Knowledge Base &Technical Documentation

Implementation timelines vary significantly based on the scope of configuration; the complexity of existing data to be migrated, the number of integrations required and the size of the organisation. As a general guide, a standard Build-phase implementation for a single organisation ranges from three to six months. Multi-agency or enterprise-wide deployments covering Plan, Build and Operate functions across multiple programs typically range from six to eighteen months.

In important influencing factor is the willingness of each Client to consider changes to its existing processes. Some clients will seek to use as much of the out-of-the-box processes as possible. Other clients will require all of their existing processes to be configured within PMWEB. Most Clients will take an approach that falls somewhere in between. Client decisions on release to end users will also impact Go Live. Some Client will not want a formal Go Live until everything has been configured. Other Clients prefer progressive Go Lives – options including release of some functionality to a selected user group; release of some functionality to all users; release of all functionality to a selected user group; and release of all functionality to all users (“big bang”).

HKA Tech also offers Quick Start Packages for organisations that want an accelerated path to a productive PMWEB environment. PMWEB’s out-of-the-box SaaS features can be fully operational in less than a week. Go Live to end users, after initial set-up to organisation’s specifics, can take anywhere between two weeks and twelve weeks, depending on availability of the organisation’s personnel to conform instructions and receive training.

Our Implementation approach provides a detailed overview of the phases and deliverables involved in a standard deployment.

Yes. Data migration is a formal, structured phase in every HKA Tech implementation. We have migrated data from many different source locations, tanging from Excel spreadsheets to complete enterprise systems. Migration begins with the Client’s initial decision on what will me migrated. Some Clients will start with only new projects in PMWEB – this being the simplest approach. Most Clients, however, have in-flight projects that need to be migrated, as well as projects that are in planning/development. Other Client want an extensive migration that includes historical projects.

We recommend a data audit to assess the quality and structure of existing data, including an assessment of any cleansing and validation that will need to be completed before import, according to the quality of the source data. A migration plan is developed, including mapping to PMWEB's data model; any staging approach needed; and client sign-off at each stage. For complex migrations, we run parallel systems during a transition period to ensure data integrity before decommissioning the legacy system.

Data migration is also available as a standalone engagement for organisations that have already deployed PMWEB but need historical data consolidated into the platform.

HKA Tech delivers training as part of every implementation engagement, tailored to the roles within your organisation — project managers, cost controllers, contract administrators, finance teams and system administrators each receive role-specific training relevant to their actual daily workflows in the configured system.

Training can be delivered in-person at client offices, remotely, or as a blended approach. Most training nowadays is conducted online using tools such as Microsoft Teams. PMWEB also provided online training resources such as PMWEB Learn and PMWEB University. For large-scale rollouts, we can deploy WalkMe in-application guidance through our Digital Adoption (DAP) service — providing on-screen walkthroughs that support users at the point of need after Go Live, reducing reliance on formal training sessions.

Training is a key component of Organisational Change Management (OCM), as described on our OCM page

PMWEB SaaS includes full vendor technical support at no additional cost, including live operators during local business hours and a 24/7/365 online support portal. HKA Tech provides structured post-implementation support through its dedicated APAC support team, headquartered in Sydney Australia. Support arrangements are defined at the outset of each engagement and include definition of how support relates to an organisation’s existing support structure (e.g., its IT Help Desk). Typically, HKA’s support role relates to the changes that a Client may have instructed during implementation; the familiarity gained by HGA Tech’s team with specific Client business processes through that implementation; and Client plans for continuous improvement – requiring ongoing configuration enhancements and support during system upgrades. HKA Tech also includes a named account manager for escalation and strategic advice.

For clients seeking a more formalised advisory relationship, our Capital Works Advisory service provides access to experienced practitioners who can assist with program delivery challenges beyond system support.

PMWEB’s out-of-the-box SaaS features can be fully operational in less than a week. From that point, configuration is undertaken to meet the specifics of each Client. The Quick Start approach is designed to achieve early start and involve the Client’s personnel in working with the system. In the final analysis, there is virtually nothing that we do in an implementation that our Client’s own personnel cannot do after they have been trained. This is a key feature of PMWeb – it is designed for user configuration, so there is no need to bring back an army of consultants in future if the Client’s processes and approaches change over time. The Client can undertake its own configurations as it pursues continuous improvement. It is common to also include Provisional Sums where the detail of requirements is yet to be confirmed, or a separate fixed price is possible for defined areas of the work.

