G-Cloud 11 services are suspended on Digital Marketplace

If you have an ongoing procurement on G-Cloud 11, you must complete it by 18 December 2020. Existing contracts with MICRO FOCUS are still valid.
MICRO FOCUS

Application Delivery Management via SaaS - from Micro Focus

Micro Focus’ application development and application testing tools help you plan, develop, test, release, and monitor for continuous delivery of superior user journeys. Hosted on the Micro Focus cloud platform. Required services/products can be selected from the portfolio. Other licensing structures for private cloud deployment available as required.

Features

  • Project & Portfolio Management (PPM)
  • Application Lifecycle Management (ALM,AGM,Agile Manager,ALM Octane,QC,Quality Center)
  • Functional Testing (UFT, Mobile Center)
  • Performance & Load Testing (PC, Performance Center,Stormrunner Load,SRL)
  • Mobile Testing (AppPulse Mobile, Mobile Center)
  • Deployment Automation (ALM,ALM Octane,Quality Center,DA)
  • Release Control (ALM,ALM Octane, Quality Center,RC)
  • Application Performance Management (AppPulse Suite)
  • Change & Configuration Management (Dimensions CM)
  • Requirements Management (Dimensions RM)

Benefits

  • Standardise and manage project and portfolio activities for real-time decisions
  • Use methodology to deliver software at speed and quality
  • Increase speed & quality across many platforms
  • Powerful, realistic load, stress, and performance testing at enterprise scale
  • Automated fuctional mobile testing that replicates end user experience
  • Connect Dev and Ops by automating the deployment pipeline
  • Centralised planning and control for entire software release lifecyle
  • Achieve application availability and performance that meet business expectations

Pricing

£100 a licence a month

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at publicsectoruk@microfocus.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 11

Service ID

6 9 4 2 1 1 9 3 6 5 4 9 4 2 9

Contact

MICRO FOCUS Micro Focus Government Team
Telephone: 01635 565330
Email: publicsectoruk@microfocus.com

Service scope

Software add-on or extension
No
Cloud deployment model
Private cloud
Service constraints
No
System requirements
  • Internet Access
  • Web Browser

User support

Email or online ticketing support
Email or online ticketing
Support response times
24 hours turn-a-round for standard support queries. Better times available at request.
User can manage status and priority of support tickets
Yes
Online ticketing support accessibility
None or don’t know
Phone support
Yes
Phone support availability
24 hours, 7 days a week
Web chat support
No
Onsite support
No
Support levels
Standard Support: Self Service & Outreach. Free.

Enterprise Support: Customer Success Manager & Solutions Expert Team. Upgrade review meetings. Yearly Service Reviews. Focus on Adoption. £20000 Annually.

Premier Support: Named Customer Success Manager. Named Solutions Expert. Managed upgrades with choice of date & project manager. Comprehensive upgrade planning. Quarterly service reviews. Relationship-based services. Incident and crisis management. £75000 annually.
Support available to third parties
Yes

Onboarding and offboarding

Getting started
Training & education available through separate Entcorp/Micro Focus G Cloud offering. Provides live virtual and/or onsite classrooms at cost. Extensive user documentation and help website. https://admhelp.microfocus.com/main/Content/AdmHelpCenter.htm
Service documentation
Yes
Documentation formats
  • HTML
  • PDF
End-of-contract data extraction
Request export via support ticket. Data made available on secure FTP.
End-of-contract process
Data export included in cost. Usage and other metrics dependent on support level.

Using the service

Web browser interface
Yes
Supported browsers
  • Internet Explorer 10
  • Internet Explorer 11
  • Chrome
Application to install
No
Designed for use on mobile devices
No
Service interface
Yes
Description of service interface
MyAccount, allows high level service dashboard. User & admin controls plus ticketing system.
Accessibility standards
None or don’t know
Description of accessibility
The service is generally WCAG 2.0 compliant but due to range of services and types of graphical data the service is constrained.
Accessibility testing
None
API
Yes
What users can and can't do using the API
Allow the creation of applications which access the features or data of the Application Delivery Management applications. Referral to the API architecture documents. Example: https://admhelp.microfocus.com/alm/en/12.55/online_help/Content/api_guides_main_page.htm
API documentation
Yes
API documentation formats
  • Open API (also known as Swagger)
  • HTML
  • PDF
API sandbox or test environment
Yes
Customisation available
Yes
Description of customisation
Adding custom code
There are business rules and flows that can be developed and/or edited

Scaling

Independence of resources
Load balancing. Redundant architecture. 24/7 monitoring team.

