Off the Shelf Public Sector/Government Libraries: Cyber Security Collection
Our Cyber Security Collection is designed to with real world scenarios to enable practical experiences. This collection starts by introducing learners to Cyber Crime and then Cyber security. The Data protection lessons go beyond GDPR and how to protect your organisations data, specific to the role of the learner.
Features
- Developed with Subject Matter Experts to ensure full compliance
- Completely editable: Ready to be personalised/extended by your experts
- Available anywhere and can be used on any LMS/LXP platform
- Multi language support included
- Online authoring tool training provided through Learning Pool Academy
- Unlimited support for administrators
- SCORM/xAPI compliant
- Fully WCAG 2.1 AA Compliant
- Designed for use on multiple devices
Benefits
- Ready made solution to meet compliance and skills training needs
- Content ready in minutes to address L&D challenges
- Material designed for organisational compliance around data protection/ security
- Address training requirements around core training needs
- Designed to complement face to face training
- Engaging and visually compelling content
- Easy to rebrand with your corporate identity
- Extend the content with your important messages in minutes
Pricing
£2,000 to £91,300 an instance a year
Service documents
Request an accessible format
Framework
G-Cloud 13
Service ID
9 3 4 3 1 7 9 2 5 3 8 9 6 6 8
Contact
Learning Pool Ltd
Lyndsay Dare
Telephone: 0207 101 9383
Email: tenders@learningpool.com
Service scope
- Software add-on or extension
- No
- Cloud deployment model
- Public cloud
- Service constraints
-
Our off the shelf Collections are SCORM 1.2/xAPI compliant, therefore the organisation would require an LMS that is compatible with SCORM/xAPI output.
Our Stream Authoring tool is available online, therefore the organisation would require a stable internet connection in order to use the tool. - System requirements
-
- Entirely SaaS based, requires a working supported browser
- Browsers - IE11, MS Edge, Firefox, Chrome, Safari, iOS, Android
- Client-side Javascript enabled for admin pages
- Computer - Windows 10 or above
- Computer - MacOS X 10.5 or above, Modern Linux variant
- Provides HTML5 output
- Cookies only store session information
User support
- Email or online ticketing support
- Email or online ticketing
- Support response times
- Cases are subject to established service levels: Level 1: Response within 30 minutes, Level 2: Response within 1 hour, Level 3: Response within 6 hours, Level 4: Response within 12 hours. Our helpdesk is open 24/7, 365 days a year.
- User can manage status and priority of support tickets
- Yes
- Online ticketing support accessibility
- WCAG 2.1 AA or EN 301 549
- Phone support
- Yes
- Phone support availability
- 24 hours, 7 days a week
- Web chat support
- No
- Onsite support
- No
- Support levels
-
Cases are subject to established service levels:
Level 1: Response within 30 minutes
Level 2: Response within 1 hour
Level 3: Response within 6 hours
Level 4: Response within 12 hours
Our helpdesk is open 24/7 365 days a year. All support costs are included in the cost of our subscriptions. No limits are applied to support requests.
Customers receive a service that is led by their Account Manager who are responsible for guiding customers get the most from their Learning Pool Service. In addition customers benefit from the support of our helpdesk team who are responsible for handling day to day technical cases and will also have access to a team of Customer Success Consultants who are on hand to advise on best practices. - Support available to third parties
- No
Onboarding and offboarding
- Getting started
-
When taking a subscription to one of our Collections, the content can be packaged and with you in a matter of days. We're the world's largest provider of Adapt-developed content with 40+ Collections of fully customisable off the shelf e-learning lessons. Our off the shelf approach is different; putting you in control to personalise your learning and publish to every device.