Go Live to end users, after initial set-up to organisation’s specifics — can take anywhere between two weeks and twelve weeks, depending on availability of the organisation’s personnel to confirm instructions and receive training.

Read more on the HKA Tech Quick Start approach.

Third party specialists can be engaged to perform network penetration tests and application vulnerability testing. The tools they use are Nmap, Metasploit pro, skipfish, etc.. This testing is typically performed quarterly and with every major release of the software.

Load and performance testing is also performed with software called LoadComplete and a distributed cloud setup.

Application / usability testing is done via dedicated testing staff, IT support team staff, and automation tools such as TestComplete, Telerik Test Studio, and Microsoft Visual Studio Test Professional.

In virtualised configurations, workload monitoring is done with standard tools for the VMware infrastructure. Thresholds and alerts are set and when reached, additional hardware resources are added promptly.

Upon termination of the contract for hosting/SaaS services, PMWeb will, on Client request, provide a backup of all Client data including databases containing transaction and file storage data, custom reports, etc. The backup consists of standard MS SQL databases and SSRS reports. A fee is charged for this database copy, depending on the delivery method (electronic, physical or both). For electronic delivery, the fee is under $1,000, Physical will depend on the media chosen by the Client (Hard Drive(s), Tape(s), etc; and the method of delivery (e.g., bonded courier).

Data Destruction

The Client may request that all data held by PMWeb be destroyed. The destruction process will use a secure-erase method that complies with Military standards for data wiping (min 3-pass, erase - overwrite). The process is documented and this documentation is sent to the Client.

Data Destruction

The Client may request that all data held by PMWeb be destroyed. The destruction process will use a secure-erase method that complies with Military standards for data wiping (min 3-pass, erase - overwrite). The process is documented and this documentation is sent to the Client.

Yes – both PMWeb and HKA provide an Archive Tool. We recommend the HKA Tool for a number of reasons, including both functionality and cost. This requires Archiving prior to expiry of the SaaS (not so much of an issue with self-hosted instances, where the Client holds a perpetual licence). The location of the archive is on the server itself by default (i.e., in standard folders created by the Client), with the Client then moving the records to their final location. It is possible to automate where the archive records go (e.g., directly to an EDMS) but this would be a customisation at additional cost – quoted once details of the end-location, network and constraints are known. The archive is also set to do one PMWeb project at a time. The initial design for clients was to archive projects/contracts as they completed. Some clients have asked for a mass export of all projects This can be quoted if required. A short (under 8 minutes) video on the operation of the HKA PMWeb Archive Tool is available here.

Software as a Service (SaaS) is the most popular option. PMWEB utilises Amazon Web Services (AWS), with data hosted in AWS data centres. SaaS is appropriate for the majority of APAC clients and provides managed infrastructure, automatic backups, patching, and version management as part of the service.

Two additional options are also available: managed hosting, where PMWEB manages a dedicated environment on your behalf on nominated infrastructure and on-premise deployment, where PMWEB is installed on your own infrastructure and managed by your internal team with HKA Tech support. On-premise and managed hosting are used where a Client has procure perpetual licences for PMWEB, rather than renewable annual licences.

For most government and infrastructure clients, the AWS SaaS model fully addresses data sovereignty requirements through the APAC data centre regions. For agencies with specific legislative obligations, HKA Tech can provide a technical assessment. See the Hosting & SaaS page for full details

For SaaS deployments, all client data is stored in AWS data centres located in the AWS Region chosen by the Client. In APAC, these Regions include Australia, New Zealand, Singapore, Hong Kong, Japan, Korea, Thailand, Malaysia, Indonesia and India. In Australia, for example, AWS maintains two Regions - Sydney and Melbourne. If an Australian AWS Region is chosen, no data is routed through or stored in offshore regions unless explicitly requested and agreed.

Security is closely managed both through the infrastructure provision and within PMWEB. The Accreditations page provides details, including independent certifications against international standards including ISO/IEC 27001 (Information Security Management Systems. In Australia, the Australian Cyber Security Centre (ACSC) has awarded PROTECTED status to the AWS EC2 Cloud used for PMWEB SaaS delivery — the highest security certification available in Australia for a cloud service. Security documentation, data processing agreements and privacy policy information are available on request and as part of the procurement process for government clients.

