BECHTLE LIMITED

Azure CSP

Bechtle is a trusted Microsoft Azure Partner delivering end-to-end Cloud services, from adoption and roadmap planning to lifecycle management and 24/7 support. Our Azure Certified Experts provide Packaged Solutions for cost optimisation and governance as well as proactive managed services and CSP loyalty benefits.

Features

• Azure CSP provisioning and subscription management
• Consolidated Azure billing and flexible commercial models
• Access to Microsoft Funding, trials and incentives
• Dedicated Azure Certified Experts
• Packaged Azure solutions and accelerators (FinOps, Azure Adoption, Roadmap Planning)

Benefits

• Flexible Azure CSP commercials with predictable monthly billing
• Expert-led Azure management aligned to Microsoft Best Practices
• Proactive monitoring and optimisation of Cloud environment
• Packaged solutions to accelerate adoption, optimisation and security
• Access to Azure Certified experts
• Loyalty rewards and funding to maximise CSP value
• End-to-end support across full Azure estate

• Education pricing available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at publicsector.uk@bechtle.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

584376049101793

Contact

Public Sector
01249 467900
publicsector.uk@bechtle.com

About your service

• Service categories:

  Application Development and Deployment

  Application platforms

  Deployment centric application platforms

  • Cloud Deployment-Centric Application Platforms
• Multi cloud support: Yes

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Hybrid cloud
• Service constraints: None
• System requirements: None required

User support

• Email or online ticketing support: Yes
• Support response times: As standard, Bechtle Support is underpinned by a Microsoft Premier Support Agreement. Support operates Monday to Friday, 8am–6pm for non-critical incidents, with a 24x7 service for critical (P1) issues. Incident response SLAs are defined: P1 (high business impact) < 1 hour, P2 (moderate impact) < 4 hours, and P3 (minimal impact) < 24 hours. Bechtle will coordinate the best contact method for P1s, including out-of-hours contact, and will always immediately escalate P1s to Microsoft. Consultancy support is provided for Azure technical guidance and Microsoft 365 licensing management and a full Managed Service option is available as well.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: Yes
• Support levels: As standard, Bechtle Support is underpinned by a Microsoft Premier Support Agreement. Support operates Monday to Friday, 8am–6pm for non-critical incidents, with a 24x7 service for critical (P1) issues. Incident response SLAs are defined: P1 (high business impact) < 1 hour, P2 (moderate impact) < 4 hours, and P3 (minimal impact) < 24 hours. Bechtle will coordinate the best contact method for P1s, including out-of-hours contact, and will always immediately escalate P1s to Microsoft. Consultancy support is provided for Azure technical guidance and Microsoft 365 licensing management. ; ; In addition to the support services outlined above, Bechtle can also provide a fully Managed Service. This service is delivered by a dedicated team and can be tailored to align with requirements. Bechtle’s consultancy services are delivered by an experienced Professional Services organisation, consisting of highly skilled Engineers with broad and complementary certifications across the Microsoft portfolio and related technologies. End users are encouraged to engage with Bechtle to discuss requirements and determine the most appropriate service model for their organisation.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: We provide various support services to help organisations and users getting started with Azure. We can provide Azure Migration, Azure Architecture, Secure by Design, FinOps and various other Azure services all available through Consultancy and our Professional Services team.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: Data can be extracted using a number of 3rd party tools. We are able to support the extraction of data subject to an agreed project engagement.
• End-of-contract process: There are no costs involved with exiting a Bechtle Azure contract. a 30-day notice period is required to support with the transition of Azure consumption, Reserved Instances and Savings Plans. Under a Managed Service Azure contract these terms differ slightly per customer and per contract.
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: We provide our Azure onboarding Statements of Works and/or Proposals via email that details T&Cs and our Azure onboarding steps. For offboarding we support any partner transfer which is initiated by either a partner or Azure distributer.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The features available on a mobile device are, where possible, similar to those provided through a Desktop experience.
• Service interface: No
• User support accessibility: None or don’t know
• API: No
• Customisation available: Yes
• Description of customisation: Customers are able to customise the support and services they will get from Bechtle under their Azure CSP. Different support and pricing options are available and our packaged solutions are found under Lot 3.

Scaling

• Independence of resources: https://learn.microsoft.com/en-us/azure/well-architected/

Analytics

• Service usage metrics: Yes
• Metrics types: We are able to set up and provide access to Azure services focused on Service Metrics. Additionally, under a Managed Service contract our Service Desk team will be able to provide Service Metrics to our customers.
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: Yes
• FOCUS resource tagging: No

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: Microsoft

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: Never
• Protecting data at rest: Other
• Other data at rest protection approach: https://learn.microsoft.com/en-us/azure/security/fundamentals/encryption-atrest
• Data sanitisation process: No
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: Data can be exported using a number of 3rd party tools. We can support this extraction of data subject to a specific project engagement.
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • Other
• Other protection within supplier network: Multiple options available within Azure Architecture and available services.

Availability and resilience

• Guaranteed availability: Service is supported under Microsoft SLAs https://www.microsoft.com/licensing/docs/view/Service-Level-Agreements-SLA-for-Online-Services?lang=1
• Approach to resilience: https://azure.microsoft.com/en-gb/explore/reliability/
• Outage reporting: Microsoft will publish service issues via Azure notifications. Bechtle will seek to advise and support any known service issues that impact our customers, via email.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Limited access network (for example PSN)
  • Dedicated link (for example VPN)
  • Username or password
• Access restrictions in management interfaces and support channels: https://learn.microsoft.com/en-us/entra/identity/authentication/concept-authentication-methods-manage
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: Between 6 months and 12 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: Between 6 months and 12 months
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: https://servicetrust.microsoft.com/
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Any Azure related changes will be communicated to end user from Microsoft with additional support from Bechtle.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: https://learn.microsoft.com/en-us/security/benchmark/azure/security-control-vulnerability-management
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: https://learn.microsoft.com/en-us/azure/security/fundamentals/management-monitoring-overview
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: https://learn.microsoft.com/en-us/compliance/assurance/assurance-incident-management
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: Yes
• Connected networks: Other
• Other public sector networks:
  • Azure Government Cloud
  • Police Assured Secure Facilities
  • FedRAMP
  • TPAS2

Pricing

• Discount for educational organisations: Yes
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0.01%
• Between £250,000 and £500,000: 0.01%
• Between £500,001 and £1,000,000: 0.5%
• Between £1,000,001 and £2,500,000: 0.5%
• Between £2,500,001 and £5,000,000: 1%
• Over £5,000,001: 2%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: British Assessment Bureau
• ISO/IEC 27001 accreditation date: Tuesday 4 February 2025
• What the ISO/IEC 27001 doesn’t cover: N/A
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: British Assessment Bureau
• ISO 9001 accreditation date: Tuesday 4 February 2025
• What the ISO 9001 doesn’t cover: N/A
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 1558ec47-32b1-40ed-b801-d45188947349
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 96b7d157-8818-433b-b7f5-60dfc598a1ec
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
    • Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at publicsector.uk@bechtle.com. Tell them what format you need. It will help if you say what assistive technology you use.