We will set you up on our Stream Authoring tool, through which you will be able to access your titles and start customising them to your organisation and requirements. Your Account Manager will work with you to plan the right training pathway for you. Utilising our online Academy (which is available to administrators and end users) and backed up by Product Coaches if required as well as our Support desk which is available 7 days a week, this is tailored to each customer's training needs for the Stream Authoring tool. - Service documentation
- Yes
- Documentation formats
-
- HTML
- ODF
- End-of-contract data extraction
- In the event of termination of your subscription, for any reason, Learning Pool will simply disable your subscription. All eLearning modules/lessons, SCORM and xAPI from the subscription must be removed from customers platform(s). All data regarding employee completion of learning remains within your LMS.
- End-of-contract process
- Learning Pool will work with your organisation to provide a smooth transition, and there is no additional cost applied for this exit service.
Using the service
- Web browser interface
- Yes
- Supported browsers
-
- Internet Explorer 11
- Microsoft Edge
- Firefox
- Chrome
- Safari
- Application to install
- No
- Designed for use on mobile devices
- Yes
- Differences between the mobile and desktop service
- All courses in our Content Library are Device Responsive therefore courses can be utilised on Desktop, Laptop, Tablet and Mobile.
- Service interface
- Yes
- User support accessibility
- WCAG 2.1 AA or EN 301 549
- Description of service interface
- The Stream Authoring tool from Learning Pool holds the e-learning Collection modules, which is a Web-based authoring tool. This is where the user can quickly find and search for their collection titles using a tag or keyword search.
- Accessibility standards
- WCAG 2.1 AA or EN 301 549
- Accessibility testing
- Our Stream Authoring tool and its output have been tested to ensure that it meets WCAG 2.1AA requirements.
- API
- No
- Customisation available
- Yes
- Description of customisation
-
All our Collections are editable and when we add new content, you pay the same price! What’s the catch? There is none… just great learning content at an affordable price.
Using Stream Authoring tool you will be able to present off-the-shelf material that’s customised to what you need. And that’s about more than adding your logo – you can add extra sections, change the language to match your terminology and add links to your internal policies.
You will have access to the Stream Authoring tool at no extra charge. This means that you can edit the existing collection content and use it to convert your own content from office-based applications to SCORM/xAPI compliant e-learning content.
Full training on the tool is provided through Learning Pool Academy, and it is easy to use so you will soon be creating or editing your content in-house to complement the Learning Pool offering.
Modules are updated regularly in line with latest legislation (within 3 months of any significant legislative changes) with additional new modules being created throughout the year. New modules, when released, are included in your subscription at no additional cost, ensuring you have up to date, engaging content.
Scaling
- Independence of resources
-
Our infrastructure is built on a highly scalable architecture and we can meet your needs. We have internal controls to monitor server load and usage and more capacity is added where required.
Each customer can be provided with their own instance in our infrastructure, so the demands of other clients will have little to no impact on the smooth running of your service.
We supply the content, demand is covered by the learning system that the content is installed on.
Analytics
- Service usage metrics
- Yes
- Metrics types
- Metrics are provided by the Learning system where the content is launched from.
- Reporting types
-
- Real-time dashboards
- Regular reports
- Reports on request
Resellers
- Supplier type
- Not a reseller
Staff security
- Staff security clearance
- Other security clearance
- Government security clearance
- Up to Security Clearance (SC)
Asset protection
- Knowledge of data storage and processing locations
- Yes
- Data storage and processing locations
-
- United Kingdom
- European Economic Area (EEA)
- User control over data storage and processing locations
- No
- Datacentre security standards
- Complies with a recognised standard (for example CSA CCM version 3.0)
- Penetration testing frequency
- At least once a year
- Penetration testing approach
- ‘IT Health Check’ performed by a Tigerscheme qualified provider or a CREST-approved service provider
- Protecting data at rest
- Encryption of all physical media
- Data sanitisation process
- Yes
- Data sanitisation type
- Deleted data can’t be directly accessed
- Equipment disposal approach
- In-house destruction process
Data importing and exporting
- Data export approach
-
All content in our collections can be exported as SCORM/xAPI and then used on any industry standard LMS. Our Learning Pool collections are powered by Adapt, which provides the ability to export storyboards as word documents.
