Care Banking

Care Banking Section 117

Software supporting individualised care, enabled by CareBankings modular systems approach.
Section 117, Mental health discharge, planning management solution. Enabling effective community care. Used across Health, social care or Local Authorities, the product replaces the disjointed health / LA approach Supports traditional CHC placed patients, TCP, Transforming Care Partnerships, Social care,

Features

  • Management of Section 117 patients in the community
  • Central system for the storage of all assessments documentation
  • Provides a single view of care plans for CCGs/LA
  • Enables integrated working across health and social care
  • Ensures regular and appropriate reviews for S117 patients
  • Monitoring and reporting capabilities for commissioners
  • Accessible on laptop, PC, mobile and tablet
  • Full auditing capabilities

Benefits

  • Full audit capability from clinical assessment to service payment
  • full visibility of all transactions
  • Links with Care Banking Direct Payment Offer
  • Improved visibility of spend
  • Allows commissioners to maintain financial control
  • Commissioners are able to monitor the quality of services/providers
  • Creates a competitive marketplace for health and social care

Pricing

£1,500.00 a user a year

Service documents

Framework

G-Cloud 12

Service ID

8 2 2 8 3 8 3 8 4 2 9 0 6 0 7

Contact

Care Banking Sales
Telephone: 0203 633 1766
Email: Info@carebanking.co.uk

Service scope

Software add-on or extension
Yes, but can also be used as a standalone service
What software services is the service an extension to
Care Banking : Brokerage product ,
Care Banking : My Care Bank product
Care Banking : Learning Disability product
Cloud deployment model
Public cloud
Service constraints
The most significant constraint relate to the versions of browser supported. Please contact us for a list of the browsers currently supported.
System requirements
  • A FTP link will need to be established
  • Certificates for encryption will need to be exchanged

User support

Email or online ticketing support
Email or online ticketing
Support response times
24 hours if a weekday, no service at weekends
User can manage status and priority of support tickets
No
Phone support
Yes
Phone support availability
9 to 5 (UK time), Monday to Friday
Web chat support
No
Onsite support
Yes, at extra cost
Support levels
Rate are set out in the rate card
Support available to third parties
Yes

Onboarding and offboarding

Getting started
Documentation is provided along with web guides, onsite training can be provided.
Service documentation
Yes
Documentation formats
PDF
End-of-contract data extraction
A request is made to the supplier and we provide a single extract from the database, data is provided back in the format it was uploaded, ie single file un-indexed data.
End-of-contract process
The provision of a single data extract is included in the price, additional effort would be charged on a day basis.

Using the service

Web browser interface
Yes
Supported browsers
  • Internet Explorer 10
  • Internet Explorer 11
  • Chrome
  • Safari 9+
Application to install
Yes
Compatible operating systems
Windows
Designed for use on mobile devices
Yes
Differences between the mobile and desktop service
Only the screen format will change,its designed to adjust to the various user interfaces available
Service interface
No
API
Yes
What users can and can't do using the API
Users can link clinical systems to the application to automate data transfers
API documentation
No
API sandbox or test environment
No
Customisation available
No

Scaling

Independence of resources
The system architecture ensures scaling does not impact existing users.

Analytics

Service usage metrics
Yes
Metrics types
System usage by user or client
Reporting types
  • Real-time dashboards
  • Reports on request

Resellers

Supplier type
Not a reseller

Staff security

Staff security clearance
Other security clearance
Government security clearance
Up to Developed Vetting (DV)

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
United Kingdom
User control over data storage and processing locations
Yes
Datacentre security standards
Managed by a third party
Penetration testing frequency
At least once a year
Penetration testing approach
In-house
Protecting data at rest
  • Physical access control, complying with another standard
  • Encryption of all physical media
Data sanitisation process
Yes
Data sanitisation type
Deleted data can’t be directly accessed
Equipment disposal approach
A third-party destruction service

Data importing and exporting

Data export approach
It depends on the users admin rights, most users can export data using the GUI export functions
Data export formats
CSV
Data import formats
CSV

Data-in-transit protection

Data protection between buyer and supplier networks
  • IPsec or TLS VPN gateway
  • Legacy SSL and TLS (under version 1.2)
Data protection within supplier network
  • TLS (version 1.2 or above)
  • Legacy SSL and TLS (under version 1.2)

Availability and resilience

Guaranteed availability
We can provide a service 24/7 although this does not allow for scheduled downtime for updates and customer requested stoppages. The guarantee is 90% against contracted hours. Contracted hours are agreed with the customer.
Approach to resilience
Available on request
Outage reporting
Outages are reported via email

Identity and authentication

User authentication needed
Yes
User authentication
  • Public key authentication (including by TLS client certificate)
  • Limited access network (for example PSN)
  • Username or password
Access restrictions in management interfaces and support channels
The system has the concept of roles and responsibility, we use the roles to limit access to management interfaces and host critical applications separately to the main service.
Access restriction testing frequency
At least every 6 months
Management access authentication
Username or password

Audit information for users

Access to user activity audit information
Users have access to real-time audit information
How long user audit data is stored for
At least 12 months
Access to supplier activity audit information
Users have access to real-time audit information
How long supplier audit data is stored for
At least 12 months
How long system logs are stored for
At least 12 months

Standards and certifications

ISO/IEC 27001 certification
No
ISO 28000:2007 certification
No
CSA STAR certification
No
PCI certification
No
Other security certifications
Yes
Any other security certifications
  • Banking accreditation's covered by Santader Plc
  • Cyber essentials Plus

Security governance

Named board-level person responsible for service security
Yes
Security governance certified
Yes
Security governance standards
  • ISO/IEC 27001
  • Other
Other security governance standards
NHS Digital, Information Governance toolkit requirements level 2,
Cyber essentials Plus
Information security policies and processes
We have a information Governance steering group that reviews all policies and audits the application of them.

Operational security

Configuration and change management standard
Supplier-defined controls
Configuration and change management approach
The code base is modular in construction, any module being updated is operationally tested offline for a month before being released to the live environment. Automated testing scripts are used to check security impact.
Vulnerability management type
Undisclosed
Vulnerability management approach
The partnership with Santander Plc ensures we are informed of any security threats known to the banking sector.
Patches can be deployed as rapidly as 4 hours but typically take 24 hours.
Live monitoring of any threats is provided through monitoring software.
Protective monitoring type
Supplier-defined controls
Protective monitoring approach
The system architecture prevents a large scale compromise, however we have continuous monitoring software to identify incidents and have been able to respond instantly.
Incident management type
Supplier-defined controls
Incident management approach
All incidents are reported to the information governance steering group, these can be generated by users via email or though our own monitoring software.

Secure development

Approach to secure software development best practice
Supplier-defined process

Public sector networks

Connection to public sector networks
No

Pricing

Price
£1,500.00 a user a year
Discount for educational organisations
No
Free trial available
No

Service documents