W.D.M.Limited

WDM Pavement Management System (WDM PMS)

WDM PMS is a comprehensive system providing much more than just the Tranche3 UKPMS requirement. Three levels of product are available: a managed map-based browser service for publishing UKPMS datasets; the UKPMS compliant system or the full WDM PMS containing many more tools beyond the UKPMS requirement.

Features

• Fully integrated mapping tools
• UKPMS Tranche3 compliance
• PANDEF3, SKID, HRM/TTS SCANNER raw data processing
• HD28 (HD 28) & CS228 (CS 228) SCRIM Category Management
• Life Cycle Planning tools
• Flexible Document Management capability
• Comprehensive reporting, dashboard and query facilities
• Scheme Manager - Maintenance Scheme Automatic Prediction, Ranking and Costing
• Construction/Traffic Editing

Benefits

• Map-based solution for all your Pavement Management needs
• Centred around flexible network referencing system
• WDM's Highway Engineering Consultancy can provide expert consultancy services
• User Groups and highway authority partnerships influence system development
• Comprehensive survey data analysis, CVI, Deflectograph, DVI, FNS, SCANNER, SCRIM
• Industry compliant reporting
• Forward-thinking development, PAS2161 (PAS 2161) in mind.
• Can be integrated with the WDM Integrated Asset Management System
• The full Integrated Asset Management System is also on G-Cloud14
• Three service options offered and explained in the Pricing Document

£117 to £1,402 a user a year

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@wdm.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

984120365679062

Contact

Graeme Paterson
01179567233
info@wdm.co.uk

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: Updates and patching will be scheduled as required to ensure the system remains secure and reliable. This will generally be in out-of-hours periods. However, notice will be given where any planned maintenance may be necessary within the period from 8am to 6pm.
• System requirements:
  • Up to date Web Browser (supported versions supplied)
  • Valid email address for named users
  • All software, system and security is managed within hosted environment
  • Active Directory single sign-on supported

