Wavemaker Ltd

Innovation Product Development

As emerging technology consultants, we work with clients to develop  insight-driven Innovations that solve real problems and have an on-going positive impact. Services include:

1. Innovation strategy & consultancy to unlock growth
2. Develop insight-driven solutions and features
3. Deploy emerging technology pilots

Features

• Innovation consultancy & strategy
• Emerging technologies pilot design
• Emerging technologies pilot build
• Pilot User Testing
• Start Up Accelerator days & workshops
• Emerging technology trends briefing packs
• Quarterly Innovation performance review reports

Benefits

• Help inform and guides digital & innovation Gov investments
• Test & learn from new pilots quickly
• Supports stakeholder business case conversations
• Supports understanding and education of emerging technologies
• Connect Gov with best start-up digital talent and thinking
• Monitor and track pilots with real-time reporting dashboards
• Informing innovation product roadmaps with new features and optimizations

£5,000 to £200,000 a unit

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at jamie.page@wmglobal.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

981280282561733

Contact

Jamie Page
442078032000
jamie.page@wmglobal.com

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: We provide Innovation consultancy and optimisation recommendations but we will sometimes partner with our tech partners in areas such as voice app and AI Assistant development and work in collaboration with them.
• Cloud deployment model: Private cloud
• Service constraints: No
• System requirements: None

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: During working week SLA is typically between 2 - 12 hours (depending on query) . On weekends, unless urgent; queries will be dealt with the following working day.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Onsite support
• Support levels: As part of our consultancy or pilot development projects we will assign you a project manager and Innovation lead. We will run regular status calls; meetings and be on hand via phone or email if needed.
• Support available to third parties: No

Onboarding and offboarding

• Getting started: Initial call with the Wavemaker Innovation team to scope out requirements and develop and project plan.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: Via request to our team
• End-of-contract process: Once an Innovation strategy or pilot is delivered; clients will receive the outputs in the form of written recommendation reports. Wavemaker will host an end of contract review, detailing options and costs for next stage development or ongoing management, updates and support.

Using the service

• Web browser interface: No
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: This is a consultancy & product development product so the communication with the agency is via email and Teams. ; ; The pilots we develop will range from Voice services, AI Assistant, mobile & desktop apps (but will be optimized where needed)
• Service interface: No
• User support accessibility: None or don’t know
• API: No
• Customisation available: Yes
• Description of customisation: Each of our projects is full bespoke to users - from the strategy, design, product development, build and reporting.

Scaling

• Independence of resources: Innovation Strategy - we have a sizable team of consultants to support and will scale up team according to demand if needed; ; Digital Products and services (with our tech partners) will have on-going maintenance contracts including regular penetration tests and system checking to ensure consistent functionality

Analytics

• Service usage metrics: Yes
• Metrics types: This will depend on the pilot being delivered. However standard tracking metrics will include users (new and return); device type; session time; content engaged with drop off journey points, which can be tracked & reported at agreed cadence.; ; During strategy stage, users will have access to an online, live status board (e.g. MIRO) for project tracking.
• Reporting types:
  • Regular reports
  • Reports on request

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: Range of tech start-up partners

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: No
• Datacentre security standards: Supplier-defined controls
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest: Other
• Other data at rest protection approach: Client sensitive data is encrypted in transit via a secure file transfer solutions in line with industry standards. Encryption of data on file servers and SAN is not standard and we perform an information security risk assessment and ensure countermeasures are established to mitigate identified information security risks. All client data is stored in secure data centres in line with the requirements of the WPP Information Security policy.
• Data sanitisation process: Yes
• Data sanitisation type: Deleted data can’t be directly accessed
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: Via request to WM Innovation
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: Private network or public sector network
• Data protection within supplier network: Other
• Other protection within supplier network: WPP have a strategic partnership in place with IBM covering the management and maintenance of our technology infrastructure. As part of this partnership IBM are responsible for managing and maintaining our firewalls in line with industry good practice. Changes to our firewalls are managed via our normal change management process and require formal approval before implementation. Information technology infrastructure, applications and workstations are protected by enterprise-class antivirus software, which ensure antivirus and malware signatures are updated automatically.

