Yes……. Information for ESFA Security Requirements.
We will be implementing and using the ACE360 system for managing apprentice records for our End-Point Assessment activity. ACE360 is the industry leading apprenticeship standards management software, that has been developed by the Federation for Industry Sector Skills and Standards (FISSS). FISSS have been trusted to manage the contract for Framework certification and have stored evidence for over 2 million apprentices since 2012 in their ACE, ACW and MA online systems. The data centre for ACE360 is ISO27001 and ISO9001 certified and the Federation hold Cyber Essential Plus certificate for their cloud services. ACE360 is hosted on the Federation Private Cloud within a Tier 3 certified data centre. The system should only go down for routine, planned maintenance. Notice of which will be sent out to users. ACE360 is backed up in two secure UK locations using VEAM, the storage it uses is set up in RAID 10. The servers are failover tested twice a year to ensure failover acts as expected. The storage arrays have 4 hour mission critical support. Penetration testing is undertaken annually by an external partner, and vulnerability scans are undertaken on a weekly basis of the Federation network. In Addition, ACE360 has a tested business continuity plan was a disaster recovery site, ensuring that in the event of the disaster recovery plan requiring to be implemented all systems and staff can be operational within four hours.
Our training providers/employer providers will register apprentices for EPA through ACE360. The apprentice and employer information will be stored on ACE360. The Gateway evidence and the gateway declaration form will be uploaded and submitted to ACE360, the secure, online platform. Our employees will approve the evidence for EPA and upload EPA evidence and grade EPA components on ACE360. Our Assessors will be provided secure access direct to ACE360 and will be allocated records and the information that is relevant to complete their role.
Our customers and ourselves agree to the ACE360 terms and conditions which covers aspects of GDPR and Data protection.