Our third Party content is exported to the customer via a direct SCORM or xAPI file - Data export formats
-
- ODF
- Other
- Other data export formats
-
- SCORM
- MS Word
- XAPI
- Data import formats
- Other
- Other data import formats
-
- ODF to Learning Pool Stream Authoring tool only.
- This does not apply to third party 'Partner' Content
Data-in-transit protection
- Data protection between buyer and supplier networks
- TLS (version 1.2 or above)
- Data protection within supplier network
- TLS (version 1.2 or above)
Availability and resilience
- Guaranteed availability
- Learning Pool guarantees that the Service will be available to the Client for not less than 99.5% of the time. Uptime for the last 3 years has been over 99.97%
- Approach to resilience
-
Learning Pool services are hosted in modern cloud hosting environments and our hosting providers carry all the expected accreditations.
Our hosting architecture is designed with scale in mind and we are happy to provide customers with the detail on this at any time. - Outage reporting
- We report outages through our support desk and customer portal.
Identity and authentication
- User authentication needed
- Yes
- User authentication
-
- Public key authentication (including by TLS client certificate)
- Identity federation with existing provider (for example Google Apps)
- Username or password
- Access restrictions in management interfaces and support channels
- Learning Pool operate within the privilege of least necessary, and as such access to all our systems is restricted based on what is required for productivity. This is routinely audited as part of our ISO 27001 accreditation.
- Access restriction testing frequency
- At least every 6 months
- Management access authentication
-
- 2-factor authentication
- Public key authentication (including by TLS client certificate)
- Identity federation with existing provider (for example Google Apps)
- Username or password
Audit information for users
- Access to user activity audit information
- Users have access to real-time audit information
- How long user audit data is stored for
- Between 6 months and 12 months
- Access to supplier activity audit information
- Users have access to real-time audit information
- How long supplier audit data is stored for
- Between 6 months and 12 months
- How long system logs are stored for
- Between 6 months and 12 months
Standards and certifications
- ISO/IEC 27001 certification
- Yes
- Who accredited the ISO/IEC 27001
- SGS United Kingdom Ltd
- ISO/IEC 27001 accreditation date
- 09/11/2021
- What the ISO/IEC 27001 doesn’t cover
-
As per ISO/IEC 27001:2013 Statement of Applicability the following controls were excluded.
A.8.3.3 - Physical Media Transfer
A.14.2.7 - Oursourced Development
These will be included at the time of next audit (October 2022). - ISO 28000:2007 certification
- No
- CSA STAR certification
- No
- PCI certification
- No
- Cyber essentials
- Yes
- Cyber essentials plus
- No
- Other security certifications
- Yes
- Any other security certifications
-
- Cyber Essentials
- ISO27001
Security governance
- Named board-level person responsible for service security
- Yes
- Security governance certified
- Yes
- Security governance standards
- ISO/IEC 27001
- Information security policies and processes
-
We are committed to meeting the requirements of information security good practice, and seeking ways in which we can improve our security to mitigate new risks. To this end, we maintain an Information Security Management System (ISMS) which has been assessed and certified as meeting the requirements of ISO/IEC 27001:2013
The objectives of our Information Security Management System are based on a continual formal risk assessment process. Having identified and assessed risks to ourselves, and our customers, we select and resource specific information security controls. These are summarised in our current Statement of Applicability.
Everyone within Learning Pool has an important role to play in maintaining security of information, each with their own specific tasks, and responsibilities. We support staff efforts to secure information through continual staff training and awareness activities. Our ISMS is subject to annual review to ensure that at a strategic level we address the evolving information security threats and objectives needed for the organisation to be successful.
The ISMS scope covers the provision and protection of hosted learning management platforms, content and tools, customer and company and associated infrastructure. The management and monitoring of hosted service providers and the development of software solutions and mobile applications.
