Wavenet

Microsoft 365

Microsoft 365, the heart of the Modern Workplace, seamlessly blends industry-leading applications like Microsoft Teams, SharePoint Online, and Exchange Online. It empowers secure collaboration, harnesses intelligent tools, and drives robust productivity across organizations.

Features

• Microsoft 365 Apps: Always up-to-date Office apps.
• Microsoft Teams: Seamless communication and collaboration.
• Exchange Online: Email, calendar, and contacts.
• SharePoint Online: Document management, intranet, and teamwork.
• Microsoft Intune: Device management and security.
• Conditional Access: Control access based on conditions.
• Microsoft Defender: Advanced threat protection.
• Data Loss Prevention (DLP): Safeguard sensitive information.
• Azure Information Protection (AIP): Classify, label, and protect data.

Benefits

• Premium Apps: Word, Excel, PowerPoint, Outlook, Teams.
• Microsoft Defender: Safer online experience.
• Conditional Access: Secure access control.
• AIP: Protect sensitive data with labels and encryption.
• Unified Communication: Seamlessly connect via Teams for chat, calls, meetings.
• Efficient Collaboration: Co-author documents in real time with SharePoint.
• Automated Workflows: Use Power Automate to streamline repetitive tasks.
• Enhanced Mobility: Access files and apps on any device, anywhere.

• Education pricing available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at publicsector@wavenet.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

195188760121441

Contact

Joe Ewins
0333 234 0011
publicsector@wavenet.co.uk

About your service

• Service categories:

  Applications

  Content workflow and management

  Enterprise portals and digital workspaces

  • Multi-Audience Portals
  • Integrated Employee Workspaces
• Multi cloud support: No

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: Modern Workplace: An approach that combines cloud and on-premises capabilities to create a digital workspace.; Microsoft Teams: Enabling real-time communication, file sharing, and collaboration.; SharePoint Online: A powerful content management and collaboration platform for creating intranet sites, document libraries, and more.; Exchange Online: The cloud-based email and calendaring solution.
• Cloud deployment model:
  • Public cloud
  • Hybrid cloud
• Service constraints: Data Sovereignty: Data may reside in various global data centres. Organizations must understand data sovereignty regulations and implications for compliance.; Internet Connectivity: Reliable internet access is crucial for seamless Microsoft 365 usage. Buyers should ensure stable connections for uninterrupted productivity.; Customization Limits: While customization options exist, certain limitations apply. Buyers should assess compatibility with third-party integrations.; Security Configuration: Properly configuring security settings is essential. Neglecting this may pose security risks.; User Training: Successful adoption requires user training. Buyers should invest in training programs for optimal utilization.
• System requirements: System requirements differ per product

User support

• Email or online ticketing support: Yes, at extra cost
• Support response times: Wavenet support - 30 min to 4 hour response time inside core working hours 9-5 Monday-Friday UK time aligned to incident priority. Extended (M-F 8-8) and 24x7 support options available. Microsoft infrastructure-level support is 24/7/365 for underlying, abstracted hardware
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 A
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Any customers on managed support will have a dedicated account manager and will be assigned a support team of engineers ranging from 1st line to 3rd line in ability. Escalation points are available with optional to follow through with issues until resolution. Costs vary depending on the Azure resources being supported.
• Support available to third parties: No