Availability and resilience

• Guaranteed availability: SLAs are agreed on a case by case basis, including how users are refunded should we not meet the guaranteed levels of availability.
• Approach to resilience: Available on request
• Outage reporting: Our BCP is designed to ensure we continue to have systems and procedures in place, to combat business interruption and allow us to communicate quickly and efficiently with each other and with our operating companies and suppliers. Our BC Team (Business Continuity Team) ensure all aspects are the business are captured to ensure BC can be maintained. Our BCP must also meet control requirements as set out by WPP's General Computing Controls. Each control test is audited by WPP annually to ensure our BCP continues to meet these requirements.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Username or password
• Access restrictions in management interfaces and support channels: We only provide direct access to the agency members and clients who need it
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • 2-factor authentication
  • Username or password

Audit information for users

• Access to user activity audit information: No audit information available
• Access to supplier activity audit information: No audit information available
• How long system logs are stored for: Between 1 month and 6 months

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: No
• Security governance approach: The complexity of the services we provide to clients does not lend itself to third party assurance reports, which are designed to provide independent assurance over commodity services such as IT or finance operations. On this basis we do not seek to employ third party reports to provide assurance over our control environment. We have a formal General Computer Controls framework in place which defines the minimum standard of IT and information security controls applied across our business. Adherence to our General Computer Control framework is subject to periodic independent review by WPP Internal Audit, with findings tracked to resolution.
• Information security policies and processes: Wavemakers parent company, WPP, operates a well-established and formally approved information security management framework which comprises information security policies, risk assessment and independent assurance processes. The WPP information security management framework is mandated across all WPP companies and compliance with the framework is subject to periodic independent review by WPP Internal Audit, with findings tracked to resolution

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: WPP runs a robust IT audit program through regular reporting, self-assessments and annual WPP internal audits, and external audits to ensure controls are operating.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: All GroupM computer resources have malware and AV protection installed. Vulnerabilities and potential vulnerabilities in both infrastructure and applications are identified through a managed Vulnerability Management Service (VMS). Such items are evaluated and remediated through a standard process. Services are kept up to date with security patches through the standard patch management service (incorporating a Security Advisory and Integrity Service). A Malware Defence Management Service (MDMS) ensures that a secure Server environment is maintained. This protects against malicious code such as malware, viruses and intrusion (this includes the provision and maintenance of anti-malware services, along with segregation/filtering through firewalls).
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: All incidents are logged through our WW IT Service Desk ensuring the Incident Management Process is followed and all actions recorded. We have policies and operating procedures as well as automated monitoring tools managed via the IT Service Desk. WPP have a specialist forensic team to provide guidance and action as required.; We have clearly defined escalation paths and assessment process in place regarding data breaches
• Incident management type: Supplier-defined controls
• Incident management approach: Our security incident management process is aligned with our standard ITIL type incident management process. 1. DETECTION REPORTING: a. Information security event detecting and reporting 2. ASSESSMENT AND DECISION: a. Assessment of information security event and decision on if it is information security incident 3. RESPONSES: a. Responses to information security incident, including forensic analysis b. Recovery from the information security incident 4. LESSONS LEARNT: a. Further forensic analysis, if required b. Identification of lessons learnt c. Identification of and making improvements to information security inc risk assessment and management review results and incident management scheme

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  GroupM introduced mandatory Climate Crisis 101 training for all employees, which aims to enhance the knowledge of climate change and the tools to take positive action at home and work.; ; The Employee Resource Group Greenmakers at Wavemaker aims to help all employees live a more suitable lifestyle in and outside work and to aid clients’ sustainable growth and help make a better future. Greenmakers set up the swap shop at Wavemaker in the summer, where employees could bring in an item of clothing and swap it to encourage sustainable clothing. Greenmakers have also organised a Christmas Gift Swap Shop coming up in December, where employees will be able to bring in old Christmas gifts they don't want and buy others to support environmental efforts for less waste.; ; Wavemaker introduced Carbon Calculator training to educate employees on how Wavemaker has pledged to reduce C02 emissions and how we can challenge and train our clients to do the same.; ; Wavemaker are committed to recycling in our Manchester and London offices. ; ; Wavemaker has introduced an office library where employees can swap and donate books.; ; WPP is working to develop the technology and standards that can be used to measure and reduce emissions from advertising globally. As part of that effort, GroupM commissioned research from independent specialists in carbon measurement to help create a robust methodology for accurately measuring emissions across the media supply chain to allow targeted interventions to reduce emissions.

