CIRRUSinsite

Service scope

Software add-on or extension: No
Cloud deployment model: Hybrid cloud
Service constraints: There are no significant constraints that buyers should know about.
System requirements: Standard desktop or laptop capable of running web browser

Mobile devices are supported but some functionality might be limited

User support

Email or online ticketing support: Yes, at extra cost
Support response times: 1 Business Day. Our dedicated Technical Support team supports customers during contracted hours of support. Response times are aligned to the following incident priority levels:
A - Critical, respond in 2 working hours, providing circumvention instructions where possible or fix within 24 working hours..
B - Major, respond in 4 working hours, providing circumvention instructions where possible or fix within 48 working hours.
C&D - Functional or intermittent Incident, respond in 8 working hours, providing circumvention instructions where possible or fix within 7 working days Classification details are available for each Priority.
User can manage status and priority of support tickets: Yes
Online ticketing support accessibility: None or don’t know
Phone support: Yes
Phone support availability: 9 to 5 (UK time), Monday to Friday
Web chat support: No
Onsite support: Yes, at extra cost
Support levels: Standard Support - available during 08:00 – 18:00 hours, Monday to Friday (not English Public Holidays). Incidents may be logged via the web, telephone or email during these times. Additionally, Incidents may be logged via the web outside of these hours, but they will not be progressed until the next working day. Software fixes will be progressed during these hours, and a release made available in line with the Customers agreement. 7 days per week – see Standard Hours, the addition being able to log and receive responses to Incidents during the additional hours. Please note that we operate a Restoration of Service (RoS) approach to support on the additional days e.g. Saturday, Sunday and English public holidays – See below for RoS definition. 24/7 - see 7 days per week, the addition being able to log and receive responses on a 24/7 basis. Restoration of Service (RoS) – during extended hours of support the aim is to get the Customer operational as soon as possible. Software fixes will not be provided during the additional hours of support. Incidents remain the responsibility of the Technical Support team throughout the life cycle.
Support available to third parties: No

Onboarding and offboarding

Getting started: CIRRUSinsite is built to be inherently intuitive to use and has minimalist design ethos. As such, there is a very short and manageable learning curve. To support the learning process online training via a series of short, pre-recorded video lessons is provided; the videos explicitly show how the software works and provide a demonstration of the in-built tools. In addition, a short user guide is provided which gives instructions on how to use the software as well as its key functionalities and benefits. This is built into the system itself under the help section.

In addition, a support line is open during office hours which can be called upon for problem solving and any initial issues.

At additional cost, onsite training can be provided. Prices can be negotiated upon request.
Service documentation: Yes
Documentation formats: HTML
End-of-contract data extraction: CIRRUSinsite provides users with the ability to perform custom downloads of data in a range of different formats depending on the type of survey product being downloaded. Users would be able to extract all the data from the system in a format of their choosing using the download capability. Users with large volumes of data, or many projects and sites, would be able to receive a full download of their data holding for an additional fee rather than having to perform manual downloads.
End-of-contract process: Once the contract has ended all accounts will be removed from the service and any data will be destroyed.

Using the service

Web browser interface: Yes
Supported browsers: Microsoft Edge

Firefox

Chrome

Safari
Application to install: No
Designed for use on mobile devices: Yes
Differences between the mobile and desktop service: The application has been designed using responsive principles, the interface will scale according to the size of the device it is being viewed on. In some circumstances this may lead to tools and menus being hidden or rolled-up into menu buttons. Some functionality requiring precise map interaction might be difficult to accomplish on mobile devices.
Service interface: Yes
User support accessibility: WCAG 2.1 A
Description of service interface: The CIRRUSinsite interface is a web-based platform designed to work on modern browsers. Projects are listed in a card interface, each project consists of a series of surveys, and in each survey there is a list of available aerial survey products. For each product available on a survey, users are able to view and/or download the product data depending on their access rights. Interactive viewers enable the viewing and analysis of the survey data in 2D or 3D depending on the type of data being viewed.
Accessibility standards: None or don’t know
Description of accessibility: There are no known accessibility issues.
Accessibility testing: None
API: No
Customisation available: No

Scaling

Independence of resources: We use a Hybrid Cloud platform with compute power provided from a Private Cloud and storage provided by elastic storage in Microsoft Azure. The compute power is elastic enabling the service to scale up and down with demand. Storage is on a per client basis and is isolated from other clients, ensuring security through separation along with protection against excessive demand from other users.

