Evaluate business requirements and define the goals.
Identify users and access levels.
Initial Setup (1 - 3 weeks)
Installation of software (cloud-based or on-premise).
Configuration of the environment according to business specifications.
Data Migration (2 - 4 weeks)
Importing existing data and integrating with other systems.
Ensuring all data complies with security standards.
Customization (Varies)
Tailoring features to meet specific organizational needs.
Modifying workflows or reports as necessary.
Testing (1 - 2 weeks)
Conducting user acceptance testing.
Identifying and fixing any issues before going live.
Training (1 - 2 weeks)
Providing training sessions for end-users and administrators.
Go Live (1 week)
Launching the software for daily use.
Monitoring the system for any issues.
Post-Implementation Support (Ongoing)
Continuous support and updates as needed.
Customisation
Role-Based Access Control: Tailoring access to different user roles within the organization.
Custom Dashboards: Users can create dashboards that reflect their priorities.
API Integrations: Connecting Securden with other systems (such as ITSM tools, HR software, etc.) via APIs.
Custom Reporting: Creating reports specific to organizational metrics and compliance needs.
Workflow Modifications: Adjustments to workflows to better fit the organization's processes.
Additional Costs
Setup Fees: This could involve initial configuration charges, especially if extensive customization is needed. Fees can range from $500 to $5,000 depending on your specific needs.
Annual Licensing: Securden typically operates on a subscription model, with licensing fees based on the number of users. This can range from $10 to $30 per user per month.
Maintenance and Support Charges: Some organizations choose to pay for premium support. Costs can be around 20% of the licensing fee annually for maintenance.
Training Costs: Additional, in-depth training sessions beyond standard offerings may incur costs, typically $100 to $300 per session, depending on the depth of training required.
Training
Documentation: Comprehensive online documentation and user guides.
Initial Training Sessions: Usually included as part of implementation.
Webinars and Tutorials: Regularly scheduled webinars for ongoing learning.
Customer Support Services: Access to email and chat support. Premium support options may allow for faster response times and dedicated support representatives.
Community Forums: A platform for users to ask questions and share strategies.
Security Measures
Data Encryption:
At Rest: Data stored on servers is encrypted using strong encryption standards (e.g., AES-256).
In Transit: All data transmitted between the client and Securden servers is protected using TLS (Transport Layer Security) to prevent interception.
Access Control:
Role-Based Access Control (RBAC): Users are granted access based on their roles, ensuring that they can only access information necessary for their work.
Multi-Factor Authentication (MFA): Additional security through two-factor authentication is supported to provide an extra layer of verification for users during login.
Audit Logs:
Comprehensive logging of user activities is maintained to monitor access and changes, which helps in auditing and identifying potential breaches.
Regular Security Audits:
Third-party security assessments and audits are conducted regularly to ensure compliance with industry standards and the effectiveness of security measures.
Data Backup:
Periodic backups of all data are performed to ensure data recovery in case of accidental loss or cyber incidents. Backups are also encrypted for added security.
Updates
Frequency of Updates:
Securden typically releases updates quarterly, but critical security patches may be issued as needed. They aim to keep the software current with the latest security threats and compliance requirements.
Update Management Process:
Regular Monitoring: The Securden team monitors software performance and security vulnerabilities.
Testing: Each update undergoes extensive testing in a staging environment to minimize disruptions before deployment.
User Notifications: Users are notified in advance of updates, especially if they affect system functionality or require user intervention.
Automated Updates: Where applicable, updates are automatic to ensure that all users benefit from the latest features and security enhancements without manual intervention.
Data Ownership and Portability
Data Ownership:
User Ownership: Securden asserts that all data entered into the system remains the property of the user’s organization. Users retain full rights to their data and its usage.
Data Portability:
Export Capabilities: Securden provides users with the ability to export their data in commonly used formats, facilitating easy migration to other systems if needed. This enhances user control over their data.
Data Retention: Organizations can maintain their data as long as the subscription is active. Upon termination of service, Securden typically allows a reasonable period for users to export their data before it is permanently deleted.
Scaling Up / Down
Flexibility:
Scalability: Securden allows organizations to easily scale their subscription up or down based on their current needs. This flexibility is beneficial for businesses that may experience fluctuating user volumes, such as seasonal businesses or growing startups.
Adding Users:
Organizations can add new users at any time. Additional user licenses are typically billed on a prorated basis, meaning you pay only for the portion of the billing cycle during which the additional licenses are in use.
Removing Users:
Users can also be removed from the platform. This might involve a notification period depending on the specific agreement terms, but often companies can adjust their user count monthly.
Subscription Plan Changes:
Organizations can switch between different subscription tiers (if applicable) as the needs change. This would typically involve a discussion with Securden's sales or customer support team to understand the implications of switching plans.
The terms & conditions for contract renewal and cancellation
Contract Duration:
Standard Terms: Contracts are generally offered on an annual basis, with automatic renewal unless a cancellation notice is provided.
Renewal Process:
Securden typically sends a reminder prior to the renewal date, notifying the organization of the upcoming renewal and any changes in pricing or terms.
If no action is taken by the organization (e.g., cancellation notice), the contract will auto-renew for another term under the same terms unless specified otherwise.
Cancellation Terms:
Notice Period: Most agreements require a written notice of cancellation, often 30 to 60 days before the end of the current subscription term. The exact period can vary based on negotiation.
Early Termination: If an organization wishes to cancel before the end of the contract term, they may be subject to early termination fees or obligations, which should be explicitly outlined in the service agreement.
Data Retention: Upon cancellation, organizations are usually given a set period (often 30 days) to export their data before it is permanently deleted.
Refund Policy:
Securden typically follows a no-refund policy for unused time if an organization cancels before the renewal date. However, it’s important to review the specific contract terms for details.
Compliance
GDPR Compliance:
General Data Protection Regulation (GDPR) compliance ensures that Securden takes the necessary steps to protect the sensitive data of users in the European Union, with regulations around data processing, storage, and privacy.
ISO/IEC 27001 Certification:
This international standard outlines the requirements for establishing, implementing, maintaining, and continually improving an information security management system (ISMS). Companies with this certification demonstrate their commitment to managing information securely.
SOC 2 Compliance:
Service Organization Control (SOC) 2 compliance is crucial for service providers that manage customer data. It verifies their ability to maintain the security, availability, processing integrity, confidentiality, and privacy of customer information.
HIPAA Compliance:
For organizations in the healthcare sector, compliance with the Health Insurance Portability and Accountability Act (HIPAA) is essential to protect sensitive patient information.
PCI-DSS Compliance:
Payment Card Industry Data Security Standard (PCI-DSS) compliance ensures that any transactions involving credit cards are handled securely and in compliance with industry standards.