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Our support service operates Monday to Friday, 8:00-18:00, excluding Bank Holidays. Emails received from the client populate the WDM support ticketing system with the addition of being supported by telephone for software or service guidance and error resolution. ; ; Our dedicated Bristol based team ensures urgent queries are prioritised. Response times are categorised as follows: ; ; Priority 1 within 4 hours; Priority 2 one working day; Priority 3 as per client agreement; ; Automatic updates are sent as your query progresses, from creation through completion.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.1 AA or EN 301 549
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: There is one level of support: Help-desk and secure support site are the primary vehicles to manage that. An Account Manager will be assigned to each client and they will manage if any additional prioritisation is required, if any requests are change/control requests and whether charges are required and also any escalation that may be required.; ; There is availability for providing dedicated support resources through the service and prices are provided via the G-Cloud14 Rate Card pricing document.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Onboarding for UKPMS and Full PMS is straightforward and standardised, with some customisation possible, especially for tools like Scheme Prediction software, which primarily involves training. The process is led by a dedicated WDM Account Manager, who will discuss requirements with the client and oversee the project's delivery.; ; After the system goes live, day-to-day support shifts to our Support Teams, although the Account Manager maintains overall project control for continuity.; ; Training materials are provided, recently focusing on instructional videos accessible through the software management console, a method that has proven effective.; ; Costs related to migration, customisation beyond the standard setup, and implementation are clearly discussed and agreed upon with the client beforehand.
• Service documentation: Yes
• Documentation formats:
  • PDF
  • Other
• Other documentation formats:
  • Training Videos (mpeg4) deployed directly from within the Software
  • Some documentation not appropriate for Video will still be PDF
• End-of-contract data extraction: Client Administrators are granted comprehensive access and control over their data with the ability to publish any table or view using the ad-hoc query tool. This powerful feature enhances the adaptability and responsiveness of data management, allowing for the tailored extraction and analysis of data according to specific administrative needs. The tool supports downloading in several formats to ensure compatibility and ease of use across different applications and purposes. Available formats include CSV for general data import/export, XML for structured data sharing, and, uniquely for spatial datasets, Shape Files, Tab/MapInfo, and KML, catering to the specialised needs of geographic information system (GIS) applications.; ; Furthermore, in the event of contract termination, WDM commits to supporting clients through a transition period by making their data available on an SFTP (Secure File Transfer Protocol) site. This service is provided for three months following the termination of the contract, offering clients sufficient time to migrate their data securely and efficiently.
• End-of-contract process: As explained above, the client will have access to download their own data free of charge. If WDM are extracting the data then only time will be charged at the hourly rates quoted in the G-Cloud14 Rate Card pricing document - This will vary depending on the extent of the system and can be agreed in advance of the Contract starting.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The back-office systems are web browser-based, enabling use on mobile devices wherever internet access is available. Some tools also offer tablet modes, enhancing usability by accommodating the device’s larger screen. The system is designed to be tablet-friendly, utilising easily navigable menus instead of small icons to improve user interaction. Additionally, mobile working tools are specifically crafted for use on mobile devices. These tools are designed to function both online and offline, ensuring flexibility and continuous productivity, regardless of internet connectivity.
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: The service is accessed via a Web Browser URL which opens a Management Console called "AppCentre" or "Portal" from which all Web Browser based application URLs are launched (dependent on user security and data access rights).
• Accessibility standards: WCAG 2.1 AA or EN 301 549
• Accessibility testing: Development in conjunction with central and local government clients to ensure assistive technology is appropriate for purpose.
• API: Yes
• What users can and can't do using the API: WDM’s API technology utilises the .NET Framework and Windows Communication Foundation (WCF) with SOAP/WSDL interfacing, supporting XML, JSON, and GeoJSON formats. While SOAP continues to be supported, WDM is shifting its focus towards REST (Representational State Transfer) architecture for new developments. WDM IAMS offers comprehensive APIs for key functions such as: Enquiry, Defect, and Order Management: Creation, update, and queries. Payment and Invoice Management: Requesting and processing of payments, managing invoice commitments. Asset and Network Management: Creation, updates, and queries, including third-party network data consumption. Mapping: Integration with third-party mapping services via WMS/WMTS or OS API. IAMS supports “Time-Based Extracts” for both specific and full system API calls. The database structure of IAMS is explicitly designed to facilitate this, with all objects containing 'Start and End Date Fields' for precise time-point reporting. This setup enhances data management and extraction capabilities, allowing for detailed tracking of changes over time. These features ensure IAMS remains adaptable and capable of meeting the varied data management needs of its users, streamlining operations and improving service delivery across multiple platforms.
• API documentation: Yes
• API documentation formats: PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: UKPMS is a standard for processing pavement condition data. However, tools exist for privileged users to create new and adapt existing UKPMS weighting sets. In addition full data processing tools are provided in the Full PMS Service to re-process datasets, change trend dates, apply updated construction and traffic changes to allow monitoring the effect of maintenance applied. In the full PMS (Pavement Management System), the maintenance scheme prediction tool (Scheme Manager) and Life Cycle Planning (LCP) tool allow users to perform an unlimited amount of what-if scenarios etc. User can also create queries in the UKPMS and Full PMS options and publish map layers directly to the integrated mapping function. The UKPMS Lite option is a map viewer and the supplier can publish any datasets for the client as required. ; ; Going forwards, we'll also be pioneering future strategies while integrating the PAS2161 (PAS 2161) approach into our solutions.; ; The time may be chargeable if a significant amount of work for the supplier at the rates supplied in the G-Cloud14 Rate Card Pricing document.

Scaling

• Independence of resources: The WDM PMS cloud hosting service is designed with scalability in mind and is prepared to accommodate a user count exceeding the specified number desired, even under conditions where all users are active simultaneously. As part of this design, we've incorporated sufficient redundancy to ensure the system's resilience and reliability from the outset.; ; Additionally, the hosted system undergoes continuous monitoring to maintain its capacity and speed, ensuring it always meets operational requirements. This proactive approach allows us to swiftly adjust resources, enhancing or scaling up as necessary to meet changing demands and maintain optimal performance.

