G-Cloud 11 services are suspended on Digital Marketplace

If you have an ongoing procurement on G-Cloud 11, you must complete it by 18 December 2020. Existing contracts with iQ HealthTech Ltd are still valid.
iQ HealthTech Ltd

iQemo

iQemo is a web-based chemotherapy prescribing platform that helps to manage the entire end-to-end chemotherapy prescribing, scheduling, drug ordering and administration process for a cancer treatments. The system provides a complete end-to-end electronic record of the chemotherapy process in a hospital.

Features

  • Protocol based electronic prescribing of chemotherapy and supportive medication.
  • Supports supplementary prescribing of ad-hoc supportive medication.
  • Easily adjust prescriptions, doses and add supportive medication.
  • Scheduling of patient appointments based on chemotherapy protocols.
  • Protocol-based decision support aids prescribers at the point of prescribing.
  • Supports FDB integration for enhanced decision support including drug-to-drug interactions.
  • Interoperable with other clinical systems including PAS, LIMS and scheduling
  • Captures patient’s pre-chemotherapy assessment, toxicities, administration and adverse events.
  • dm+d compliant drug formulary

Benefits

  • Cloud hosting reduces system hosting, deployment and maintenance costs
  • Intuitive user interface means doctors can spend less time prescribing.
  • Alerting system improves communication between doctors, pharmacists and nurses
  • Improves patient safety and reduces chemotherapy prescription errors
  • Provides complete traceability of all chemotherapy prescribing activities

Pricing

£10,500 to £50,000 an instance a year

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at doug.baker@iQHealthTech.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 11

Service ID

8 6 1 6 6 9 6 7 0 4 1 0 4 2 1

Contact

iQ HealthTech Ltd Doug Baker
Telephone: 01202 489554
Email: doug.baker@iQHealthTech.com

Service scope

Software add-on or extension
No
Cloud deployment model
Private cloud
Service constraints
None
System requirements
  • Internet or N3/HSCN connection
  • Web browser (IE9-11, Edge, Chrome, Safari or Firefox)

User support

Email or online ticketing support
Email or online ticketing
Support response times
Monday-Friday between 08:30 and 17:30 response times are as follows:

Priority 1 – Critical - within 5 minutes
Priority 2 - Very High - within 15 minutes
Priority 3 – High - within 30 minutes
Priority 4 – Medium - within 2 hours
Priority 5 – Low - within 4 hours

Tickets can be submitted by email or by phone

24x7 support is available for an additional cost.
User can manage status and priority of support tickets
Yes
Online ticketing support accessibility
WCAG 2.1 AAA
Phone support
Yes
Phone support availability
9 to 5 (UK time), Monday to Friday
Web chat support
No
Onsite support
Onsite support
Support levels
Support is provided by our helpdesk, standard support is included in our iQemo subscription fee and covers email and telephone support Monday to Friday between 08:30 and 17:30.

Support levels are categorised by the following:
Priority 1 – Critical Fault
The incident will be defined as Priority 1 when the entire Service is down and inaccessible.

Priority 2 – Very High Fault
The incident will be defined as Priority 2 when operation of the Services are severely degraded, or major components of the Service are not operational, and work cannot reasonably continue.

Priority 3 – High Fault
The incident will be defined as Priority 3 when certain features of the Service are impaired while most major components of the Service remain functional.

Priority 4 – Medium Fault
The incident will be defined as Priority 4 when certain non-essential features of the Service are impaired while most major components of the service remain functional.

Priority 5 – Low Fault
The incident will be defined as Priority 5 for errors that are, non-disabling or cosmetic and clearly have little or no impact on the normal operation of the Services.

iQ HealthTech will provide an account manager in addition to support engineers.
Support available to third parties
Yes

Onboarding and offboarding

Getting started
IQ HealthTech will assemble a project team consisting of a project manager, solution architect, product implementation specialist, oncology trained pharmacist, systems integration engineer and a trainer. This team will be responsible for delivery of the iQemo service working with an organisations project manager. The iQemo service will be implemented based on the PRINCE 2 methodology. A detailed project plan will be created and agreed with the organisations project manager. This will detail milestone deliveries, initial training dates and possible go-live date. A key part of a chemotherapy e-prescribing go-live is the setup and validation of the organisations chemotherapy regimens in the iQemo system, iQ HealthTech provide trained pharmacists who can carry out the initial build of the organisations chemotherapy regimens in order to reduce the amount of time and effort required by the organisations pharmacists to achieve a timely go-live. iQ HealthTech provide an onsite training service starting with a training needs analysis to identify any key needs and to identify suitable super users, from this exercise iQ HealthTech will create a training plan tailored to the needs of the organisation. During go-live iQ HealthTech will provide onsite support services to ensure a safe and smooth go-live is achieved.
Service documentation
Yes
Documentation formats
  • PDF
  • Other
Other documentation formats
Microsoft Word
End-of-contract data extraction
IQ HealthTech will provide an export of all the organisations data captured by the iQemo system during usage, this will be in an agreed format. This format will typically be a Microsoft SQL Server database back up coupled with a database schema document enabling the organisation to continue to use the data as required.
End-of-contract process
At the end of the contract the organisation can decide to continue with on-going support for the iQemo system, or take a full data export in an agreed format, typically as a Microsoft SQL Server database backup. This will enable the data to be reported against and/or merged into a data warehouse for any other required use. iQ HealthTech will provide assistance with the supply of the complete data extract as part of the contract at no additional cost.

