontractors will be recognised and attributed.; ; Create a diverse supply chain to deliver the contract including new businesses and entrepreneurs, start-ups, SMEs, VCSEs, and mutuals.; ; - On a work order basis, we’ll assess the skills needed and actively look for opportunities to engage local businesses as part of the delivery team - we regularly do this on other large scale delivery contracts; ; - We’ll work with you to define the key diversity objectives you want to see within the supply chain."

  Equal opportunity

  We deliberately attract and develop a diverse workforce as it benefits us collectively, providing greater creativity and innovation when solving problems and increasing team engagement and performance.; Inclusion and diversity is sponsored at the most senior level of the business by our PA Chair, CEO and CPO. We partner with globally recognised organisations (Stonewall, 30% Club, Generation Success) to learn how to best create an inclusive workforce and to hold ourselves accountable against similar corporations. We will encourage and support LGBTi+, BAME and people with protected characteristics into employment in the performance of this contract through: Inclusive recruitment, engaging and supporting protected characteristics within the client team, ensuring a proportionally reflective workforce and, measuring and monitoring.; ; To build strength through inclusion PA mitigate bias in assignment resourcing to enable a a more inclusive culture of access to opportunity, career progression and diversity in client delivery, all members of the assignment team have been trained on unconscious bias, and our people officer works with our resourcing managers to ensure bias does features in the candidates we propose for roles on this contract.; ; PA is an inclusive workforce and supports disabled people through our occupational health and safety, and mental health and wellbeing services. These services are available for implementing adjustments as advised by external medical professionals to support the employment of individuals with special needs, including on assignment.; ; Our tailored onboarding programs acclimate new employees with disabilities to the workplace culture and educate them on relevant policies and procedures but also include disability-specific information such as physical alterations, flexible hours, staff training and more ergonomic equipment and software.

  Wellbeing

  "We will enhance team wellbeing especially through periods of stress/hard deadlines via our mental health wellbeing (MHW) framework, adhering to Stevenson Farmer six core standards ensures;; ; 1. We will communicate and improve our mental health plan by communication from the top, and within the team, including a continuous feedback loop. ; ; 2. We will develop mental health awareness through regular comms about a variety of wellbeing issues e.g. return to the office, balancing stress, and financial wellbeing. ; ; 3. We will have open conversations about MHW based on ‘Well@HOme’ newsletter topics, and embedding these topics into team meetings,1:1 catch-ups, helping us safeguard our direct and indirect teams’ wellbeing. ; ; 4. We will provide employees with good working conditions to support wellbeing including: Covid-19 extended home working, providing flexibility to help staff balance work/home life in times of potential stress/hard delivery, workplace assessment ensuring the right ergonomic equipment is available at work/home and, promote effective people management through managers via: Ruby Golden, our full-time account wellbeing manager, ; ; 5. Leaders promoting staff to take regular annual leave at account meetings and regular email communications, active resource management to prevent overstretching delivery teams, Use of conversation cards in team meetings and one-to-ones, developed to support team leads discuss MHW and refer individuals to EAP if required.; ; 6. Routinely monitoring employee MHW by undertaking: engagement surveys to analyse UK employee MHW issues and monitor progress, and, account “Pulse check” surveys to understand how people are feeling and whether immediate intervention is required."

Pricing

• Price: £12,000 a unit
• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: Time limited access to platform agreed upon a case by case basis
• Link to free trial: Only provided on a case by case basis

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at GCloudFramework@PACONSULTING.COM. Tell them what format you need. It will help if you say what assistive technology you use.