Microsoft Intune (SaaS) - Policy, Device & App. Management
Microsoft Intune is a cloud-based endpoint management solution that securely manages identities, apps, and devices across various platforms, including mobile devices, desktop computers, and virtual endpoints. It ensures data protection and compliance while simplifying app and device management.
Features
- User and Device Management
- App Deployment and Updates
- Policy Automation
- Secure Access Control
- Compliance Monitoring
Benefits
- Remote Wipe: Erase corporate data from lost or stolen devices.
- Conditional Access: Control access based on device compliance.
- Automated Patching: Keep devices up-to-date.
- Multi-Platform Support: Manage Windows, iOS, Android, and macOS.
- Geofencing Policies: Enforce location-based restrictions.
- Customizable Policies: Tailor settings for different user groups.
- App Protection Policies: Secure app data without device enrollment.
- Data Protection: Safeguard sensitive information and prevent leaks.
- Wide App Support: Manage diverse app types across platforms.
- Access Control: Enforce compliance policies and protect data.
Pricing
£3.33 to £10.00 a licence a month
Service documents
Request an accessible format
Framework
G-Cloud 14
Service ID
8 2 0 3 0 0 3 8 2 7 5 8 6 8 8
Contact
Wavenet
Joe Ewins
Telephone: 0333 234 0011
Email: publicsector@wavenet.co.uk
Service scope
- Software add-on or extension
- Yes, but can also be used as a standalone service
- What software services is the service an extension to
- Intune tightly integrates with Entra ID and Conditional Access policies, enabling access control for apps and devices while safeguarding corporate data. Intune’s capabilities are unified with Microsoft 365 and Microsoft Security across cloud and on-premises devices.
- Cloud deployment model
- Public cloud
- Service constraints
-
Internet Connectivity: Intune relies on internet access for management tasks.
Platform Limitations: Some features may vary across platforms (Windows, iOS, Android).
Device Enrollment: Devices must be enrolled for full management capabilities.
User Consent: User consent is required for certain actions (e.g., wiping a device).
License Requirements: Proper licensing is essential for using Intune features. - System requirements
-
- User Licenses: Obtain necessary licenses for each managed user.
- Windows 10/11: Home, Pro, Education, Enterprise, IoT Enterprise editions.
- Apple: iOS 15.0+, iPadOS 15.0+, macOS 12.0+.
- Android: 8.0+ (including Samsung KNOX Standard 3.0+), Android enterprise.
- Linux: Ubuntu Desktop 22.04LTS, 20.04LTS (with GNOME graphical desktop environment).
- Internet Connectivity: Intune relies on internet access.
User support
- Email or online ticketing support
- Yes, at extra cost
- Support response times
- Wavenet support - 1 hour response time inside core working hours 9-5 Monday-Friday UK time. Extended hours 8-8 Monday-Friday available with same SLA. Out of Hours support available with 1 hour response for critical isses. Microsoft infrastructure-level support is 24/7/365 for underlying, abstracted hardware
- User can manage status and priority of support tickets
- Yes
- Online ticketing support accessibility
- None or don’t know
- Phone support
- Yes
- Phone support availability
- 9 to 5 (UK time), Monday to Friday
- Web chat support
- No
- Onsite support
- Yes, at extra cost
- Support levels
- Any customers on managed support will have a dedicated account manager and will be assigned a support team of engineers ranging from 1st line to 3rd line in ability. With further escalation points available outside of support team, to follow through with issues until resolution.
- Support available to third parties
- No
Onboarding and offboarding
- Getting started
-
Our approach includes pre-project consultancy, user acceptance testing (UAT), setup, migration, and post-migration support. During pre-project consultancy, we review existing working approaches, collaboratively document objectives and desired project outcomes. Mid project UAT sessions ensures customer understanding and buy-in and will assist users in a one-on-one basis following any implementation. Post Implementation we will provide documentation and handover of the solution, alongside follow up sessions to ensure the solution is meeting all originally defined objectives.