  Tackling economic inequality

  Wavemaker gives all employees 2 paid angel days (volunteer days) per year, where they can sign up to participate in charity day/event and receive paid time off, outside of their annual leave entitlement.; ; Wavemaker have partnered with Visible Start, an initiative run by Brixton Finishing School aimed at women who have been out of work for a period of time, to support them in getting back into positions within Media. Wavemaker supports this initiative by offering mentorships to women and working closely with the managers to support them when an individual applies for a role in the business. ; ; Wavemaker will be hosting an IPA Advertising Unlocked day in January 2023, where 30 students aged between 16-18 years of age will be hosted at the London office to learn about media and our business.; ; Wavemaker does not have a set charity that they support, instead they support many, but allowing new starters to the business to create an event to raise money for a charity of their choice. The most recent charity was Henry’s promise, which raised money for an orphanage in India. Previous events have included quiz nights to raise funds for independent mental health charities.; ; Wavemaker is celebrating the International Day of Disabilities coming up in November and as part of this, we have partnered with Hart Club charity to showcase neurodiverse artwork in the London office.

  Equal opportunity

  Wavemaker is a recognised member of the Disability Confident Scheme, committed to educating our teams on identifying disabilities and supporting individuals of all levels in the organisation. One way we do this is through training and the disability empower guide is a learning and training platform available to all employees at Wavemaker. The training covers topics such as understanding disabilities, how to support employees with conditions or impairments, what not to say, and what you can say instead.; ; Some key examples of work that the Employee Resource Groups have completed in 2022 are: ; ;  Women at Wavemaker recently celebrated with educational talks around menopause week, with the launch of the new menopause policy at Wavemaker and holding a panel to discuss the importance of recognising and supporting employees experiencing menopause.; ;  Our Unite team trained groups of employees on inclusive language during pride month in June 2022. Completing this training allowed employees to educate themselves in a safe space where they could ask questions and to allow our employees to think about the inclusive language we can use when speaking with our clients. The Unite team is also developing an inclusive language dictionary that will be available for all employees to use in 2023.; ; Wavemaker achieved 60% diversity in our apprenticeship entry intake from our 2021 apprenticeship programme and we continue to develop them further by offering them full time positions in our business. ; ; Wavemaker also introduced a toolkit and training sessions for inclusive planning. The purpose of this training was to encourage our employees to ask the right questions of our clients, to inspire them to think of different audiences, how to provoke our clients to think more inclusively.

  Wellbeing

  Wavemaker has a partnership with multiple wellbeing providers and have started to introduce UNUM workshops into the business. These are quarterly sessions open to all employees that focus on wellbeing, the workshops will have different topics for every session, with the next one in January 2023 focussing on healthy living.; ; For Mental Health Awareness week, Wavemaker highlighted the importance of maintaining positive mental health at work. The Employee Assistance Provider Lifeworks ran a session on what you can do on the platform and how it can help our employees. Wavemaker also organised fitness sessions where a personal trainer came on-site to demonstrate exercises to improve movement and maintain positive mental health. Additionally, our Employee Resource Groups conducted open sessions on managing mental health effectively and showing how they can be an avenue of support; there was also daily emails sent out with hints and tips.; ; Wavemaker launched the Mental Health Allies programme in 2021 to offer employees the opportunity to become certified mental health first aiders. Wavemaker currently have 6 Mental Health Allies across London and Manchester offices, and across the WPP network we have over 550 employees trained and certified in Mental Health. Mental Health Allies learn about the fundamentals of mental health, how to point people to the correct services and resources and how to keep people safe. The Allies are available to offer a listening ear, should someone need it.; ; Wavemaker employees are gifted a growth fund for the year, which supports and helps fund employees to learn a new skill or a new hobby, as part of the wellbeing strategy.

Pricing

• Price: £5,000 to £200,000 a unit
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at jamie.page@wmglobal.com. Tell them what format you need. It will help if you say what assistive technology you use.