Individual access controls, user permissions and audit logging within PMWEB are configured as part of the implementation to align with your organisation's security policy.

SaaS service level agreements covering uptime, backup frequency, recovery point objectives (RPO) and recovery time objectives (RTO) are specified in the individual service agreement for each client. Standard SaaS arrangements include daily automated backups with a minimum retention period and a defined restoration process.

Planned maintenance windows are communicated in advance and are scheduled to minimise impact during standard APAC business hours. Incident response procedures and escalation paths are defined in the service agreement.

For specific SLA terms relevant to your requirements — including any uplift for critical government services — please contact our team during the procurement or renewal process.

Yes. HKA Tech is registered to supply its services and PMWEB software with Local Government Procurement (LGP) for NSW; and Local Buy Pty Ltd for Queensland, the Northern Territory and Tasmania. These organisations enable eligible government agencies to procure PMWEB implementation and related services directly, without a separate open tender process.

Other government organisations such as the Digital Transformation Agency, NSW Procurement and Buying for Victoria streamline the procurement process by pre-qualifying suppliers and maintaining up-do-date information in key areas such as capabilities and insurance. Panel participation and current accreditation status can be confirmed by our team during your procurement planning phase. For detailed accreditation information, see the Accreditations page

The software is built to be true enterprise and with a light footprint. PMWeb uses load-on-demand lists throughout the application and AJAX is used extensively to off-load the data validation, etc… to the client when possible. The only limit on the number of users is the hardware configuration used. PMWeb software is also built to support scaling via Network load balancing and SQL clustering and can be fully virtualized and spread across multiple hardware/servers to scale it for a large number of users. PMWeb software can scale up by adding additional resources (CPUs/CPU Cores, memory, etc…) and scale out by using Hardware-based or OS-based network load balancing for the web front-end and by using SQL Server Clustering for the database back-end.

PMWeb contracts (in its SaaS delivery) to 99.9% availability during a Client’s Business Hours. On the East Coast of Australia, this can be from 7am to 7pm Monday to Friday.

The application fully supports network load balancing and SQL-Server clustering for both front-end and back-end scalability. PMWeb is built to support scaling via Network load balancing and SQL clustering and can be fully virtualized and spread across multiple hardware/servers to scale it for a large number of users.

Yes. Standard manual MS SQL backup or scheduled backups occur in the background and do not disrupt the live use of the system.

Yes, archived databases can be made active (read-only if desired) either directly through the PMWeb interface or via MS SQL Server Reporting Services (SSRS). SSRS reports are an integrated feature of PMWeb and can run reports on both live production data and archived data all from the same interface. Incremental recovery is no problem, using standard MS SQL administrative functionality.

Typically a 2-layer firewall setup (hardware/ software) with anti-virus/anti-spam/and intrusion detection on both layers. The application is forced to use SSL transport for all communications and is only web-facing via port 443 including the Integration Manager web services. In addition, SSL / IPSec VPNs and URL/IP authentication can be used for additional security if desired. PMWeb SaaS utilises Microsoft Defender in conjunction with Crowdstrike Falcon for advanced endpoint security.

All data in transit is encrypted over HTTPS with TLS 1.2 or higher and SSL certificates; 4096 bit key length; Certificates managed by PMWeb IT, TLS uses ECDHE Key algorithm. All data at rest including backups is encrypted with AES 256 encryption. All keys are managed by PMWeb IT using AWS KMS (https://aws.amazon.com/kms/). Clients are also permitted to manage their own keys by special arrangement. Files/documents are stored securely inside the SQL database for additional security.

The application is entirely self-contained. Integration uses Windows Web Services to export/import files. The services use HTTP/HTTPS and SOAP. In addition to PMWeb's Integration Manager, the PMWeb API also facilitates data exchange and is enables for both SOAP and REST. PMWeb has been integrated in the past with a number of middleware solutions, including MuleSoft, JBOSS and the Boomi AtomSphere Platform.

Yes. VM Ware, Microsoft Hyper-V and Xen have all been tested and are used in production PMWeb environments.