We can also offer bespoke customer training, which starts with us conducting a Training Needs Analysis (TNA). The results of the TNA allow our training team to assess the current product understanding and ensure that the training programme matches the end user need. Wavenet are a Microsoft Global Training Partner and our training team is staffed by qualified educators with many years of real-world training and teaching experience. Our training team are also Microsoft Innovative Education Expert and Microsoft Advanced Educator accredited. - Service documentation
- Yes
- Documentation formats
- End-of-contract data extraction
- The customer via the relevant service portals can extract all historical call detail and call recording information held
- End-of-contract process
- Included: Day-to-day proactive and reactive support for break-fix, monitoring, patching. Additional Cost: Any large-scale project work involving deployment of new workloads or resources, any large-scale offboarding process moving from Azure to another platform.
Using the service
- Web browser interface
- Yes
- Supported browsers
-
- Microsoft Edge
- Firefox
- Chrome
- Safari
- Application to install
- Yes
- Compatible operating systems
-
- Android
- IOS
- Linux or Unix
- MacOS
- Windows
- Windows Phone
- Designed for use on mobile devices
- Yes
- Differences between the mobile and desktop service
- Microsoft Intune caters to both mobile devices and desktop computers, with distinct features for each platform.
- Service interface
- Yes
- User support accessibility
- WCAG 2.1 A
- Description of service interface
-
Web Interface: Users access Microsoft 365 services via web browsers (e.g., Chrome, Edge, Firefox). They can create, edit, and collaborate on documents directly in the browser.
Desktop Applications: Users interact with Microsoft 365 apps installed on their PCs or Macs. These provide richer features and offline capabilities.
Mobile Apps: The mobile interface allows users to access their files, emails, and collaboration tools on the go.
APIs and Connectors: Developers can integrate Microsoft 365 services into custom applications using APIs (e.g., Microsoft Graph API).
Command Line (CLI): Administrative tasks can be performed using command-line tools. - Accessibility standards
- WCAG 2.1 AA or EN 301 549
- Accessibility testing
- Not known
- API
- Yes
- What users can and can't do using the API
- Microsoft Graph exposes REST APIs and client libraries to access data on the following Microsoft cloud services: Microsoft 365 core services: Bookings, Calendar, Delve, Excel, Microsoft 365 compliance eDiscovery, Microsoft Search, OneDrive, OneNote, Outlook/Exchange, People (Outlook contacts), Planner, SharePoint, Teams, To Do, Viva Insights. Enterprise Mobility + Security services: Advanced Threat Analytics, Advanced Threat Protection, Microsoft Entra ID, Identity Manager, and Intune. Windows services: activities, devices, notifications, Universal Print. Dynamics 365 Business Central services
- API documentation
- No
- API sandbox or test environment
- No
- Customisation available
- Yes
- Description of customisation
-
Configuration Policies
Device Compliance Policies
Control access to corporate resources dynamically.
Custom Reports and Dashboards
Run PowerShell or shell scripts on devices for specific tasks.
Automate custom actions during device management.
Define unique compliance rules (e.g., encryption, passcode length).
Ensure devices meet organization-specific standards.
Scaling
- Independence of resources
- Azure’s robust isolation mechanisms ensure that users remain unaffected by the demands placed by other tenants.
Analytics
- Service usage metrics
- Yes
- Metrics types
- Monitor the compliance, health and activity of endpoints across your organization (Metrics include startup times, app reliability, and hardware performance.)