Analytics

• Service usage metrics: Yes
• Metrics types: Scheduled reporting enables the automatic delivery of metrics directly to the reporting dashboard, streamlining the monitoring and analysis process. Additionally, the charting application offers real-time insights into user metrics, providing a dynamic tool for visualising and understanding complex data. This combination enhances decision-making and operational efficiency by offering timely and actionable data.
• Reporting types:
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CHECK service provider
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v3.0
  • Physical access control, complying with another standard
• Data sanitisation process: Yes
• Data sanitisation type:
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: The UKPMS and Full WDM PMS (Pavement Management System) provide tools for data export, with UKPMS Lite offering map viewing capabilities. Users can access and download formatted reports online through a browser. ; ; The Web Query Builder enhances functionality by allowing dataset queries and filtering, with options for downloading in formats like CSV, Excel, and various spatial formats for geographic data. This suite of tools streamlines data management and analysis, making it easier for users to access, review, and utilise their data across different applications and projects.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • Excel
  • Shape File (if Spatial data)
  • MapInfo format (if spatial data)
  • KML (if spatial data)
  • Word (formatted reports)
  • PDF (formatted reports)
  • CSV
• Data import formats: Other
• Other data import formats:
  • HMDIF for UKPMS Datasets
  • MifMid for spatial data sets where appropriate
  • Document system to store main office formats
  • WDM Format WIF files for importing WDM Condition data sets
  • On-Site Images (.png, .jpeg, .bmp, .gif etc)

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: Our service commitment, as part of our ISO 27001 Information Security Management System (ISMS), ensures high standards of system access and availability, alongside responsive customer support. We guarantee system access and availability at a minimum of 98% annually, though our records show we consistently surpass this with a 99.9% achievement rate to date. This translates to a maximum downtime of just 8.76 hours per year.; ; Customer support is available from 08:00 to 18:00, Monday through Friday, excluding Bank Holidays, with a commitment to maintain accessibility at least 98% of the time. Should there be any deviation from these service level agreements (SLAs), the issue is immediately escalated to our Management Team. This ensures not only swift resolution in partnership with our clients but also underscores our dedication to maintaining and exceeding these service levels for optimal client satisfaction.
• Approach to resilience: Our primary cloud hosting environment is hosted on Amazon Cloud Services in the UK, known for its robust and well-documented resilience features. To ensure the highest level of system reliability and data integrity, we conduct annual disaster recovery tests. These tests are crucial for validating our preparedness and ability to rapidly restore services in the event of an unforeseen disruption. For those interested in a deeper understanding of our disaster recovery protocols or any specific aspects of our cloud hosting resilience, we are more than willing to provide further details upon request. This openness reflects our commitment to transparency and trustworthiness in all aspects of our service delivery.
• Outage reporting: Our hosted system features an authenticated monitoring dashboard designed to offer real-time insights into the service health. This dashboard is a crucial tool for administrators, enabling them to have a comprehensive view of the system's performance and any potential issues at a glance. Its authenticated nature ensures that sensitive information remains secure, accessible only to those with the appropriate permissions.; ; In addition to the dashboard, the system supports the configuration of email alerts for specific predefined conditions. This functionality allows for proactive monitoring, as administrators can be immediately notified of any incidents that may affect the system's performance or security.; ; This combination of a real-time dashboard and customisable email notifications provides a robust framework for maintaining optimal service health.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
  • Other
• Other user authentication: MFA - Multi-factor authentication
• Access restrictions in management interfaces and support channels: The hosted system implements ISO 27001 controls and is certified by BSI. The hosted system is a discrete and separate system from the WDM corporate system. Administration of the hosted system is segregated from corporate accounts allowing for task specific authorisation and monitoring to be implemented. Logs are collected and protected within an intrusion detection system, providing monitoring and alerting for system changes and resource usage.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
  • Other
• Description of management access authentication: MFA - Multi-factor authentication

