MODULO 2 LIMITED

Microsoft 365

Supply of licensing for Microsoft 365 cloud services

Features

• Hosted Email
• Instant Messaging

Benefits

• Access data from multiple devices

£50 to £500 a user a year

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at nc@modulo2.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

497409985118727

Contact

Neil Cowles
020 3855 6414
nc@modulo2.co.uk

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Hybrid cloud
• Service constraints: No service constraints
• System requirements: Internet access

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: 4 hours response Monday to Friday between 8am and 5pm
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Standard support is Monday to Friday 9am to 5pm; 24*7*365 support can be supplied due to contract negotiations
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Onsite training is provided
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: Third party tools can be used to extract data
• End-of-contract process: Licenses are removed and the provided services (e.g. email) stop working

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: No difference
• Service interface: Yes
• User support accessibility: WCAG 2.1 A
• Description of service interface: Administrators get access to a service interafce showing status
• Accessibility standards: WCAG 2.1 A
• Accessibility testing: No testing done
• API: No
• Customisation available: No

Scaling

• Independence of resources: Microsoft have designed their system to cope with the fluctuating demands

Analytics

• Service usage metrics: Yes
• Metrics types: The service provides metrics on email traffic, user file storage, instant messaging usage
• Reporting types:
  • Real-time dashboards
  • Reports on request

Resellers

• Supplier type: Reseller providing extra support
• Organisation whose services are being resold: Microsoft

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest: Encryption of all physical media
• Data sanitisation process: No
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: Through third party tools
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: Microsoft do not provide guaranteed levels of avaiability
• Approach to resilience: Available on request
• Outage reporting: Public Dashboard

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Username or password
• Access restrictions in management interfaces and support channels: These channels are restricted to specific staff only
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • 2-factor authentication
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber essentials plus: No
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: No
• Security governance certified: No
• Security governance approach: We follow Cyber Essentials +
• Information security policies and processes: Cyber Essentials +

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: We follow ITIL procedures
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: We base this on Cyber Essentials +
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Monitoring alerts us to potential compromises and we respond the same day
• Incident management type: Supplier-defined controls
• Incident management approach: Monitoring and ticketing systems alert us to incidents

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  Equal opportunity

  Equal opportunity

  We are an equal opportunity employer and endeavour to become more inclusive each year

Pricing

• Price: £50 to £500 a user a year
• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: 30 day trial can be provided

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at nc@modulo2.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.