- Reporting types
-
- Real-time dashboards
- Reports on request
Resellers
- Supplier type
- Reseller providing extra support
- Organisation whose services are being resold
- Microsoft
Staff security
- Staff security clearance
- Conforms to BS7858:2019
- Government security clearance
- Up to Security Clearance (SC)
Asset protection
- Knowledge of data storage and processing locations
- Yes
- Data storage and processing locations
- United Kingdom
- User control over data storage and processing locations
- Yes
- Datacentre security standards
- Complies with a recognised standard (for example CSA CCM version 3.0)
- Penetration testing frequency
- At least once a year
- Penetration testing approach
- ‘IT Health Check’ performed by a CHECK service provider
- Protecting data at rest
-
- Physical access control, complying with CSA CCM v3.0
- Physical access control, complying with SSAE-16 / ISAE 3402
- Encryption of all physical media
- Scale, obfuscating techniques, or data storage sharding
- Other
- Other data at rest protection approach
- Data in Azure is encrypted at rest by default. See: https://learn.microsoft.com/en-us/azure/security/fundamentals/physical-security and https://learn.microsoft.com/en-us/azure/storage/common/storage-service-encryption
- Data sanitisation process
- Yes
- Data sanitisation type
-
- Explicit overwriting of storage before reallocation
- Deleted data can’t be directly accessed
- Equipment disposal approach
- Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001
Data importing and exporting
- Data export approach
-
Approach to exporting data varies across products/services being leveraged, for example:
Exchange Online: Use the eDiscovery Export Tool to export mailbox data.
SharePoint Online: Create a site collection backup using PowerShell or the SharePoint admin center.
OneDrive for Business: Export user data from OneDrive using the SharePoint Migration Tool or PowerShell.
Teams: Export Teams data using the Microsoft Teams admin center or PowerShell.
Azure AD: Export user accounts and group data using PowerShell. - Data export formats
-
- CSV
- Other
- Other data export formats
- JSON
- Data import formats
-
- CSV
- Other
- Other data import formats
- JSON
Data-in-transit protection
- Data protection between buyer and supplier networks
- Other
- Other protection between networks
- Azure virtual networks entirely segregated from Wavenet's network.
- Data protection within supplier network
-
- TLS (version 1.2 or above)
- Other
- Other protection within supplier network
- Role-Based Access Control (RBAC), Multi-Factor Authentication
Availability and resilience
- Guaranteed availability
- See Microsoft's Service Level Agreements (SLA) for online services: https://www.microsoft.com/licensing/docs/view/Service-Level-Agreements-SLA-for-Online-Services?lang=1
- Approach to resilience
- SharePoint is designed with robust resilience features to ensure data durability and availability. Here are the key aspects: SharePoint uses Azure Storage with dual datacenter writes for file consistency, and checksums along with append-only storage enhance data integrity. Metadata about each file is stored in Azure SQL Database, providing redundancy and ensuring access to user content even during failures. Additionally, Microsoft 365 services operate across geographically dispersed datacenters, ensuring responsive service instances for user requests .
- Outage reporting
- Platform level outages are reported publicly via: https://azure.status.microsoft/en-gb/status. Individual servers/applications are proactively monitored and incidents raised with Wavenet helpdesk to remedy as required.
Identity and authentication
- User authentication needed
- Yes
- User authentication
-
- Public key authentication (including by TLS client certificate)
- Identity federation with existing provider (for example Google Apps)
- Dedicated link (for example VPN)
- Username or password
- Other
- Other user authentication
- Conditional Access governs access based on logon location, device used for access and its compliance status.
- Access restrictions in management interfaces and support channels
- Microsoft Entra ID (Microsoft's cloud-based Identity provider) provides advanced identity management functionality such as Multi-factor authentication, device registration, self-service password management, self-service group management, privileged identity management and role-based access.