Using the service

Web browser interface
Yes
Supported browsers
  • Internet Explorer 9
  • Internet Explorer 10
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari 9+
  • Opera
Application to install
No
Designed for use on mobile devices
Yes
Differences between the mobile and desktop service
IQemo is a web-application, the same url is accessed on both a desktop and mobile device. The system is responsive, i.e. it re-sizes itself depending on the screen size/resolution.
The electronic drug chart is optimised to work on a tablet device. On a touch screen device the system changes the look and feel very slightly, making buttons easier to tap on a screen e.g. makeing a dose modification, users tap the whole prescription line rather than clicking on the dose as they do on the desktop version. To record administration of a drug the user taps the whole drug line.
Service interface
No
API
No
Customisation available
Yes
Description of customisation
The iQemo system provides several customisations that can be made around the workflow configurations and approval processes. As part of our implementation service iQ HealthTech carry out a detailed process mapping exercise, this allows iQ HealthTech to determine the best, most suitable configuration for the organisation. iQ HealthTech will carryout any initial customisation as part of the system implementation.

Buyers also have the option to submit change requests allowing additional functionality to be developed and released in future versions of the system.

Scaling

Independence of resources
The iQemo hosting environment has been designed for high availability and high performance. The infrastructure is fully virtualised based on VMWare, this virtual platform is provided by multiple hypervisors in multiple datacentres providing further redundancy into the underlying infrastructure.
The iQemo application is distributed across multiple virtual servers, load balanced across 2 separate data centres in different geographic locations.

Analytics

Service usage metrics
Yes
Metrics types
IQ HealthTech provide a monthly KPI report to provide our customers with visibility that we are meeting the agreed SLA. The monthly KPI report consists of the following metrics:

• System uptime percentage for the calendar month
• Number of support tickets raised by priority for the calendar month
• Average response time by priority
• Average resolution time by priority
• Number of support tickets by category
• Number of tickets (if any) above the agreed SLA resolution time

All support tickets raised are visible via our online support portal, access is provided to specified customer representatives.
Reporting types
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

Supplier type
Not a reseller

Staff security

Staff security clearance
Other security clearance
Government security clearance
None

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
United Kingdom
User control over data storage and processing locations
No
Datacentre security standards
Complies with a recognised standard (for example CSA CCM version 3.0)
Penetration testing frequency
At least once a year
Penetration testing approach
‘IT Health Check’ performed by a Tigerscheme qualified provider or a CREST-approved service provider
Protecting data at rest
Encryption of all physical media
Data sanitisation process
Yes
Data sanitisation type
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
Equipment disposal approach
Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

Data export approach
IQ HealthTech provide customers with direct access via ODBC over an encrypted IPSEC VPN to a replica of their data, typically this is used as a reporting database. This provides the authorised customer user(s) to extract a full back up at anytime of their entire iQemo database.
Data export formats
  • CSV
  • Other
Other data export formats
  • ODBC
  • Microsoft SQL Server backup file
Data import formats
  • CSV
  • Other
Other data import formats
HL7

Data-in-transit protection

Data protection between buyer and supplier networks
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
Data protection within supplier network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

Guaranteed availability
IQ HealthTech provide a guarantee of 99.9% uptime measured each calendar month.

iQ HealthTech offers the following service credit in the event of a failure to meet the uptime guarantee:

99.90%-99.94% - 5% of monthly iQemo license fee
98%-99.89% - 10% of monthly iQemo license fee
<98% - 20% of monthly iQemo license fee
Approach to resilience
The iQemo hosting environment has been designed for high availability and high performance. The infrastructure is fully virtualised based on VMWare, this virtual platform is provided by multiple hypervisors in multiple datacentres providing further redundancy into the underlying infrastructure.
The iQemo application is distributed across multiple virtual servers, load balanced across 2 separate data centres in different geographic locations.

More information on this is available upon request.
Outage reporting
Monitoring of the system and hosting infrastructure is carried out 24/7/365 any issue that occurs is alerted to a member of the technical support team by email. The technical support team will then assess the issue and take appropriate action, this will involve fixing the issue in line with the up-time guarantee of the SLA if the monitoring alert is reporting an outage.
Any system outage will be reported to the designated customer contacts by email by the technical support team.