Onboarding and offboarding

• Getting started: Our approach includes pre-project consultancy, user acceptance testing (UAT), setup, migration, and post-migration support. During pre-project consultancy, we review existing working approaches, collaboratively document objectives and desired project outcomes. Mid project UAT sessions ensures customer understanding and buy-in and will assist users in a one-on-one basis following any implementation. Post Implementation we will provide documentation and handover of the solution, alongside follow up sessions to ensure the solution is meeting all originally defined objectives.; We can also offer bespoke customer training, which starts with us conducting a Training Needs Analysis (TNA). The results of the TNA allow our training team to assess the current product understanding and ensure that the training programme matches the end user need. Wavenet are a Microsoft Global Training Partner and our training team is staffed by qualified educators with many years of real-world training and teaching experience. Our training team are also Microsoft Innovative Education Expert and Microsoft Advanced Educator accredited.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: All customer data is stored in Microsoft's Cloud, customers can transfer the Tenant (including data) when the contract ends to another service provider. If other data exists, the customer can request this data via email.
• End-of-contract process: Microsoft is governed by strict standards and removes cloud customer data from systems under our control, overwriting storage resources before reuse, and purging or destroying decommissioned hardware. https://www.microsoft.com/en-gb/trust-center/privacy/data-management?rtc=1
• Documentation accessibility standard: WCAG 2.2 A

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: Yes
• Compatible operating systems:
  • Android
  • IOS
  • Linux or Unix
  • MacOS
  • Windows
  • Other
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The mobile apps, available for both iOS and Android, adapt to smaller screens, touch interfaces, and varying orientations. While most features are available across devices, there might be slight differences in functionality due to screen size limitations.
• Service interface: Yes
• User support accessibility: WCAG 2.2 AAA
• Description of service interface: Web Interface: Users access Microsoft 365 services via web browsers (e.g., Chrome, Edge, Firefox). They can create, edit, and collaborate on documents directly in the browser.; Desktop Applications: Users interact with Microsoft 365 apps installed on their PCs or Macs. These provide richer features and offline capabilities.; Mobile Apps: The mobile interface allows users to access their files, emails, and collaboration tools on the go.; APIs and Connectors: Developers can integrate Microsoft 365 services into custom applications using APIs (e.g., Microsoft Graph API).; Command Line (CLI): Administrative tasks can be performed using command-line tools.
• Accessibility standards: WCAG 2.2 AA
• Accessibility testing: Not known
• API: Yes
• What users can and can't do using the API: Microsoft Graph exposes REST APIs and client libraries to access data on the following Microsoft cloud services: Microsoft 365 core services: Bookings, Calendar, Delve, Excel, Microsoft 365 compliance eDiscovery, Microsoft Search, OneDrive, OneNote, Outlook/Exchange, People (Outlook contacts), Planner, SharePoint, Teams, To Do, Viva Insights. Enterprise Mobility + Security services: Advanced Threat Analytics, Advanced Threat Protection, Microsoft Entra ID, Identity Manager, and Intune. Windows services: activities, devices, notifications, Universal Print. Dynamics 365 Business Central services
• API documentation: No
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: Microsoft 365 (M365) offers extensive customization options across a wide range of products, allowing users to tailor their experience to their specific needs and preferences, including:; Office Applications (Word, Excel, Powerpoint etc), ; OneDrive, ; Microsoft Stream, ; Microsoft Bookings, ; Viva Insights, ; Microsoft Lists, ; Microsoft Forms, ; Sway, ; Visio, ; Power Apps, ; Power Automate, ; Microsoft Planner, ; Microsoft To Do, ; Microsoft Loop, ; Power BI

Scaling

• Independence of resources: Azure’s robust isolation mechanisms ensure that users remain unaffected by the demands placed by other tenants.

Analytics

• Service usage metrics: Yes
• Metrics types: Email activity, Email apps usage, Mailbox usage, Office activations, Active Users, Microsoft 365 groups, Microsoft 365 Apps usage, OneDrive for Business user activity, OneDrive for Business usage, SharePoint site usage, SharePoint activity, Microsoft Teams user activity, Microsoft Teams device usage, Microsoft Teams team activity, Viva Engage activity, Viva Engage device usage, Viva Engage groups activity report, Forms activity, Dynamics 365 Customer Voice activity, Skype for Business Online activity, Skype for Business Online conference organized activity, Skype for Business Online conference participant activity, Skype for Business Online peer-to-peer activity, Viva Learning activity, Viva Insights activity, Project activity, Visio activity
• Reporting types:
  • Real-time dashboards
  • Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Reseller providing extra support
• Organisation whose services are being resold: Microsoft