Analytics

Service usage metrics: Yes
Metrics types: • Usage of each data viewer
• Download metrics including area selected and format chosen
• User access audit logs.
Reporting types: Reports on request

Resellers

Supplier type: Not a reseller

Staff security

Staff security clearance: Conforms to BS7858:2019
Government security clearance: Up to Developed Vetting (DV)

Asset protection

Knowledge of data storage and processing locations: Yes
Data storage and processing locations: United Kingdom
User control over data storage and processing locations: No
Datacentre security standards: Managed by a third party
Penetration testing frequency: At least every 6 months
Penetration testing approach: In-house
Protecting data at rest: Physical access control, complying with another standard
Data sanitisation process: Yes
Data sanitisation type: Explicit overwriting of storage before reallocation
Equipment disposal approach: A third-party destruction service

Data importing and exporting

Data export approach: CIRRUSinsite provides users with the ability to perform custom downloads of data in a range of different formats depending on the type of survey product being downloaded. Users would be able to extract all the data from the system in a format of their choosing using the download capability. Users with large volumes of data, or many projects and sites, would be able to receive a full download of their data holding for an additional fee rather than having to perform manual downloads.
Data export formats: Other
Other data export formats: Esri Shapefile

Esri File Geodatabase

GeoTIFF

AutoCAD DWG

Point Cloud LAS/LAZ/XYZ
Data import formats: Other
Other data import formats: GeoTIFF

Point Cloud LAS/LAZ/XYZ

Esri File Geodatabase

Data-in-transit protection

Data protection between buyer and supplier networks: TLS (version 1.2 or above)
Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

Guaranteed availability: Our service provides 99% uptime during the agreed hours of service.
Approach to resilience: Available on request.
Outage reporting: Real-time server monitoring provides alerts to our Cloud providers when services have failed, these outages are then reported to our clients through the Technical Support helpdesk.

Identity and authentication

User authentication needed: Yes
User authentication: 2-factor authentication

Identity federation with existing provider (for example Google Apps)

Username or password
Access restrictions in management interfaces and support channels: The service implements role-based access control so only users with administrative roles can access the service management interfaces.
Access restriction testing frequency: At least every 6 months
Management access authentication: 2-factor authentication

Audit information for users

Access to user activity audit information: Users contact the support team to get audit information
How long user audit data is stored for: Between 6 months and 12 months
Access to supplier activity audit information: Users contact the support team to get audit information
How long supplier audit data is stored for: Between 6 months and 12 months
How long system logs are stored for: Between 6 months and 12 months

Standards and certifications

ISO/IEC 27001 certification: Yes
Who accredited the ISO/IEC 27001: Lloyd’s Register Quality Assurance Limited
ISO/IEC 27001 accreditation date: 01/05/2020
What the ISO/IEC 27001 doesn’t cover: It excludes information handled within client specific secure environments that operate under more stringent security controls and A.14.2.4 Restrictions on changes to software packages.
ISO 28000:2007 certification: No
CSA STAR certification: No
PCI certification: No
Cyber essentials: No
Cyber essentials plus: Yes
Other security certifications: No

Security governance

Named board-level person responsible for service security: Yes
Security governance certified: Yes
Security governance standards: ISO/IEC 27001
Information security policies and processes: Atkins Aerospace, Defence, Security and Technology (ADS&T) holds ISO 27001 and all our UK businesses are independently certified as achieving the ISO 9001:2008 quality management standard. Atkins follows a Business Management System (BMS) approach that brings together all of our business processes in one place. The BMS assures our clients through the certification of ISO 9001, OHSAS 18001 and ISO 14001, and forms a key part of the Atkins Governance Framework, which also includes our Group Policy Statements and Code of Conduct. BMS is key part of our governance process, translating the Group controls into a set of core processes that are applicable across the business.