No, the application is built with GUID keys and it does not have any such limitations. Also, it is fully web based and uses only ports 80/443 so it fully supports network load balancing via hardware/software and SSL/XML acceleration.

Reports are run mostly in SSRS (SQL Server Reporting Services) and can be run on a separate server or cluster of servers. In addition, if further enhancement is required, you can create a separate SQL database for reporting and keep the data updated using either replication or log shipping.

Both transactional data and file storage is stored in SQL Server databases. You can use the SQL server backup facilities or other programs such as netbackup or Idera SQL Backup or SQL agents for backup exec and Acronis products. SaaS delivery via AWS also uses AMIs (Amazon Machine Images) for full-system backups.

The application is zero-footprint and does not require any plugins such as ActiveX, Java or Silverlight, etc… All components including the viewer, etc.. run server-side. The only port that needs to be open through the firewall is port 443 for SSL. In addition, extra security can be obtained by using IPSec or SSL VPN, URL-authentication and IP-authentication. PMWEB SaaS utilises Crowdstrike and Microsoft Defender for advanced endpoint protection.

PMWeb conducts annual penetration testing and will make the results of the latest penetration test available to a Client on request. Should the Client wish to conduct additional penetration testing, PMWeb will cooperate. Any penetration testing by the Client would be at the Client’s cost.

The supporting platform (Operating Systems, Web Server, SQL Server) is primarily tied to the Microsoft suite of server products. Since its inception, PMWeb has been upgrading to the latest proven releases of Microsoft operating systems, web and database servers and will continue to do so. Major PMWeb product releases occur annually. Minor releases occur every 3-6 months. Patches or quick fixes occur on an as needed basis according to the criticality of the issue.

Patch policy

All Systems owned and operated by PMWeb must be manufacturer supported and have up-to-date security patches installed to protect the asset from known vulnerabilities. Critical vulnerabilities will be patched within 1 week of identification.

PMWeb IT will manage the patching needs for all software, firmware, middleware, servers, workstations, firewalls, switches and routers on the network; and is responsible for routinely assessing compliance with the PMWeb patching policy, as well as providing guidance to Clients in issues of security and patch management.

PMWeb’s active patching teams are required to compile and maintain reporting metrics that summarise the outcome of each patching cycle. These reports are used to evaluate the current patching levels of all systems and to assess the current level of risk.

Upgrades

Although it is recommended that clients upgrade regularly, as new releases become available, these upgrades are not mandatory. the Client may decide whether it wishes to upgrade or not. If the Client decides to not upgrade, PMWeb continues its support services.

Upgrade is initially completed in the non-Production environment. Sometimes clients ask HKA to become involved in the upgrade process, conducting required testing etc. Other clients will have an internal PMWeb application support team that they will task to coordinate the upgrade with PMWeb and do the necessary testing. In these cases, we typically supply a checklist to assist in the test process.

Once the upgraded non-Production site has been tested – including any system integration testing – a window is scheduled to upgrade the Production site. A similar testing process is recommended after this upgrade.

Advance Notice

PMWeb IT and support staff have access to systems via Active Directory Authentication via security groups and two-factor authentication; least privilege permissions applied. Accounts are registered with staff in person. PMWeb maintains a standard checklist for its staff to undertake each registration. Provisioning and deprovisioning is managed via the PMWeb ticket system, with all accounts being deprovisioned immediately upon staff termination.

PMWeb maintains a list of its authorised personnel, managing this via their Freshdesk ticketing system.

The Client can specify procedures for access. For example, some clients prefer to have all access via an online meeting convened and monitored by their team.

No physical access is involved for our team. Physical (on site) security is managed by AWS as follows:

AWS provides physical data centre access only to approved employees. All employees who need data centre access must first apply for access and provide a valid business justification. These requests are granted based on the principle of least privilege, where requests must specify to which layer of the data centre the individual needs access and are time-bound. Requests are reviewed and approved by authorised personnel, and access is revoked after the requested time expires. Once granted admittance, individuals are restricted to areas specified in their permissions. Anyone granted visitor badge access (i.e. to a data centre not owned by AWS) must present identification when arriving on site and are signed in and escorted by authorised staff.

Further information on AWS physical access

PMWEB includes native dashboards and reporting that give project-level and portfolio/program-level visibility within the platform. HKA Tech's Business Intelligence service extends this by building custom analytical dashboards that can aggregate data from PMWEB and other enterprise systems — finance, ERP, asset management and more — into a unified reporting layer.