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CHECK service provider
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Physical access control, complying with another standard
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
  • Other
• Other data at rest protection approach: Data in Azure is encrypted at rest by default. See: https://learn.microsoft.com/en-us/azure/security/fundamentals/physical-security and https://learn.microsoft.com/en-us/azure/storage/common/storage-service-encryption
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase

Data importing and exporting

• Data export approach: Approach to exporting data varies across products/services being leveraged, for example:; Exchange Online: Use the eDiscovery Export Tool to export mailbox data.; SharePoint Online: Create a site collection backup using PowerShell or the SharePoint admin centre.; OneDrive for Business: Export user data from OneDrive using the SharePoint Migration Tool or PowerShell.; Teams: Export Teams data using the Microsoft Teams admin centre or PowerShell.; Azure AD: Export user accounts and group data using PowerShell.
• Data export formats:
  • CSV
  • ODF
  • Other
• Other data export formats:
  • JSON, PST, CAB
  • XLS, XLSX
  • ZIP, DOCX, PPTX, TXT
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • JSON
  • XML
  • DOCX, PPTX, TXT, XLSX

Data-in-transit protection

• Data protection between buyer and supplier networks: Other
• Other protection between networks: Azure virtual networks entirely segregated from Wavenet's network.
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • Other
• Other protection within supplier network: Role-Based Access Control (RBAC), Multi-Factor Authentication

Availability and resilience

• Guaranteed availability: See Microsoft's Service Level Agreements (SLA) for online services: https://www.microsoft.com/licensing/docs/view/Service-Level-Agreements-SLA-for-Online-Services?lang=1
• Approach to resilience: The service resiliency is provided by the Microsoft cloud architecture, this includes redundant hardware, data replication and automated integrity checking.
• Outage reporting: Platform level outages are reported publicly via: https://azure.status.microsoft/en-gb/status. Individual servers/applications are proactively monitored and incidents raised with Wavenet helpdesk to remedy as required

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)
  • Username or password
• Access restrictions in management interfaces and support channels: Conditional Access governs access based on logon location, device used for access and its compliance status.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)

Audit information for users

• Access to user activity audit information: Users receive audit information on a regular basis
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users receive audit information on a regular basis
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Wavenet is an ISO27001 certified company and we adhere to the standard and has an Information security management system drawn from ISO27002 and we follow the NIST standard for cyber security framework, we are audited on this standard annually, Wavenet is also a CE+ certified company
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Wavenet conform to ISO2000
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Wavenet conform to and follow the NIST standard and ISO27002
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: We have continual monitoring with EDR solution feeding into a SIEM that is monitored 24/7 that is monitored by SOC
• Incident management type: Supplier-defined controls
• Incident management approach: Wavenet is ISO27001 certified and we follow the playbook as part of our certification.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 1%
• Between £500,001 and £1,000,000: 2%
• Between £1,000,001 and £2,500,000: 3%
• Between £2,500,001 and £5,000,000: 4%
• Over £5,000,001: 5%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: United Registrar of Systems
• ISO/IEC 27001 accreditation date: Thursday 18 July 2024
• What the ISO/IEC 27001 doesn’t cover: N/A
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: United Registrar of Systems
• ISO 9001 accreditation date: Monday 12 August 2024
• What the ISO 9001 doesn’t cover: N/A
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 39aabf05-4ab8-4ee7-adcd-3318af1f9d2f
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 6cc5c85d-03f1-446c-9e9d-7338dfb9f0ce
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New apprenticeships on the contract workforce in the relevant area that meet the criteria set out in MAC 1b

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Delivery of apprenticeships, supported internships and T Level industry placement opportunities (Level 2, 3 and 4+) in relation to the contract

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Plans for positive actions with community groups.

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at publicsector@wavenet.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.