Carillion Communications

Microsoft Surface Hub As A Cloud Service - Haas

The ability to use a large mobile screen, running familiar Microsoft Cloud apps to manipulate and present information is critical for big-data insights, utilising applications hosted on Azure. Real collaboration using powerful tools all cloud-based increase innovation, skills, communications and flexible workspaces, for a single monthly cost avoiding CapEx restrictions

Features

  • Real Collaboration, Teams, Whiteboarding, Content sharing, video calling
  • Microsoft Teams encrypts for data at rest and in flight
  • Ability to share and edit Whiteboards across multiple devices simultaneously
  • Single device for Microsoft cloud services and interaction anywhere
  • Budget friendly monthly payments free up and manage cash flow
  • Seamless end user experience on 50'' or 85" collaborative screen
  • Mobile stand makes any space a digital cloud workplace
  • Cloud file saving in Microsoft 365/Sharepoint/Teams
  • Secure - Two Factor Authentication and optional finger print reader
  • Remote management, monitoring, reporting, diagnosis, updates,

Benefits

  • Fixed known monthly cost for the latest Microsoft Cloud technology
  • ROI of 138% over 3 years, payback in 9 months
  • Cloud services allow users to simply walk up and start
  • Battery option for meetings in any space, without any cables
  • Streamlined workflow, users work simultaneously on content from multiple locations
  • Negates the need for PCs, TVs, cameras, whiteboards and projectors
  • The best Microsoft hardware, software productivity services in single package
  • Cloud platform fosters enhanced teamwork and innovation anywhere anytime
  • Works with Teams and Webex, Zoom, Google video applications
  • Adoption services to help with training and frictionless deployment

Pricing

£304.00 a unit

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at barrieg@carillion.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 12

Service ID

6 6 4 9 5 4 3 4 4 3 5 3 3 7 8

Contact

Carillion Communications Carillion Communications Limited
Telephone: 01628419519
Email: barrieg@carillion.com

Service scope

Software add-on or extension
Yes, but can also be used as a standalone service
What software services is the service an extension to
The Surface Hub is now Microsoft Teams device giving access for users to their own documents to present, share or collaborate on in a call or meeting, without the need for another device. It uses Office, OneNote, any Universal app built for W10 scale seamlessly to the large screens.
Cloud deployment model
  • Private cloud
  • Hybrid cloud
Service constraints
The Teams web app and Surface Hubs are normally updated weekly at a time specified by the client. Teams desktop client updates are released every two weeks after rigorous internal testing and validation through Microsoft's Technology Adoption Program (TAP). This usually takes place on a Tuesday. If a critical update is required, Teams will bypass this schedule and release the update as soon as it’s available.
Teams checks for updates every few hours behind the scenes, downloads it, and then waits for the computer to be idle before silently installing the update. All updates can be managed by the Client.
System requirements
  • Teams rooms device license required
  • Adhoc additional licenses for any third party apps (permission dependant)
  • Affiliate Surface Hub with (Azure AD) Global Admins Security Group
  • Microsoft 365 resource account management

User support

Email or online ticketing support
Email or online ticketing
Support response times
Normal Hours are 09.00 to 17.30 (UK time), Monday to Friday

Weekend hours by arrangement and we offer customers enhanced services too through our Carillion Advantage Service.
User can manage status and priority of support tickets
Yes
Online ticketing support accessibility
WCAG 2.1 AA or EN 301 549
Phone support
Yes
Phone support availability
9 to 5 (UK time), Monday to Friday
Web chat support
Web chat
Web chat support availability
9 to 5 (UK time), Monday to Friday
Web chat support accessibility standard
WCAG 2.1 AA or EN 301 549
Web chat accessibility testing
We often use Teams for live Chat as we can share screens and content this has assistive technology built in. The Microsoft Hubs we are offering also have assistive technology options built in.
Onsite support
Yes, at extra cost
Support levels
All our customers benefit from Microsoft Accredited engineering and support teams on all our projects as standard. We offer Virtual, Onsite, Telephone, Chat, Email, funded head on-site options to suit customer and location specific challenges, such as security, access, location. Our standard maintenance contract period for Hub is 3 years.
Designed to reflect the realistic requirements for on-site, diagnostic technical help line support for 12 or 36 months. Many of our customers choose a 36-month contract with the advantage of being able to fix their maintenance cost for a period of 3 years.
Carillion Advantage our add on service offers Flexible support with Pre-Booked fixed cost visits and PMV's, Unlimited telephone technical support
Response time Based on agreed service level agreement (SLA’s), our response times are typically 8 working hours until an engineer will arrive on-site, however we can quote for a 4 or 8-hour SLA options. When appropriate, we can even take over maintenance of installations we have not installed ourselves, subject to site survey and equipment check. This means you benefit from the same outstanding support on critical legacy equipment.
Support available to third parties
Yes

