Nurved Consulting Ltd

Microsoft Office 365 Services

Microsoft Office 365 is a cloud-based service that offers robust security, reliability, and user productivity. Office 365 includes Microsoft Office 2019, Microsoft SharePoint, OneDrive Skype for Business, Microsoft Teams. Azure AD Sync for Single Signon across all devices.

Features

• Office 365 Real-Time Co-Authoring (Word, Excel, PowerPoint,Outlook)
• One Office 365 license covers devices
• Desktop version of Office 2019 Included in Office 365
• Office 365 Includes Rights management, data loss prevention, and encryption
• 50GB email storage Standard in Office 365 Essentials and Premium
• 1TB storage & sharing Standard in Office 365 Essentials/Premium
• Dedicated Office 365 Team and Service Desk
• 24/7 Service support for Office 365
• Team Collaboration

Benefits

• Office 365 offers Rapid Elasticity and scalability.
• Cost efficiency using Office 365
• Office 365 Software updates as standard
• Office 365 Mobility, work from anywhere and with any device
• Office 365 Collaboration and Sharing included
• Additional High level Security available on Office 365
• Backup and Recovery availabe on Office 365
• Unified Communications with Team/Skype for Business
• VoIP/SIP Voice communications (PSTN)
• multi-party HD video

£3.50 to £30 a user a month

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at ian.poole@nurved.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

106747659554069

Contact

Ian Poole
07866 457440
ian.poole@nurved.com

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: Exchange Online (Plan 1) (Government Pricing); No Compliance and information protection; No File storage and sharing; No fully installed Office; No Enterprise management; Exchange Online (Plan 2) (Government Pricing); No File storage and sharing; No fully installed Office; No Enterprise management; Office 365 Enterprise E1 (Government Pricing); Office 365 Enterprise E3 (Government Pricing); Office 365 Enterprise E4 (Government Pricing)
• System requirements:
  • Stable Internet Connectivity
  • Valid Domain Name with DNS Access Control
  • Azure AD Sync requires AD Domain (Onpremise or Cloud based)

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: 24/7 technical support, via email/phone. Actual experienced support engineers answer calls
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: Onsite support
• Support levels: Remote support is provided 24/7; Experienced onsite support engineers @ £75 per hour (Normal office hours 09:00-18:00, prorated to the nearest 15 minute period. Out of hours support @ £150 per hour.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Standard and Premium on-board : Efficiently set up and on-board organization-wide users with guided walk through from a personal advisor, removing technical hurdles and enabling end-users to use the technology immediately.; Migration Services: Easily move data from one environment to another in Office 365, minimizing downtime and data loss while maintaining legacy file structures.; End User Training: Instruct up to 25 remote users on the functionalities of Office 365 through a remote, web-based meeting tool, delivering a far lower cost than hiring external consultants.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Microsoft tools can be used to export data
• End-of-contract process: Data migration services are available at additional cost on request

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: Yes
• Compatible operating systems:
  • Android
  • IOS
  • Linux or Unix
  • MacOS
  • Windows
  • Windows Phone
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Mobile Apps offer View, edit, and create documents with the familiar Office interface optimized for mobile phones and tablets.
• Service interface: Yes
• User support accessibility: WCAG 2.1 AA or EN 301 549
• Description of service interface: The Microsoft Admin centre can be used to set up the organization in the cloud, manage users, manage subscriptions and licensing. Including advanced deployments
• Accessibility standards: None or don’t know
• Description of accessibility: Normally the admin centre would be only accessed by Nurved, providing the deployment, licensing and user setups. However on request other qualified users would allowed access.
• Accessibility testing: N/A
• API: Yes
• What users can and can't do using the API: You can create custom solutions that access and interact with all the richness of a user’s Office 365 data—and you can build those solutions across all mobile, web, and desktop platforms. The new Office 365 APIs enable you to provide access to Office 365 data, including their mail, calendars, contacts, files, and folders. All right from within your app itself.; ; Whether you're building web applications using .NET, PHP, Java, Python, or Ruby on Rails, or creating apps for Windows 10, Universal Apps, iOS, Android, or on another device platform. It's your choice.
• API documentation: Yes
• API documentation formats:
  • HTML
  • PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Admin - Customize the Office 365 theme for your organization; Integration with MS Flow; Users - Change your Office 365 start app, Limited flow integration. IE sync of Dropbox and onedrive

Scaling

• Independence of resources: Office365 is highly available and easily scalable with high capacity for a large numbers of users. Microsoft store and process your data in various DataCentres around the world which offer agility and prevents over subscribing to any particular region. Microsoft performs any such transfer of Customer Data to any such country and to store and process Customer Data in order to provide the Self-Service Online Services

Analytics

• Service usage metrics: No

Resellers

• Supplier type: Reseller providing extra support
• Organisation whose services are being resold: Giacom

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: Other locations
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest: Physical access control, complying with another standard
• Data sanitisation process: Yes
• Data sanitisation type: Explicit overwriting of storage before reallocation
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Standard data can be copied to local/network drives/storage. For email/Outlook data you can export items by creating a .pst file, which is an Outlook Data File that contains your messages and other Outlook items and is saved on your computer.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • CSV
  • OST
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • PST
  • OST (With Data Conversion Tools supplied by Nurved)