This is a separate service from HKA Tech, independent of PMWEB licensing. Organisations that use other PMIS platforms alongside PMWEB, or that need executive dashboards drawing on multiple data sources, benefit from BI as a standalone engagement. The BI service also applies AI-enhanced capabilities to surface anomalies, generate narrative summaries and automate periodic reporting that would otherwise require manual preparation.

A Digital Adoption Platform overlays on-screen guidance — walkthroughs, tooltips, task lists and help panels — directly within a software application, guiding users through processes at the point of need without leaving the system. WalkMe is the primary DAP tool HKA Tech deploys.

For PMWEB, WalkMe walkthroughs can be configured for specific workflows — for example, guiding a cost controller through their first change order submission, or walking a new project manager through the budget setup process. This significantly reduces the volume of helpdesk queries after go-live and accelerates user proficiency, particularly for large rollouts where one-to-one training is not practicable.

HKA Tech's DAP service also extends beyond PMWEB — WalkMe can be deployed on any web-based enterprise application, making it applicable to finance systems, document management tools and other platforms in use across your organisation. See the DAP page for more information.

HKA Tech applies AI capabilities across all three of its technology service lines, with a focus on practical, substantiated outcomes rather than speculative use cases.

In PMWEB, AI-assisted cost forecasting and schedule risk analysis surfaces within PMWEB portfolio workflows, helping project controls teams identify emerging budget variances earlier. In Business Intelligence, AI-enhanced dashboards detect anomalies in cost and schedule data and generate automated narrative summaries for executive reporting. In Digital Adoption, AI-driven WalkMe guidance personalises in-application walkthroughs based on user behaviour and proficiency, adapting the level of guidance as users become more confident.

HKA Tech is receiving increasing queries about AI capabilities from tender processes and existing clients. Our Artificial Intelligence page provides additional information.. If you have specific requirements or questions about AI applicability to your programs, contact our team for a direct conversation.

Yes. As part of the Digital Adoption service, HKA Tech can deploy UserWay for enhanced WCAG (Web Content Accessibility Guidelines) compliance on web-based enterprise applications. UserWay adds an accessibility widget that allows end users to adjust font sizes, colour contrast, navigation modes and other accessibility settings to meet their individual requirements.

UserWay is an optional service, as PMWEB already complies with WCAG 2.2 Level AA, which is the most widely adopted standard for web accessibility. For government agencies with mandatory accessibility obligations, UserWay can be applied to the PMWEB interface and other enterprise tools as part of an accessibility compliance program.

HKA Tech APAC is headquartered in Sydney, Australia, with offices in Melbourne, Brisbane, and Perth. Our team works with clients across Australia and the wider Asia Pacific region, including clients in New Zealand, South East Asia, and the Pacific Islands.

HKA Tech APAC operates as part of HKA Global, which has more than 45 offices across six continents. This global network supports APAC clients with access to specialist expertise in capital works disputes, advisory and project intelligence. HKA offices in APAC, outside Australia, include Singapore, Kuala Lumpur, Seoul and Beijing.

Office contact details and addresses in Australia are available in the Contact section and in the site footer. Contact details for our other offices in APAC are available here.

HKA Tech is the technology and advisory division of HKA Global — the world's leading claims, disputes and advisory firm for the construction, manufacturing, technology and engineering sectors. HKA Global operates across 45+ offices and six continents, providing expert witness, dispute resolution and project advisory services on some of the world's largest infrastructure and construction programs

The HKA Tech APAC team draws on this organisational depth — including access to Crux Insight, HKA's proprietary construction dispute intelligence platform — to provide capital works advisory services that go beyond what a pure technology company can offer. The combination of software implementation expertise and hands-on project delivery knowledge is a core differentiator for HKA Tech in the APAC market.

For general enquiries, technical support, or to discuss a new engagement, the best way to reach the HKA Tech APAC team is via the Contact Us page. Existing clients with active support arrangements should use the support contact and escalation paths defined in their service agreement. If you are unsure who to contact, the general enquiry route above will direct your request to the right team.

For organisations considering PMWEB or any of HKA Tech's services, we recommend an initial conversation to discuss your requirements before proposing a specific scope. There is no expectation that you have detailed requirements at the first contact — our team can help you identify the right starting point.