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: BSI
• ISO/IEC 27001 accreditation date: Effective Date 05-07-2023, Expiry Date 31-10-2025
• What the ISO/IEC 27001 doesn’t cover: Certification does NOT cover ICT equipment, hardware and software on the premises of the ICT System User. Nor does it cover ICT infrastructure such as internet or network connectivity or the third party suppliers of the ICT System User and its agents. Scope is limited to; The Information Security Management System in relation to the provision of Software as a Service and Ancillary Hosted Services. This is in accordance with the Statement of Applicability (SOA) version 24.00 (May 2023). View only access to the SOA is available upon request.
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: The management system is designed to support the company in achieving its business goals while adhering to the standards required for operations both in the UK and internationally. It encompasses several key standards:; ; ISO 9001, focusing on quality management, ensuring that our products and services consistently meet customer and regulatory requirements.; ISO 14001, dedicated to environmental management, ensuring our operations minimise their impact on the environment.; ISO 27001, which addresses information security management to secure company and customer information.; ISO 45001, covering occupational health and safety to protect employees from work-related injuries and health problems.; Cyber Essentials, reinforcing our commitment to cyber security.; ; Our Managing Director mandates adherence to these management systems, underscoring their importance in delivering products and services that meet customer expectations and comply with regulatory requirements. This initiative is led from the top, requiring engagement and commitment across all levels of the company, including directors, managers, supervisors, and employees.; ; The management system manual outlines the structure for leadership, responsibility, competence, and management of documented information, providing a comprehensive framework to guide our efforts in maintaining high standards of quality, environmental stewardship, information security, occupational health and safety, and cyber security.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: The hosted system is managed using WDM's ISO9001 and 27001 certified CRUMPET management system. All change management is booked, scheduled, and authorised via this system.; ; All WDM software updates are deployed using WDM's Hosting Hub platform to ensure an immutable installation process to guard against unintentional security properties being changed. ; ; Hosting hub and Crumpet are integrated systems which provide full visibility of the change management process. Changes can be tracked and reviewed back to customer requirements and authorisations.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Software patching for security fixes are on an automated schedule which are deployed through the change management process. (Release candidate followed by A/B group releases). ; ; WDM Operate an application security assurance programme and regularly scan and test the infrastructure for vulnerabilities. Vulnerabilities are risk assessed and prioritised for remediation. Remediation can be immediate, overnight, or next available maintenance window dependent on the risk assessment.; ; We subscribe to vendor alerts and are members of the NCSC Information Sharing partnership.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: The web applications are protected by a Web application firewall which scans the requests for malicious activity, blocking and alerting upon suspicious requests. ; ; WDM Operate an intrusion detection suite which receives heterogeneous logs from across the infrastructure and provides insights, reporting and alerting to inform the security status of the system. ; ; WDM Participate in the NCSC CiSP information sharing partnership and receive alerts and indicators of compromises which are loaded into the intrusion detection system.
• Incident management type: Supplier-defined controls
• Incident management approach: WDM, as part of the ISO 27001 certified ISMS, operate a security Incident and Investigation Process. This can be made available upon separate request to your account manager.

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  W.D.M. Limited is deeply committed to combating climate change through proactive environmental initiatives aimed at enhancing sustainability across our operations. One key measure is the decommissioning of one of our server rooms as we transition more data storage and processing capabilities to cloud technology. This strategic move not only reduces our energy consumption significantly but also enhances our business continuity planning, ensuring resilient and sustainable operations.; ; Additionally, we are transitioning our fleet of company cars to Electric Vehicles (EVs) or Hybrids, with a firm deadline to decommission all diesel vehicles by 2035. This initiative will significantly reduce our reliance on fossil fuels and lower our emissions.; In tandem with these measures, W.D.M. Limited has set an ambitious target to reduce our CO2 emissions by 14% by 2035, underscoring our commitment to environmental stewardship and our active role in tackling global climate change.; ; To further enhance our environmental impact, W.D.M. Limited assists clients in reducing their carbon footprints through data-driven decisions that optimise operations for efficiency and sustainability. This approach not only minimises energy usage but also reduces wasteful practices, contributing to significant carbon emission reductions.; ; We have also implemented features that reduce duplication of site inspections, allowing multiple users to receive real-time updates about the same report. This streamlines processes, reduces unnecessary travel, and cuts down on carbon emissions associated with these trips.; By integrating these strategies into the core of our business operations, W.D.M. Limited is not just contributing to a greener planet but also setting a standard for corporate responsibility in environmental conservation. Our comprehensive approach ensures we remain at the forefront of sustainability practices, providing innovative solutions and leadership in environmental stewardship.

