eLearning Training Courses

Service scope

Software add-on or extension: No
Cloud deployment model: Public cloud
Service constraints: Planned maintenance means any pre-planned maintenance relating to course content or any known critical 'Moodle' updates that we schedule.

Aspire Europe would provide 24 hours notice to customers if such maintenance were to interfere with accessibility to the courses.
System requirements: Google Chrome for the supported browser.

User support

Email or online ticketing support: No
Phone support: Yes
Phone support availability: 9 to 5 (UK time), Monday to Friday
Web chat support: No
Onsite support: No
Support levels: Aspire Europe will provide the following levels of support:
• Support Level 1 - Answering basic usage “how-to” questions about the use of Aspire Europe cloud support service provided at your organisation including the gathering of information relating to the end user problem and determining if the problem is related to Aspire Europe’s cloud support service or something else, including but not limited to, confirming Aspire Europe’s components and underlying services are operational and communicating e.g. our hosting server.
This level of support is typically provided by a member of Aspire Europe’s operations team.
• Support Level 2 - If an incident is determined to be Aspire Europe cloud software services related then escalation to a more technical level will be engaged in order to resolve an incident that is either technical, or not previously encountered. This does not include repeated queries on the same or substantial similar issues by different people – issues addressed by Level 2 technical will be documented and made available to Level 1.
Support available to third parties: No

Onboarding and offboarding

Getting started: On-boarding:
To obtain access, clients can register through the completion and return of a registration form confirming purchase order number.
New users will typically be granted access to the online system within one working day (Monday-Friday) on receipt of payment.
Each user will be registered onto the LMS, ‘Moodle’ (which hosts our user accounts and courses) and allocated their own account to enable access to their course(s).
Aspire Europe will provide users with login details via the preferred contact method established on completion of our registration form.
Users will use their login details to access their account on the LMS.
A users account will have unlimited access to the course(s) purchased for a 12-month period.
Service documentation: Yes
Documentation formats: PDF
End-of-contract data extraction: The only data is their history of courses used, there is no personal data. Upon expiry of the 12 month period, Aspire Europe will provide a copy of client data within 10 working days on request and in the format in which it was provided to us, if this is not possible, then we will provide the data in spreadsheet format.
End-of-contract process: Off-boarding
Upon expiry of the 12-month period, user access will automatically be disabled. Login details will no longer function, and the user accounts will no longer be accessible.
An automatic communication will be issued to a user 1 week prior to expiry informing them of the upcoming expiry of their licence.

Using the service

Web browser interface: Yes
Supported browsers: Microsoft Edge

Chrome

Safari
Application to install: No
Designed for use on mobile devices: Yes
Differences between the mobile and desktop service: Only HTML5 versions of the service will work on mobiles. Flash and HTML5 will work on the desktop service.

There is a dedicated mobile application that can be used for the Articulate courses.
Service interface: No
User support accessibility: WCAG 2.1 AA or EN 301 549
API: No
Customisation available: Yes
Description of customisation: Selection of course materials for different groups to create specific learning journeys
Addition of specific organisation information to provide greater relevance to the materials.
Branding and landing page customisation to make it more engaging and relevant

Scaling

Independence of resources: The service availability of the Data Centre (Memset) used by Aspire is 99.95% 24 hrs per day x 7 days a week x 365 days per annum

Analytics

Service usage metrics: Yes
Metrics types: Usage reports on users progress though the modules of the eLearning courses. Where a client has a number of users we provide a dashboard with an overview of progress.
Reporting types: Reports on request

Resellers

Supplier type: Not a reseller

Staff security

Staff security clearance: Staff screening not performed
Government security clearance: Up to Security Clearance (SC)

Asset protection

Knowledge of data storage and processing locations: Yes
Data storage and processing locations: United Kingdom

European Economic Area (EEA)
User control over data storage and processing locations: No
Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
Penetration testing frequency: At least once a year
Penetration testing approach: Another external penetration testing organisation
Protecting data at rest: Physical access control, complying with another standard

Encryption of all physical media
Data sanitisation process: Yes
Data sanitisation type: Deleted data can’t be directly accessed
Equipment disposal approach: A third-party destruction service

Data importing and exporting

Data export approach: Users have a right to request a copy of the information that we hold about them, however, it is only tracking data on when they used courses. If they would like a copy of some or all of their personal information, they are directed to email gcloud@aspireeurope.com. Aspire Europe will then provide a copy of all customer provided customisation within 10 working days in the format in which it was provided, where this is not possible it will be provided in spreadsheet format.
Data export formats: CSV
Data import formats: CSV

Data-in-transit protection

Data protection between buyer and supplier networks: TLS (version 1.2 or above)
Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

Guaranteed availability: The service availability of the Data Centre used by Aspire is 99.95% 24hrs per day x 7 days a week x 365 days per annum.

For any unplanned issues with the availability of our service, we will provide the user with a time extension to their existing licence. This will ensure that the user never loses out on receiving their full time allocation for the licence they have purchased.
Approach to resilience: The data provided by our product is hosted by a UK server which stores its data in two UK sovereign data centres. This company provides the highest degree of fault tolerance, data durability, resilience against disk failures, regular maintenance to critical systems, gigabit fibre between the two data centres providing a bomb proof resilient system ensuring no single point of failure.
The servers are backed up on a daily basis using a secure service provided by our server hosting company. In the unlikely event of disk failure, recovery of data would take no more than 1 working day.
Outage reporting: Email alerts and notifications within Moodle.