Analytics

Service usage metrics
Yes
Metrics types
Utilisation, users
Reporting types
Reports on request

Resellers

Supplier type
Not a reseller

Staff security

Staff security clearance
Other security clearance
Government security clearance
Up to Developed Vetting (DV)

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
User control over data storage and processing locations
Yes
Datacentre security standards
Supplier-defined controls
Penetration testing frequency
At least once a year
Penetration testing approach
In-house
Protecting data at rest
  • Encryption of all physical media
  • Other
Other data at rest protection approach
Data in encrypted at rest using 3PAR SED, FIPS 140/2 compliant drives
Data sanitisation process
Yes
Data sanitisation type
Explicit overwriting of storage before reallocation
Equipment disposal approach
Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

Data export approach
Raise support ticket
Data export formats
  • CSV
  • Other
Other data export formats
  • PDF
  • XLS
Data import formats
CSV

Data-in-transit protection

Data protection between buyer and supplier networks
  • TLS (version 1.2 or above)
  • Legacy SSL and TLS (under version 1.2)
Data protection within supplier network
Other
Other protection within supplier network
Security of environment through isolation, allowing data to pass freely

Availability and resilience

Guaranteed availability
We provide Customer access to the Software-as-a-Service production application on a twenty-four hour, seven days a week (24x7) basis at a rate of 99.9 % (“SaaS Service Uptime Metric”).
Approach to resilience
"To ensure that infrastructures such as: Remote access, Active directory, DNS services, mail services, DB services, and mission critical customer facing applications such as: the Customer Authentication systems, and the Ticketing system are fully disaster recoverable, using Business Impact Analysis (BIA) MFI SaaS identified and prioritized system components and mission/business processes, and established the backup strategies required to enable both employees and customers to keep a communication channel open in case of any disruption.
In the standard Recovery Point Objective (RPO), MFI SaaS performs both on-site and off-site backups as follows: (Unless there is a special customer contractual requirement)
 On-site backup occurs daily and includes a local copy of production data followed by an offsite backup of the same production data to a remote site.
 Backup process takes place out of working hours per region.
When there is a service disruption, customers are notified in accordance with the MFI SaaS customer notification Service Level Objective (SLO) statements."
Outage reporting
We use a centralized notification system to deliver proactive communications about application changes, outages and scheduled maintenance.

Identity and authentication

User authentication needed
Yes
User authentication
Other
Other user authentication
Bespoke solution due to customer control integration.
Access restrictions in management interfaces and support channels
ADM portfolio has integration with customer authentication services.
Access restriction testing frequency
At least every 6 months
Management access authentication
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Username or password

Audit information for users

Access to user activity audit information
Users contact the support team to get audit information
How long user audit data is stored for
At least 12 months
Access to supplier activity audit information
No audit information available
How long system logs are stored for
At least 12 months

Standards and certifications

ISO/IEC 27001 certification
Yes
Who accredited the ISO/IEC 27001
Standards Institute of Israel
ISO/IEC 27001 accreditation date
01/09/2017
What the ISO/IEC 27001 doesn’t cover
2013 wholly compliant
ISO 28000:2007 certification
No
CSA STAR certification
No
PCI certification
No
Other security certifications
No

Security governance

Named board-level person responsible for service security
Yes
Security governance certified
Yes
Security governance standards
ISO/IEC 27001
Information security policies and processes
Corporate policies are designed after ISO 27001

Operational security

Configuration and change management standard
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Configuration and change management approach
All non routine changes go through change control requiring approval and verification post implementation
Vulnerability management type
Supplier-defined controls
Vulnerability management approach
Monthly Qualys scans, risk assesment based on findings for remediation
Protective monitoring type
Supplier-defined controls
Protective monitoring approach
Sitescope plus other monitoring services. Respond in real time via 24/7 monitoring team.
Incident management type
Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
Incident management approach
Follows industries standards and complies with all contractual terms. Users report incidents by phone or raising a support ticket. Incident reports are mailed out to user base.

Secure development

Approach to secure software development best practice
Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

Connection to public sector networks
No

Pricing

Price
£100 a licence a month
Discount for educational organisations
Yes
Free trial available
Yes
Description of free trial
Free trial of most ADM products with basic support. Usually one month timescale - can be extended dependent on justification.
Link to free trial
https://software.microfocus.com/en-us/products

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at publicsectoruk@microfocus.com. Tell them what format you need. It will help if you say what assistive technology you use.