Operational security

Configuration and change management standard: Supplier-defined controls
Configuration and change management approach: Configuration control is performed using source code management and version numbering. Our change management process is invoked whenever a change to the system is required. A change management plan is created, including identification of risks and associated mitigation. Software changes are managed in accordance with TickITplus accredited quality framework and taken through rigorous testing cycles. Before installing in the live environment, a rollback plan is formulated and any required downtime agreed. The changes are installed in live environment and checks performed to ascertain the change was successful. Where problems arise the rollback plan is initiated restoring system to baseline state.
Vulnerability management type: Undisclosed
Vulnerability management approach: N/A
Protective monitoring type: Undisclosed
Protective monitoring approach: Atkins provides:
• 24 / 7 / 365 monitoring of server availability and performance with a restart option should the server fail out of hours
• Threshold monitoring to ensure potential problems are detected and addressed before they become critical
• Failover at any time of the day or night in the event of complete server failure
• Secure off site data backup
• Disaster Recovery procedures and management Business hours support services for non-critical incidents.
Incident management type: Supplier-defined controls
Incident management approach: Service failure severity types:
Severity1 •Constitutes Service loss, preventing system usage •Critically impacts activities of Authority that depend system use; •Causes corruption of Authority Data.
Severity2 •Prevents operation of particular sub-system. Could potentially: •Adversely (majorly) impact Authority activities that depend on system use. No workaround available •Cause disruption to Authority - more than trivial but less severe Severity1
Severity3 •Reproducible, has adverse impact on the activities of Authority. Can be reduced to moderate adverse impact, if workaround available.
Severity4 •Intermittent/ non-reproducible. Minor adverse impact on End user service provision.
Severity5 •Cosmetic flaw. Doesn’t undermine End User's confidence in displayed information.

Secure development

Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

Connection to public sector networks: No

Fighting climate change: Fighting climate change

Atkins is committed to fighting climate change as evidenced through becoming carbon neutral in 2021 as we drive our carbon emissions down to our net zero target by 2030. We have signed up to science based targets to reduce our own emissions through the global Race to Zero initiative.
Our commitment does not stop here; we are supporting our clients to meet their environmental reduction targets too. That is why we are upskilling our staff to understand the environmental impact of decisions, and to use these as considerations throughout the delivery lifecycle to provide better solutions for our clients. We will work hand in glove with our clients, helping provide awareness of the climate impact of the decisions that could be made such as circular economy opportunities.
CIRRUSinsite enables clients to minimise site visits, by capturing data from surveys and ensuring it is retained and available for future use. For example, measurements can be taken using relevant existing data without the need for additional site visits.
Atkins is also committed to creating a healthy workplace and we do this through our board-sponsored Health and Wellbeing Steering Committee. We’ve taken a data-led approach to developing our health and wellbeing framework which is focussed around physical, mental and financial wellbeing. Our industry-leading plans encompass a diverse range of initiatives and campaigns, such as mental health first aiders and volunteering days.
CIRRUSinsite can support reductions in the EHS risks clients face by making best use of survey data. For example, measurements can be made from drone survey data without the need to physically work at height.

Pricing

Price: £0 to £3,000 a licence a month
Discount for educational organisations: Yes
Free trial available: Yes
Description of free trial: We can provide an Evaluation Licence, free of charge, on request. This enables potential customers to use the full version of the product for a limited period of time, for a single project. A User Guide and telephone support is provided during the evaluation period.

Features

Benefits

Service documents

Framework

Service ID

Contact

Service scope

User support

Onboarding and offboarding

Using the service

Scaling

Analytics

Resellers

Staff security

Asset protection

Data importing and exporting

Data-in-transit protection

Availability and resilience

Identity and authentication

Audit information for users

Standards and certifications

Security governance

Operational security

Secure development

Public sector networks

Pricing

Service documents

Cookies on Digital Marketplace

CIRRUSinsite

Features

Benefits

Pricing

Service documents

Framework

Service ID

Contact

Service scope

User support

Onboarding and offboarding

Using the service

Scaling

Analytics

Resellers

Staff security

Asset protection

Data importing and exporting

Data-in-transit protection

Availability and resilience

Identity and authentication

Audit information for users

Standards and certifications

Security governance

Operational security

Secure development

Public sector networks

Social Value

Pricing

Service documents