Identity and authentication

User authentication needed: Yes
User authentication: Username or password
Access restrictions in management interfaces and support channels: Administration access to management interfaces are only given to Aspire Europe staff and requires username and password authentication.
Access restriction testing frequency: At least once a year
Management access authentication: Username or password

Audit information for users

Access to user activity audit information: Users contact the support team to get audit information
How long user audit data is stored for: At least 12 months
Access to supplier activity audit information: Users contact the support team to get audit information
How long supplier audit data is stored for: At least 12 months
How long system logs are stored for: At least 12 months

Standards and certifications

ISO/IEC 27001 certification: No
ISO 28000:2007 certification: No
CSA STAR certification: No
PCI certification: Yes
Who accredited the PCI DSS certification: Elavon
PCI DSS accreditation date: 16/04/2020
What the PCI DSS doesn’t cover: Instore and telephone payments.
Cyber essentials: Yes
Cyber essentials plus: Yes
Other security certifications: Yes
Any other security certifications: Cyber Essentials

Cyber Essentials Plus

Security governance

Named board-level person responsible for service security: Yes
Security governance certified: No
Security governance approach: It is built into our ISO9001 quality management systems annual accreditation.
Information security policies and processes: As part of our ISO9001 quality management accreditation we have adopted the following policies in this area:
a) IT Policy
b) Records Management Policy
c) Security Policy
These policies are issued to new starters as part of our induction pack to educate staff on expectations in each of these areas.
These policies are annually reviewed as a minimum by the Managing Director to ensure they remain current legislation in the relevant areas.

Operational security

Configuration and change management standard: Supplier-defined controls
Configuration and change management approach: Memset the server hosting company maintains an extensive policy and control set to manage the security, privacy, quality and environmental impact of our operations and services. An overarching integrated Compliance Management System is supported by an ISO27001:2013 accredited ISMS, ISO14001:2105 EMS and an ISO9001:2015 QMS. Additional PSN CoCo and PCI-DSS Merchant and Service Provider controls over and above ISO27001 requirements are managed from within these standards.
Vulnerability management type: Supplier-defined controls
Vulnerability management approach: Memset has continually evolving controls in place to reduce the risk of cyber security attack on our network, infrastructure and personnel to protect us from risk of compromise via our systems.
Tools include intrusion detection systems, strong network security and audit controls, privileged user access control systems to manage our system administrator access to customer solutions and regular security testing.
Protective monitoring type: Supplier-defined controls
Protective monitoring approach: Memset has continually evolving controls in place to reduce the risk of cybersecurity attack on our network, infrastructure and personnel and to protect us from risk of compromise via our systems.
Tools include intrusion detection systems, strong network security and audit controls, privileged user access control systems to manage our system administrator access to customer solutions and regular security testing.
Incident management type: Supplier-defined controls
Incident management approach: Memset maintains an integrated Incident Management system based on ISO 27001:2013 requirements and ITIL processes for all internal minor and major incidents. These processes interact with any further chance or problem management processes required on a case-by-case basis.

Secure development

Approach to secure software development best practice: Supplier-defined process

Public sector networks

Connection to public sector networks: No

Fighting climate change: Fighting climate change

We have moved our services entirely online.

Face to face courses no longer receive printed copies, everything is distributed digitally through our portal.

We have moved all our face to face delivery to virtual to reduce our carbon footprint in relation to travel emissions.

We have one company vehicle and it has been changed to electric to reduce emissions.
Covid-19 recovery: Covid-19 recovery

During the lock down we offered all our e-learning courses to people on furlough free of charge.
We continued to work throughout the pandemic and used the time to completely rebuild our training portfolio and keep people in employment.
Tackling economic inequality: Tackling economic inequality

We offer discounts for people who are unemployed or socially disadvantaged.

We have a trainee scheme where we look to provide opportunities for young people who have underperformed at A level and help them to move forward.
Equal opportunity: Equal opportunity

Our organisation is an equal opportunities employer. We are a micro organisation that balances our workforce based on capability and talent not sex, age or creed.
Wellbeing: Wellbeing

Our staff all have the opportunity to access subsidised private health care and all our staff have a blended home/work pattern that enables them to maintained a balanced lifestyle.

Pricing

Price: £225.00 to £30,000.00 a licence a year
Discount for educational organisations: No
Free trial available: Yes
Description of free trial: We will provide a free eLearning course demo on application.
The free demo does not include any associated exams or manuals.
Link to free trial: We will provide this on application

Features

Benefits

Service documents

Framework

Service ID

Contact

Service scope

User support

Onboarding and offboarding

Using the service

Scaling

Analytics

Resellers

Staff security

Asset protection

Data importing and exporting

Data-in-transit protection

Availability and resilience

Identity and authentication

Audit information for users

Standards and certifications

Security governance

Operational security

Secure development

Public sector networks

Pricing

Service documents

Cookies on Digital Marketplace

eLearning Training Courses

Features

Benefits

Pricing

Service documents

Framework

Service ID

Contact

Service scope

User support

Onboarding and offboarding

Using the service

Scaling

Analytics

Resellers

Staff security

Asset protection

Data importing and exporting

Data-in-transit protection

Availability and resilience

Identity and authentication

Audit information for users

Standards and certifications

Security governance

Operational security

Secure development

Public sector networks

Social Value

Pricing

Service documents