Onboarding and offboarding

Getting started
We provide initial and ongoing training for end users and IT teams to encourage adoption at all levels to enhance the experience within any customer. These can be short group sessions or hands on activities to open area 'drop in' surgery type events where end users can come alone or with a colleague to get to know the solution in a relaxed atmosphere.
During the Covid pandemic we have continued hosting a number of virtual training sessions for clients, in the public sector and private.
We also provide user guides, in poster or table form along with collateral that can be used in an internal forum or Yammer board.
Service documentation
Yes
Documentation formats
  • HTML
  • PDF
End-of-contract data extraction
We do not retain and do not store any data at anytime, it is all in the users cloud.
End-of-contract process
The cost includes a complete Microsoft Surface Hub V2S System including rolling stand, 3 Year EHS (Microsoft Service Warranty) and build of the device.
The only additional costs would be VAT at the prevailing rate and delivery.

We also supply information for account configuration in advance.

If a client wanted the device mounted on a wall not a stand this is POA (additional cost and subject to a site survey)

We also offer an option for larger spaces and rooms which includes a complete Microsoft Surface Hub 85 inch System including rolling stand, 3 Year EHS (Microsoft Service Warranty) delivery (UK Mainland) and build of the device, this is POA. (additional cost)

Using the service

Web browser interface
Yes
Supported browsers
Microsoft Edge
Application to install
Yes
Compatible operating systems
Windows
Designed for use on mobile devices
Yes
Differences between the mobile and desktop service
The service we are offering HaaS is Microsoft Surface Hub Device which is not service singularly it relies on Microsoft Teams and Microsoft 365 to function, all of which are available on Mobile Devices.
Service interface
No
API
No
Customisation available
Yes
Description of customisation
The GUI on the front page of the Surface Hub can be customised with the background to highlight 'how to use' or just to show a standard branded image.
The Tiles as with many Microsoft services can also be customised if needed.
As an option we can quote for a powered stand to allow users with mobility issues access from a lower level.
We also have an option for a battery pack to allow for use in areas with no mains.

Scaling

Independence of resources
Microsoft's Azure global infrastructure is made up of two key components – physical infrastructure and connective network components. The physical component is comprised of 160+ physical data centres, arranged into regions, and linked by one of the largest interconnected networks on the planet.

With the connectivity of the global Azure network, each of the Azure data centres provides high availability, low latency, scalability and the latest advancements in cloud infrastructure – all running on the Azure platform.
Accenture as an example, use 1 billion Teams minutes a month, with 85,000 employees making external calls.

Analytics

Service usage metrics
No

Resellers

Supplier type
Reseller providing extra features and support
Organisation whose services are being resold
Microsoft Surface Hub 50" and 85" as a service

Staff security

Staff security clearance
Conforms to BS7858:2012
Government security clearance
Up to Developed Vetting (DV)

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
United Kingdom
User control over data storage and processing locations
Yes
Datacentre security standards
Supplier-defined controls
Penetration testing frequency
At least every 6 months
Penetration testing approach
Another external penetration testing organisation
Protecting data at rest
Other
Other data at rest protection approach
All data sits inside the clients network and cloud and is governed by their own security standards not that of Carillion who do not have access to it at anytime.
Data sanitisation process
Yes
Data sanitisation type
Deleted data can’t be directly accessed
Equipment disposal approach
Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

Data export approach
Surface Hub retains no data for export once a session is ended.
Data export formats
Other
Other data export formats
There is no data once a session is ended
Data import formats
Other
Other data import formats
Microsoft 365, PDF, Word, Jpeg, OneNote, Whiteboard, Video

Data-in-transit protection

Data protection between buyer and supplier networks
Other
Other protection between networks
The device uses only the clients network and cloud, Carillion do not have access to or work in the network at anytime.
Data protection within supplier network
Other
Other protection within supplier network
The device uses only the clients network and cloud, Carillion do not have access to or work in the network at anytime.

Availability and resilience

Guaranteed availability
The Surface Hub is part of our warranty service, our Service desk can normally diagnose any issue in the same call, live. Should a hub fail a Service call diagnosis we offer a next day on-site service.
Carillion are Microsoft's only ASP (Authorised Service Partner) for Surface hub in Europe.
Approach to resilience
The Surface Hub works and operates in the clients Network and is subject to the group IT policy. Carillion have no interaction with client or Microsoft datacentres or the data moving between them.
Outage reporting
We can create a report based on any outages in Hub service /functionality reported to our Service Desk in any time frame upon request or at set intervals.

