MONTERPOINT TECHNOLOGIES LIMITED

LearnerTrack.net

LearnerTrack is an MIS for local authority adult education services offering support for online enrolment and applications, course management and ESFA ILR requirements.

Features

• Online enquiries, applications and enrolments including Learning Agreements
• ILR management with integrated FIS error checking on dashboard
• Staff portals with Tutor registers
• Accounts and Finance including Tutor tracking and pay claims
• interfacing with multiple third-party systems (ESFA, LRS, BKSB...)
• Powerful, user friendly QAR based Analysis and management KPI reporting
• Room and Facility Booking
• Supported API

Benefits

• Designed with and for Local Authority Adult Education Services
• UK based Support, support portal and active user community
• 20 year history of uninterrupted services
• Improved data quality with single-entry, validation and error checking
• ideal for sub-contracting authorities
• unlimited users
• management dashboards
• Seamless enquiry, application and enrolments process

£20,000.00 to £100,000.00 an instance a year

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@monterpoint.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

969475516550916

Contact

Andrew Pontin
020 7733 7663
sales@monterpoint.com

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Hybrid cloud
• Service constraints: Planned maintenance that involves system shutdown takes place very rarely but can occur.
• System requirements: Modern browsers with javascript enabled

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Typically support tickets are responded to within the hour during office hours. Out of office hours and during weekends and bank holidays replies are normally posted at the start of the next working day. Emergency situations were extreme system failures are involved are treated differently and on a case by case basis and will typically involve very fast response times including response over weekends and holidays.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.1 A
• Phone support: No
• Web chat support: Web chat
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: WCAG 2.1 A
• Web chat accessibility testing: None
• Onsite support: No
• Support levels: Support is strictly limited to named supported users and this is included in the pricing arrangements which specify prices per supported user.
• Support available to third parties: No

Onboarding and offboarding

• Getting started: Online training and user documentation (wiki)
• Service documentation: Yes
• Documentation formats: HTML
• End-of-contract data extraction: The API can be used for data extraction.
• End-of-contract process: At the end of the contract we disable all authorisations and user accounts.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Public facing interfaces are designed on a 'mobile first' basis. User interfaces for many of the admin functions are more easily navigated via PC due to their complexity. We recommend that for the most part users do not use the non-public facing interfaces via mobile phones, although they can be.
• Service interface: Yes
• User support accessibility: WCAG 2.1 A
• Description of service interface: We have an interface for the API.
• Accessibility standards: WCAG 2.1 AAA
• Accessibility testing: None
• API: Yes
• What users can and can't do using the API: The version 1 API allows customers to get data from the service.; We are working on a version 2 that will allow interactive operations like;; * add new learner; * enrol on course
• API documentation: Yes
• API documentation formats:
  • Open API (also known as Swagger)
  • HTML
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: There are a great many settings and editable parameters that control what is available to different levels of user and what is published on the public facing aspects of the system.; ; Superusers can access a great deal of the customisable parameters.; Some aspects are limited to only the named supported users.

Scaling

• Independence of resources: The learnerTrack service capacity is typically underused. ; * We have arrangements at the data centre in place to expand bandwidth capacity at short notice.; * We have virtual machines running to spread processing activity for FIS operations which can be increased according to customer demand levels

Analytics

• Service usage metrics: Yes
• Metrics types: * server activity graphs; * user activity; **users currently online; **activity by users; *domain activity; **by hour of the day; ** by month; ** over last 60 days
• Reporting types: Real-time dashboards

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CHECK service provider
• Protecting data at rest: Physical access control, complying with another standard
• Data sanitisation process: Yes
• Data sanitisation type: Deleted data can’t be directly accessed
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: There is a range of specific csv downloads and an API.
• Data export formats:
  • CSV
  • ODF
  • Other
• Other data export formats: Json
• Data import formats:
  • CSV
  • Other
• Other data import formats: ILR XML

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: We guarantee 98% uptime. We have no refund mechanisms in place for not meeting this guarantee.
• Approach to resilience: Available on request.
• Outage reporting: * a public dashboard; * an API; * email alerts

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Username or password
• Access restrictions in management interfaces and support channels: Access is controlled by user characteristics. Access to any services required user sign-in. All controls are server side and hide inappropriate content and interfaces from users not authorised at the given level.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • 2-factor authentication
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber essentials plus: No
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: No
• Security governance approach: We work to ISO/IEC 27001 standards but do not currently have certification.
• Information security policies and processes: We regularly test our systems and processes with a series of internal audits to ensure that policies and processes are being followed.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Monterpoint has a structured Change Control process for managing requests for change and enhancements. All Requests for Changes (RFCs) are raised via the Service Desk and go through internal vetting by the support team in association with a senior developer before gaining authorisation from Management. All interface changes go through a beta testing phase before release to the live sites in www in agreement with the usergroup as a whole.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: All security critical patches from third party vendors such as Microsoft are implemented according to their recommendations. Patches are deployed depending on the severity of the problem and the level of testing required. Information about potential threats is found based upon initial and recurring risks assessments, internal procedures and known threats highlighted by both the industry and users.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: We undertake proactive monitoring of all services to identify potential compromises in line with GPG 13. The nature of the compromise determines how we then respond to a given incident. The speed of the response will be determined by the severity of the incident.
• Incident management type: Supplier-defined controls
• Incident management approach: Our incident management control processes are broadly aligned with ISO 27001. Reported security weaknesses will be recorded for tracking purposes and investigated by the head of IT.

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Social Value

• Wellbeing:

  Wellbeing

  Our product development process is based around building a community of adult education service professionals through online meetings, a community forum and and a wiki knowledgebase where users can share ideas and knowledge, co-operatively building an online resource.; ; We encourage customers use the forum to support to each other in technical aspects of using the LearnerTrack service, as well as to discuss policy issues that affect the community of users, helping them to work towards adopting similar approaches to facilitate the development of features to support their shared requirements. The forum creates a platform for peer support, ‘buddy systems’ and mentoring. We realised that in some circumstances, people find it easier to speak to someone who isn’t part of the service support team. Peer support allows colleagues to support one another outside of the restrictions of the ‘official’ (and potentially chargeable) support channels structure and offers a great way to maximise the range of skills and experience held within the wider LearnerTrack usergroup. This approach can help new members of staff to understand aspects of the software capability and features faster and can support all staff to gain confidence and develop new skills; ; Our online usergroup and subgroup meetings offer the chance for collaborative working on shared projects to help build an integrated community of users who can support and instruct our development team in the design and development of features to streamline their service delivery and help alleviate day-to-day difficulties by creating simpler approaches and, for example, automated support for tedious tasks.; ; Monterpoint supports the health and wellbeing in the contract workforce by supporting flexible working arrangements and allowing staff to plan working hours to suit the patterns of their personal lives. We also offer access to physical training instructors and through arrangements with local health and wellbeing organisations.

Pricing

• Price: £20,000.00 to £100,000.00 an instance a year
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@monterpoint.com. Tell them what format you need. It will help if you say what assistive technology you use.