Identity and authentication

User authentication needed
Yes
User authentication
  • 2-factor authentication
  • Username or password
Access restrictions in management interfaces and support channels
All users in iQemo are assigned to a user group, a user group is made up of multiple permissions that determine the level of access and functionality that is available to the within the application. Only those users with associated privileges can access the management interfaces and support channels
Access restriction testing frequency
At least every 6 months
Management access authentication
  • 2-factor authentication
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

Access to user activity audit information
Users have access to real-time audit information
How long user audit data is stored for
User-defined
Access to supplier activity audit information
Users have access to real-time audit information
How long supplier audit data is stored for
User-defined
How long system logs are stored for
At least 12 months

Standards and certifications

ISO/IEC 27001 certification
Yes
Who accredited the ISO/IEC 27001
QMS
ISO/IEC 27001 accreditation date
20/10/2016
What the ISO/IEC 27001 doesn’t cover
There are no exemptions to the Standard
ISO 28000:2007 certification
No
CSA STAR certification
No
PCI certification
No
Other security certifications
No

Security governance

Named board-level person responsible for service security
Yes
Security governance certified
Yes
Security governance standards
ISO/IEC 27001
Information security policies and processes
IQ HealthTech has successfully implemented and continues to maintain the ISO27001:2013 Information Security Management System. Our security policies and processes are aligned with this standard which has been externally audited and certified.

Overall responsibility for the ISO 27001 information security management system has been taken by the company directors and is managed on a day to day basis by our Infrastructure & Information Security Manager. The policies and processes are audited both internally and externally with the findings and continual improvements being actively reviewed and implemented following quarterly management review meetings.

All staff are trained upon induction about the need and their role in maintaining good information security standards and how these policies and processes need to be adhered to during day to day company business. This training is reviewed and updated annually to ensure continual improvement.

Operational security

Configuration and change management standard
Supplier-defined controls
Configuration and change management approach
Our ISO27001 procedures ensure an operational change control process is followed.

For any change a change request form is completed and submitted. All changes are discussed at a weekly Change Advisory Board, approved and categorised or declined. The requestor is contacted and advised accordingly. Approved changes are documented and scheduled an appropriate engineer in our work management system. All completed changes are tested in the test environment before putting live.

Depending on the nature of a change (e.g. a change with wide scope that involves changing the way patient data is handled) a privacy impact assessment will be completed.
Vulnerability management type
Supplier-defined controls
Vulnerability management approach
IQ HealthTech maintain an asset register and a risk assessment for all information assets. This risk assessment is reviewed and updated at quarterly management review meetings.

Our patching policy ensures that appropriate operating system/database patches are applied on a monthly rolling schedule and the anti-virus software automatically updates to the latest definitions.

Our iQemo application and infrastructure is annually penetration tested by third party CREST approved testers. Any remedial work is carried out and re-tested against.

Our Information Security & Infrastructure manager subscribes to various alerts from several reputable sources including our infrastructure supplier, US-CERT, Sophos, Symantec among others.
Protective monitoring type
Supplier-defined controls
Protective monitoring approach
Our infrastructure is monitored using multiple tools including: RedGate SQL-Monitoring, PA Server-Monitor, WebApplicationFirewall with DDOS protection and Symantec Endpoint protection.

Our WAF proactively monitors all https requests and automatically blocks potential cyber-threats to the web application, including DDOS.

The PA monitor monitors many different variables across servers and network empowering our support team to pro-actively manage any performance/usage anomalies.

Symantec Endpoint ensures any Viruses or Malware is detected and removed.

The support team also review server and firewall logs daily to lookout for any abnormal activity.
In the event of a compromise our incident reporting procedure will be activated.
Incident management type
Supplier-defined controls
Incident management approach
Our incident reporting process, based on ITIL is as follows:

Incident identification - raised via helpdesk team,

Incident logged in helpdesk system,

Incident categorisation, based on SLA,

Incident prioritisation, based on SLA,

Initial diagnosis where the user describes the problem and answers relevant troubleshooting questions.

Incident escalation, if required it's escalated to second-line support.

Investigation and diagnosis - Once diagnosed, the support team can apply a solution, e.g. changing software settings, or deploying a patch.

Resolution and recovery - This is when the support engineer confirms that the user’s service has been restored to the required SLA level

Incident closure

Secure development

Approach to secure software development best practice
Conforms to a recognised standard, but self-assessed

Public sector networks

Connection to public sector networks
Yes
Connected networks
  • NHS Network (N3)
  • Health and Social Care Network (HSCN)

Pricing

Price
£10,500 to £50,000 an instance a year
Discount for educational organisations
No
Free trial available
No

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at doug.baker@iQHealthTech.com. Tell them what format you need. It will help if you say what assistive technology you use.