  Covid-19 recovery

  W.D.M. Limited's COVID-19 recovery strategy rigorously prioritises the health, safety, and well-being of our employees, while also ensuring uninterrupted business operations. A key component of this strategy is our Work from Home (WFH) policy, which has been instrumental in allowing employees to perform their duties safely and effectively throughout the pandemic.; Central to our approach are comprehensive COVID-19 risk assessments. These assessments play a pivotal role in our operations, ensuring that all necessary precautions are in place to protect our employees’ health during this challenging period.; Additionally, our robust business continuity plans, supported by our extensive use of cloud technology, have significantly enhanced our operational resilience and adaptability. Leveraging cloud-based solutions has enabled W.D.M. Limited to maintain the continuity of critical business functions, minimise disruptions, and guard against future uncertainties. This strategic use of technology supports our operational requirements and is crucial in maintaining a safe working environment for all our staff.; ; Throughout this period, we have actively supported our clients, particularly SMEs, by communicating effectively and aiding them through tough times. Our assistance has been instrumental in helping them implement similar health, safety, and operational strategies, ensuring that their businesses continue to function efficiently while prioritising the well-being of their employees. This supportive approach exemplifies our commitment to our clients and our ability to adapt swiftly to changing circumstances, reinforcing the resilience of both W.D.M. Limited and our valued clients.

  Tackling economic inequality

  W.D.M. Limited’s flexible working arrangements allow employees to tailor their work schedules to better manage childcare responsibilities, eldercare needs, or other personal commitments. This level of flexibility not only alleviates the financial burden associated with childcare but also ensures that individuals can remain active in the workforce, thereby supporting economic stability and fostering opportunities for all.; Additionally, through our apprenticeships and work experience programmes, we offer valuable pathways to employment and career advancement for individuals from various backgrounds. These initiatives are designed to cultivate a diverse and inclusive workforce, equipping participants with the skills and experience needed to thrive in their chosen fields.; Our firm commitment to ethical business practices is further demonstrated by our strict adherence to the Modern Slavery Act. We categorically prohibit any form of engagement with organisations involved in slavery or forced labour. Moreover, we empower our employees to report any suspicions of such activities, ensuring they can do so without fear of retaliation. This commitment not only reflects our dedication to maintaining high ethical standards but also reinforces our position as a responsible and principled business leader.

  Equal opportunity

  W.D.M. Limited's Equality and Diversity Policy underscores our commitment to fostering a workplace environment that embraces inclusivity and fairness. We strictly prohibit any form of discrimination against employees or applicants based on characteristics that are not pertinent to their job responsibilities. This policy ensures that no form of unequal treatment based on race, gender, age, sexual orientation, disability, or any other irrelevant characteristic is tolerated within the company.; All employees are expected to uphold these principles as detailed in the policy. Non-compliance or violation of these standards is taken seriously and will result in disciplinary action, adhering to the company’s established procedures. This approach not only reinforces our commitment to maintaining a respectful and inclusive workplace but also demonstrates our dedication to promoting equality at all levels of our organisation.

  Wellbeing

  W.D.M. Limited's Occupational Health, Safety, and Well-being Policy is fundamental in maintaining a secure and supportive workplace environment. This policy encompasses various provisions, including the presence of a trained mental health first aid team dedicated to supporting employee well-being. Additionally, the policy emphasises the importance of implementing safe work systems designed to minimise risks and enhance safety throughout the organisation.; Furthermore, the policy mandates reasonable adjustments to accommodate individual needs, ensuring that all employees have the necessary support to succeed in their roles. By prioritising the health, safety, and well-being of its employees, W.D.M. Limited strives to create a workplace that is not only safe but also conducive to the overall success and well-being of every team member.

Pricing

• Price: £117 to £1,402 a user a year
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@wdm.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.