BECHTLE LIMITED

Microsoft 365 CSP

Bechtle is a InDirect Microsoft Cloud Solution Provider (CSP). Through the CSP licensing programme, we can provide subscription licensing for the Microsoft 365 and Office 365 platforms and associated software components. As a Microsoft Cloud Solution Provider we provide flexible plans and pricing with monthly, yearly and triennial billing.

Features

• Microsoft 365 CSP licensing for Productivity, Teams, Collaboration Platform
• Online meetings, web-conferencing, voice and video
• Microsoft 365 Apps (Word, Excel, PowerPoint, OneDrive, Outlook), OneNote, SharePoint
• Security solutions ( Defender, Purview, Identity, Data)
• Enterprise Mobility, MDM and Cyber Security Solutions
• Advanced compliance tools, including rights management services and information protection
• Copilot solutions

Benefits

• Flexible CSP licensing terms and billing options
• Self-Service licence marketplace
• Licence Insights
• Access to Microsoft Premier Support
• 24x7 Incident support
• Improved Business Continuity and 99.9% Availability

• Education pricing available
• Free trial available

Service documents

• Pricing document

  ODS

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at publicsector.uk@bechtle.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

373090488997462

Contact

Public Sector
01249 467900
publicsector.uk@bechtle.com

About your service

• Service categories:

  Applications

  Collaborative

  • Email
  • Team collaboration

  Conferencing and virtual event

  • Web Conferencing Applications
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: https://learn.microsoft.com/en-us/office365/servicedescriptions/office-365-service-descriptions-technet-library
• System requirements: Please refer to: support.microsoft.com/en-gb/topic/system-requirements

User support

• Email or online ticketing support: Yes
• Support response times: Our standard support hours; are 8am – 6pm Monday-Friday; for non-critical issues, and a; 24x7 service for critical issues,; including the below:; • <1-hour response time on; critical issues; • 4 Hour Critical issue SLA; from Microsoft; • 24-hour incident resolution; for non-critical issues
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Our standard support hours; are 8am – 6pm Monday-Friday; for non-critical issues, and a; 24x7 service for critical issues,; including the below:; • <1-hour response time on; critical issues; • 4 Hour Critical issue SLA; from Microsoft; • 24-hour incident resolution; for non-critical issues; ; All above mentioned support is included free of charge with our CSP service
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: We provide various support services to help organisations and users getting started with M365. We can provide:; - Technical, security and governance design workshops; - User training and adoption; - User documentation; - Technical implementation services
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: Data can be extracted using a number of 3rd party tools. We are able to support the extraction of data subject to an agreed project engagement
• End-of-contract process: There are no costs outside of CSP licences within the Bechtle CSP contract. ; Mid-term termination of a Bechtle CSP agreement requires payment for the remainder of the term at point of termination.; If you are cancelling licensing/services, Bechtle require a 30-day notice period at point of your renewal date.
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: We provide our CSP onboarding pack via email that details T&Cs and our CSP onboarding guide. For offboarding we support any partner transfer which is initiated by either a partner or CSP distributer.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The features available on a mobile device are, where possible, similar to those provided through a Desktop experience.
• Service interface: No
• User support accessibility: None or don’t know
• API: No
• Customisation available: No

Scaling

• Independence of resources: https://learn.microsoft.com/en-us/compliance/assurance/assurance-microsoft-365-isolation-controls

Analytics

• Service usage metrics: No

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: Microsoft

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Supplier-defined controls
• Penetration testing frequency: Never
• Protecting data at rest: Other
• Other data at rest protection approach: https://www.microsoft.com/en-gb/trust-center/privacy
• Data sanitisation process: No
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: Data can be exported using a number of 3rd party tools. We can support this extraction of data subject to a specific project engagement
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • Legacy SSL and TLS (under version 1.2)
• Data protection within supplier network: Other
• Other protection within supplier network: Bechtle do not hold any customer data within our network or directly access customer data so not relevant.

Availability and resilience

• Guaranteed availability: Service is supported under Microsoft SLAs https://www.microsoft.com/licensing/docs/view/Service-Level-Agreements-SLA-for-Online-Services?lang=1
• Approach to resilience: https://learn.microsoft.com/en-us/microsoft-365/enterprise/advanced-data-residency?view=o365-worldwide
• Outage reporting: Microsoft will publish service issues via the end customers M365 admin centre.; Bechtle will seek to advise and support any known service issues that impact our customers, via email.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: Management interface access is secured by a minimum of two factor authentication but can also be configured with a number of restrictions under Conditional Access policies.; ; https://docs.microsoft.com/en-us/microsoft-365/enterprise/microsoft-365-policies-configurations?view=o365-worldwide
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: Between 6 months and 12 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: Between 6 months and 12 months
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: https://servicetrust.microsoft.com/
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: https://servicetrust.microsoft.com/; ; https://docs.microsoft.com/en-us/deployoffice/change-management-for-office-365-clients
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: http://download.microsoft.com/download/6/6/2/662F89E4-9340-4DDE-B28E-D1643681ADEB/Security%20in%20Office%20365%20Whitepaper.docx
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: http://download.microsoft.com/download/6/6/2/662F89E4-9340-4DDE-B28E-D1643681ADEB/Security%20in%20Office%20365%20Whitepaper.docx
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: https://learn.microsoft.com/en-us/compliance/assurance/assurance-incident-management
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Trial licenced from Microsoft are available for 30 days across various products including Microsoft 365 business and Enterprise Plans.

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0.01%
• Between £250,000 and £500,000: 0.01%
• Between £500,001 and £1,000,000: 0.5%
• Between £1,000,001 and £2,500,000: 0.5%
• Between £2,500,001 and £5,000,000: 1%
• Over £5,000,001: 2%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: British Assessment Bureau
• ISO/IEC 27001 accreditation date: Tuesday 4 February 2025
• What the ISO/IEC 27001 doesn’t cover: N/A
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: British Assessment Bureau
• ISO 9001 accreditation date: Tuesday 4 February 2025
• What the ISO 9001 doesn’t cover: N/A
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 1558ec47-32b1-40ed-b801-d45188947349
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 96b7d157-8818-433b-b7f5-60dfc598a1ec
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
    • Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it

Service documents

• Pricing document

  ODS

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at publicsector.uk@bechtle.com. Tell them what format you need. It will help if you say what assistive technology you use.