Identity and authentication

User authentication needed
Yes
User authentication
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
  • Other
Other user authentication
Can also be defined by the Client IT security team including Finger Print reader (available as an option)
Access restrictions in management interfaces and support channels
All managed through Admin and Individual user settings through client group IT Policy
Access restriction testing frequency
At least every 6 months
Management access authentication
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
  • Other
Description of management access authentication
Client IT group defined

Audit information for users

Access to user activity audit information
You control when users can access audit information
How long user audit data is stored for
User-defined
Access to supplier activity audit information
You control when users can access audit information
How long supplier audit data is stored for
User-defined
How long system logs are stored for
User-defined

Standards and certifications

ISO/IEC 27001 certification
Yes
Who accredited the ISO/IEC 27001
Held Globally by Microsoft for the Surface Hub
ISO/IEC 27001 accreditation date
01/06/2015
What the ISO/IEC 27001 doesn’t cover
For ISO/IEC 27001 certification for implementations deployed on Microsoft services, we can use the applicable certification in our compliance assessment. You are responsible, however, for engaging an assessor to evaluate the controls and processes within your own organization and your implementation for ISO/IEC 27001 compliance.
ISO 28000:2007 certification
Yes
Who accredited the ISO 28000:2007
Held Globally by Microsoft for the Surface Hub
ISO 28000:2007 accreditation date
01/06/2015
What the ISO 28000:2007 doesn’t cover
Held Globally by Microsoft for the Surface Hub and its services. They have full assured conformance with a documented and stated security management policy it is not something we hold as Carillion as we work as a partner to Microsoft who own the supply chain and its security
CSA STAR certification
Yes
CSA STAR accreditation date
01/06/2015
CSA STAR certification level
Level 5: CSA STAR Continuous Monitoring
What the CSA STAR doesn’t cover
The product is certified by Microsoft and Carillion does not have access to or work within the client network at any time.
PCI certification
No
Other security certifications
No

Security governance

Named board-level person responsible for service security
Yes
Security governance certified
Yes
Security governance standards
  • ISO/IEC 27001
  • Other
Other security governance standards
Cyber Essentials Plus
Information security policies and processes
We have in place a comprehensive set of GDPR compliant policies and process to ensure the security of personal data, together with policies/processes on data back-up, physical security, change management and documented control measures. Annual Cyber Essentials vulnerability scans, We conduct annual disaster recovery ( DR ) tests. Monthly patching of devices, with critical patches run straight away.

Operational security

Configuration and change management standard
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Configuration and change management approach
The Surface Hub itself is not subject to change management other than updates. The security policies for the device and its access are all client controlled through Policy. However Microsoft use MOCA Modern Collaboration Architecture, which when supported by enables improved collaboration, communication, and information management by individuals, teams, communities, and across the Microsoft 365 suite and adds reporting functionality for IT.
Vulnerability management type
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Vulnerability management approach
The Surface Hub itself is secured by the client however threat & Vulnerability Management is a new component of Microsoft Defender ATP updates of which are applied to the hub, and provides both security administrators and security operations teams with unique value.
It allows for real-time endpoint detection and response (EDR) insights correlated with endpoint vulnerabilities
Invaluable machine vulnerability context during incident investigations
Built-in remediation processes through Microsoft Intune and Microsoft System Center Configuration Manager.
Protective monitoring type
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Protective monitoring approach
The hub sits in the client network and is secured by the clients IT governance and policy.
Incident management type
Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
Incident management approach
The hub sits inside the clients network and is subject to client IT policy and reporting. For Hardware issues these are reported to the service desk at Carillion by the client and we react in accordance with our warranty procedure. We provide estate or individual unit report thereafter. Should a client wish we can manage an estate via MMRP, subject to agreement.

Secure development

Approach to secure software development best practice
Supplier-defined process

Public sector networks

Connection to public sector networks
No

Pricing

Price
£304.00 a unit
Discount for educational organisations
Yes
Free trial available
Yes
Description of free trial
We offer a Surface Hub 50" .This would be complete, Screen, Stand, Camera, Pen ready for a period of 3 weeks which we have found is more than adequate for most users and would include some user training.
This would be subject to availability. Teams account provided by client.
Link to free trial
https://www.carillionsurfacehub.com/surface-hub-2s/microsoft-surface-hub-2s-news-and-features.html

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at barrieg@carillion.com. Tell them what format you need. It will help if you say what assistive technology you use.