PMWEB licensing is subscription-based and is priced according to the number of users, the modules enabled and the hosting arrangement (SaaS, managed, or on-premise). As the APAC implementation partner, HKA Tech arranges PMWEB licensing directly as part of the engagement.

Implementation services — configuration, data migration, integrations, training and support — are quoted based on the specific scope of each engagement. Quick Start Packages have a defined scope and are quoted as a fixed-price arrangement. Business Intelligence, DAP, and Advisory services are each quoted separately based on requirements. See our Pricing page for more information.

HKA Tech does not publish pricing schedules publicly, as engagement scope varies considerably across the client base. To discuss pricing for your specific situation, please contact our team — we can provide a high-level indication quickly once we understand the broad scope.

PMWeb’s zero footprint client access removes the requirement to download installation packages, which reduces the initial high level bandwidth required in other systems that download client software when launching the system.

Broadband speeds are recommended for best user experience - DSL/Cable, Fiber Optic, T1/T3. Recommended minimums are 1Mbps upload and download. This requirement is based on accessing the various modules, running reports and uploading/downloading documents in a typical active session.

In addition, PMWeb has been designed and optimized to deliver excellent response times from screen to screen. The software is built to be true enterprise and with a light footprint. PMWeb uses load-on-demand lists throughout the application and AJAX is used extensively to off-load the data validation and other processing tasks to the client when possible.

The system can easily handle 3,000-5,000 users with 1,000 concurrent users logged in and actively using the application. A properly configured load-balanced setup can easily handle 70,000-100,000 transactions per hour. The only limitations on concurrent users are the hardware limitations such as CPU, memory and speed of the storage. More details on PMWeb capacity and results of Load Testing. Large PMWEB Clients have more than 10,000 users.

Yes - PMWeb is 100% web based and does not require Citrix. If users are required to use Citrix for their desktop environments, then they can simply launch a browser in the Citrix session and access PMWeb with no impact on that Citrix session.

Business rules are handled through conditional APM and workflow rules and can be created via a GUI-based interface with drag-and-drop. The rules are stored in the database and can be edited in the application or using standard MSSQL database tools.

PMWeb supports from MS SQL 2008 R2 Standard through to MS SQL 2019. All new SaaS instances are delivered using MS SQL 2019, as this is the first SQL version that has AI / machine learning capabilities.

Collation must be SQL_Latin1_General_CP1_CI_AS. Analysis Services collation must match

The software is written for the .Net Framework with extensive use of AJAX. The languages used are industry-standard VB.net, C#, Javascript and HTML5. The user interface is aligned with Angular.

PMWeb provides built-in identity management including configurable password expiration; and history and complexity settings that can be expanded with Active Directory/LDAP integration and/or SAML support.

Active Directory (AD) authentication can be achieved with PMWeb’s LDAP Integration utility. This utility allows for AD users to be integrated into PMWeb’s login page thus activating single sign-on (SSO) functionality.

PMWeb similarly supports the OASIS-ratified SAML 2.0 standard.

PMWeb uses industry standards for email system integration. For outbound emails, PMWeb integrates with SMTP Servers, allowing for options to change the port, set as asynchronous, the outbound email address, authentication credentials and enabling of SSL. For inbound emails, PMWeb uses POP3 with options to change Port, enable SSL and allocated project for different email addresses. PMWEB SaaS can include M365 email functionality of can be integrated with a Client’s email system, according to each Client’s requirements.

The Data store is fully normalized and built with relationship-enforcement. In addition the business logic uses transactions for record updates and deletions. The transactions can be rolled back in case of interruption to ensure data integrity.

Passwords are encrypted using SHA-2 256-bit encryption.

All Client data remains the property of the Client.

PMWeb uses SSRS for Business Intelligence (BI) reporting. This is one of the most advanced reporting engines available on the market, Number 1 globally for Business Intelligence and Analytics Platforms – Gartner Report, 2026. All currency values and unit values are stored in the database to 5 decimal points to ensure accurate calculations (i.e. eliminate rounding errors) in reports and within the system itself.

PMWeb captures latitude/longitude coordinates to 14 decimal places. Only 7 decimal places are required for 10cm accuracy (6 decimal places is 11.08cm accurate).