Operational security
- Configuration and change management standard
- Supplier-defined controls
- Configuration and change management approach
-
Our product manager retains responsibility for all change management requests and this process is managed through robust systems supported by Jira. Customers raise change requests through their Account Manager and these are prioritised based on customer need.
Once a change has been accepted for development it goes through our QA process which assesses the impact of the change across a range of issues including security. - Vulnerability management type
- Supplier-defined controls
- Vulnerability management approach
- As part of our ISO-27001 ISMS processes we maintain a risk-register, where we continually access risks/threats to our service. We deploy patches immediately if we determine that the venerability is high risk. We have subscribed to several reliable forums and we get an external party to provide penetration testing to identify potential risks.
- Protective monitoring type
- Supplier-defined controls
- Protective monitoring approach
- We have monitoring in place using multiple tools including Datadog, Newrelic and AWS Cloudwatch which will notify our Infrastructure team via our OOH alerting channels. We access the severity of the risk and determine the appropriate remediation. We triage all monitored alerts immediately, which are risk assessed.
- Incident management type
- Supplier-defined controls
- Incident management approach
- Incidents are recorded in our incident management software (JIRA).
Secure development
- Approach to secure software development best practice
- Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)
Public sector networks
- Connection to public sector networks
- No
Social Value
- Fighting climate change
-
Fighting climate change
At Learning Pool, we are committed to doing the right thing, focusing on the communities we live and work in and develop a strong focus on environmental initiatives to reduce our and our customers carbon footprint. Our EcoPool policy is in line with the fantastic work of our CSR team and mitigating our impact on the environment is built into our CSR goals. It’s intentionally ambitious and centres around building on great work we do and ensures we act as a responsible business and our goal of becoming a carbon negative company in the next 3 years.
As an online business, we already empower our customers to help create a more sustainable world by using our technology. We also take a proactive approach to being a responsible business and we know we have a responsibility to the environment beyond a legal or regulatory requirement.
We are committed to reducing our environmental impact and improving our environmental performance as an integral part of our business strategy, with focus on energy and resource usage, reduction in travel, and team communications and education. We will encourage customers, suppliers, and other stakeholders to do the same.
In addition, we developed Net-Zero Off the shelf Collection that can be used as a blended or full e-learning program to empower employees inside and outside of the workplace.
We were also acknowledgement of our efforts to find greener ways to work with the Environmental Best Practice Award at the Green Apple Awards 2021. - Covid-19 recovery
-
Covid-19 recovery
At Learning Pool, we’ve focused on the potential impact the spread of the virus could have on our team, their families and our global client base, as well as doing everything we could to support both mental health and wellness and best in class operational service for both our staff and the clients we serve. One of our core values is ‘doing the right thing’ and with that in mind, we introduced measures to help keep our colleagues and customers safe.
We moved to work from home where possible and introduced conditions for those who attended the office such as social distancing. We did not reduce the team or have anyone on furlough, we actually continued to grow the team significantly. We continued to provide customer service with support, flexibility and open communication across the business. A buddy system and mental health first aid training were introduced for people to ensure that the risk of isolation and loneliness was minimized as much as possible. Regular surveys help us to understand how the team are doing and we supported with professional help in the form of counseling, financial guidance etc.
The team were also encouraged to use their paid volunteering time to assist the community and given paid time off to attend for vaccinations and boosters.
To help our customers support their staff, we also launched the Coronavirus Course Essentials content collection consisting of the following modules: Coronavirus, Remote Working, Remote Working for Managers, Display Screen Equipment, Healthy Lifestyles, Conference Call Etiquette, Email Stress, and Mental Health Awareness. - Tackling economic inequality
-
Tackling economic inequality
The Good Work Plan framework is well embedded within the business. All team members have clear written statements of terms and conditions with clear employment status, hours of work and time off provisions which are more favorable than statutory requirements.