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: 99.9% SLA.; ; We provide financial backing to our commitment to achieve and maintain the service levels for each service. If we do not achieve and maintain the service levels for each service as described in the Service Level Agreement, then you might be eligible for a credit towards a portion of your monthly service fees. To learn more about our Service Level Agreements for the services, download the Service Level Agreement for Microsoft Online Services https://go.microsoft.com/fwlink/?linkid=272026 . For overview information about system uptimes, as well as security, privacy, and compliance information, see Transparent operations from Office 365 https://go.microsoft.com/fwlink/?linkid=845427
• Approach to resilience: https://docs.microsoft.com/en-us/office365/securitycompliance/office-365-data-resiliency-overview
• Outage reporting: Overall performance and outage reporting via https://status.office365.com/.; ; Individual directorate tenants can logon to the Office 365 admin portal

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Username or password
• Access restrictions in management interfaces and support channels: https://docs.microsoft.com/en-gb/office365/securitycompliance/?redirectSourcePath=%252fen-gb%252farticle%252fSecurity-and-Compliance-in-Office-365-for-business-Admin-Help-7fe448f7-49bd-4d3e-919d-0a6d1cf675bb
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • 2-factor authentication
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: BSI
• ISO/IEC 27001 accreditation date: 19/01/2019
• What the ISO/IEC 27001 doesn’t cover: The whole service adheres to the principles of ISO/IEC 27001 certification
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber essentials plus: No
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: No
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: https://docs.microsoft.com/en-us/office365/securitycompliance/

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: https://docs.microsoft.com/en-us/deployoffice/change-management-for-office-365-clients
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: https://www.microsoft.com/en-gb/security; ; A defense-in-depth strategy ensures that security controls are present at various layers of the service and that, should any one area fail, there are compensating controls to maintain security at all times. The strategy also includes tactics to detect, prevent, and mitigate security breaches before they happen. This involves continuous improvements to service-level security features, including:; • Port scanning and remediation; • Perimeter vulnerability scanning ; • Operating system security patching; • Network-level distributed denial-of-service (DDoS) detection and prevention; • Multi-factor authentication for service access
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: We use O365 Manager Plus; O365 Manager Plus comes with preconfigured reports on everything from email traffic, shared mailboxes, mailbox sizes, public folders, email spam, and malware, to Office 365 group properties (including security and distribution groups). Use the Azure AD reports to identify inactive users, soon-to-expire licenses, soon-to-expire passwords, and more. With this Office 365 reporting tool, you can get detailed reports on Office 365 productivity apps such as Skype for Business, OneDrive for Business, and Yammer. Our compliance reports help enterprises adhere to IT compliance standards like SOX, PCI DSS, HIPAA, GLBA, and FISMA
• Incident management type: Supplier-defined controls
• Incident management approach: https://docs.microsoft.com/en-gb/office365/securitycompliance/?redirectSourcePath=%252fen-gb%252farticle%252fSecurity-and-Compliance-in-Office-365-for-business-Admin-Help-7fe448f7-49bd-4d3e-919d-0a6d1cf675bb

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  We stand together in our determination to address climate change head-on. Each day, we work hand in hand with our diverse stakeholders to create a meaningful and lasting environmental impact. This involves reducing our carbon footprint, embracing renewable energy investments, and empowering our workforce to amplify their combined influence on our operations. Through collective effort, we are poised to construct a resilient future for our planet, its inhabitants, and the generations to come.

  Covid-19 recovery

  The Covid Recovery initiative aims to harness the same level of urgency, adaptability, and innovation that characterized efforts to save lives and assist individuals throughout the pandemic, towards addressing the inequality and disadvantage starkly highlighted by Covid.; Our commitment lies in ensuring that essential services and support are efficiently delivered to those who require them, precisely when they need them. This proactive approach is essential in effectively addressing the challenges at hand once again.

  Tackling economic inequality

  Social responsibility is deeply ingrained in Nurved's identity. Our primary goal is to contribute to reducing the disparity in income and opportunity among various segments of society.; We are actively creating job opportunities and providing training, particularly for individuals who encounter obstacles in securing employment and for those within industries facing shortages of skilled workers. Nurved is also committed to fostering educational achievement through training programs designed to address skill gaps and lead to recognised qualifications.

  Equal opportunity

  We hold the belief that true innovation stems from inclusivity. To shape the future, we are constructing a workplace that embraces ambition for individuals with disabilities and those managing long-term health conditions. Here, we foster an environment where people recognise and proactively respond to the crucial interconnection between health, employment, and disability.; Furthermore, we are dedicated to enhancing the pool of highly qualified applicants to ensure our workforce mirrors the diverse spectrum of customers we serve and the communities we operate within.; We uphold the principle that all labour should be equitable and dignified. Every individual, regardless of their location in the UK or their industry, deserves access to high-quality employment opportunities.

  Wellbeing

  The foundation of a successful business lies in prioritising health and wellness. We are dedicated to promoting vitality, fostering a high quality of life, and cultivating a positive work environment where individuals can flourish.; Our foremost goal is to take a proactive approach, empowering employees with the knowledge, resources, and support needed to excel both professionally and personally, without being hindered by any factors that could adversely affect their well-being.

Pricing

• Price: £3.50 to £30 a user a month
• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: 1 TB of cloud storage for each person; Work across multiple devices; 60 free minutes of Skype calls per month; The latest Office applications with exclusive features Word, Excel, PowerPoint, Outlook, Access, Publisher ; Free Office Trial on your PC and Mac
• Link to free trial: https://products.office.com/en-gb/try

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at ian.poole@nurved.com. Tell them what format you need. It will help if you say what assistive technology you use.