Employee wellbeing is important to us and we have various resources such as training materials, an Employee Assistance Programme and Mental Health First Aiders to support the team in this area. Our employees have a voice through mechanisms such as our Business Improvement Group, and we are proud that our engagement has been recognised in the form of Platinum Investors in People accreditation.
The purpose of the Learning Pool Equal Pay Policy is to ensure that all employees are paid equally and fairly under the right of all employees to receive just pay, and to ensure that pay and benefits are determined without discrimination through good equal pay practice. We are committed to the Living Wage Foundation rate of pay as a minimum.
Learning Pool is committed to the principle of equal pay for all our employees. Learning Pool aims to ensure there is no sex bias, or other discriminatory bias, in its pay systems due to sex, pregnancy, maternity, ethnic origin, age, marital status, disability, fixed-term status or part-time hours of work.
Through the growth of the business, we have been able to provide over 150 quality jobs in the last 12 months and an additional 40+ promotional opportunities. We support IT apprenticeships within the business, provide work placement opportunities for students who are both post primary and studying at degree education, and provide careers guidance (e.g. mock interviews, CV support, careers talks). - Equal opportunity
-
Equal opportunity
Learning Pool is committed to a policy of treating all employees and job applicants equally at all times. No employee, or potential employee, shall be treated less favourably on the grounds of race, colour, religion, nationality, ethnic origin, sex, pregnancy, maternity, marital status, age, part-time working, fixed-time working, disability, sexual orientation or gender reassignment nor be disadvantaged by the imposition of qualifications or requirements which cannot reasonably be justified as necessary on operational or business grounds. We recruit, train, develop and promote on the basis of merit, ability and job requirements.
Our Equal Opportunities Policy is published within our handbook and this is supported by Unconscious Bias training for all team members as part of our induction. All those who are involved in recruitment and selection receive in depth training in fair employment principles and processes which is focused on accessible, merit based, objective hiring practices. We have a flexible approach to work which supports the inclusion of disadvantaged groups such as people with disabilities. We are accredited by Diversity Mark NI, an award given following an assessment process which ensures a required standard of commitment to advancing Diversity and Inclusion.
Learning Pool wholeheartedly acknowledges that Modern Slavery in all forms is a serious violation of human rights. We expect all of our employees to recognise the importance of this issue and to utilise our Openness and Whistle-Blowing policies to address any concerns that they have including with our suppliers, customers and all those who are directly linked to our business. Our commitment can be demonstrated by the fact that we have made our Modern Slavery e-learning module free to all, to encourage wider awareness of the subject. https://www.learningpool.com/modules/ modern-slavery-and-human-trafficking-coreskills/#/ - Wellbeing
-
Wellbeing
Employee wellbeing is incredibly important to Learning Pool. As a CSR “World Leader” (International CSR Excellence Awards), achieving both Gold and Silver Awards for Family Commitment and Leadership we were commended by judges for our efforts to help colleagues, customers and friends with mental health and wellbeing support throughout the pandemic. The judges said: “Over the last few years, Learning Pool has embedded an ambitious employee engagement, support and CSR strategy. It has worked with mental health and wellbeing charities to spread mental health and mindfulness support.” They continued: “Raising awareness of important issues is a high priority and so, Learning Pool has made some of its topical learning modules available on its website for free, forever.”
As a result of its success at the 2021 International CSR Excellence Awards, Learning Pool will have its winning paper published in The Global Guide to CSR Excellence, the leading international work of reference on corporate social responsibility best practice.
All of the Learning Pool team have access to support through our Employee Assistance Programme, which includes access to counseling services, Mental Health First Aiders and our “Your Wellbeing” learning content. In addition to the learning content covering topics such as stress and resilience, we have regular mental health awareness sessions delivered by mental health practitioners, gym membership, yoga classes, flexible working, enhanced holidays/maternity/paternity/adoption leave.
Pricing
- Price
- £2,000 to £91,300 an instance a year
- Discount for educational organisations
- No
- Free trial available
- No