- Access restriction testing frequency
- At least once a year
- Management access authentication
-
- 2-factor authentication
- Identity federation with existing provider (for example Google Apps)
Audit information for users
- Access to user activity audit information
- Users receive audit information on a regular basis
- How long user audit data is stored for
- User-defined
- Access to supplier activity audit information
- Users receive audit information on a regular basis
- How long supplier audit data is stored for
- User-defined
- How long system logs are stored for
- User-defined
Standards and certifications
- ISO/IEC 27001 certification
- Yes
- Who accredited the ISO/IEC 27001
- URS
- ISO/IEC 27001 accreditation date
- June 2023
- What the ISO/IEC 27001 doesn’t cover
- A10.1.2 (we do not create encryption keys)
- ISO 28000:2007 certification
- No
- CSA STAR certification
- No
- PCI certification
- No
- Cyber essentials
- Yes
- Cyber essentials plus
- Yes
- Other security certifications
- Yes
- Any other security certifications
- Crest certified (January 2024)
Security governance
- Named board-level person responsible for service security
- Yes
- Security governance certified
- Yes
- Security governance standards
- ISO/IEC 27001
- Information security policies and processes
- Wavenet is an ISO27001 certified company and we adhear to the standard, we are audited on this standard annually, Wavenet is also a CE+ certified company
Operational security
- Configuration and change management standard
- Supplier-defined controls
- Configuration and change management approach
- Wavenet conform to ISO2000
- Vulnerability management type
- Supplier-defined controls
- Vulnerability management approach
- Wavenet conform to and follow the NIST standard and ISO27002
- Protective monitoring type
- Supplier-defined controls
- Protective monitoring approach
- We have continual monitoring with EDR solution feeding into a SIEM that is monitored 24/7 that is monitored by SOC
- Incident management type
- Supplier-defined controls
- Incident management approach
- Wavenet is ISO27001 certified and we follow the playbook as part of our certification.
Secure development
- Approach to secure software development best practice
- Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)
Public sector networks
- Connection to public sector networks
- No
Social Value
- Social Value
-
Social Value
- Fighting climate change
- Covid-19 recovery
- Tackling economic inequality
- Equal opportunity
- Wellbeing
Fighting climate change
At Wavenet we recognise that we are accountable to more than just our shareholders. As a large business with a significant workforce and offices nationwide, we are working hard to incorporate considerations around sustainability into every business process, reducing our impact on the world around us.
We understand our responsibility to society and the environment. Achieving the Ecovadis Gold certification validates our comprehensive approach spanning environmental concerns, ethical business practices, human rights, and sustainable procurement. Our journey towards Ecovadis Platinum by 2024 underscores our ongoing commitment to progress.
Innovation at Wavenet is synonymous with sustainability. Our product portfolio prioritises eco-conscious solutions, empowering customers to embrace sustainable technologies. Whether it's our hardware-free hosted voice systems or energy-efficient cloud computing solutions, we facilitate choices that minimise environmental impact and enhance operational efficiency. Our stringent processes ensure sustainability throughout the product lifecycle, from ethical sourcing practices to responsible disposal of legacy equipment in compliance with UK regulations.
People and processes are pivotal in our sustainability mission. Through a formal Carbon Reduction Plan, we rigorously monitor and mitigate our environmental footprint, engaging our workforce in initiatives aimed at conserving natural resources. Despite pandemic-induced reductions in business travel, we remain committed to sustainable mobility solutions. Our transition to hybrid and electric vehicles, coupled with employee incentives like the electric car scheme and Cycle to Work program, reflects our dedication to greener commuting alternatives.
Crucially, sustainability isn't just a top-down directive; it's ingrained in our corporate culture. Our workforce actively participates in planning and executing sustainability initiatives, with dedicated champions driving eco-friendly practices both in our offices and beyond. From recycling initiatives to lifestyle changes promoting environmental consciousness, our employees play a pivotal role in fostering a sustainable future, both within Wavenet and in their communities.Covid-19 recovery
In the wake of the UK's exit from lockdown restrictions, Wavenet initiated a more flexible approach to workplace dynamics. Departing from the conventional mandate of requiring colleagues to be physically present in the office five days a week, the company encouraged a shift towards a hybrid model. Initially, colleagues were urged to return to the office for two days weekly, a measure subsequently extended to three days. This adjustment has yielded numerous benefits, notably fostering enhanced collaboration and bolstering team cohesion.
Acknowledging the concerns of colleagues hesitant to resume office attendance, Wavenet proactively conducted welfare meetings with them. These discussions served to elucidate individual apprehensions and collaboratively devise strategies to facilitate a smooth transition back to the office environment.
The employment environment has changed as the company has adopted a more flexible working style, with employees spending less hours in the office each week. This adjustment has reduced office congestion, making it easier to follow health-related social distancing guidelines. With fewer people in the workspace at once, colleagues may keep safe distances, reducing the risks of close contact. While new recruits are contractually designated the office as their permanent place of work, they are expected, in practice, to be physically present for a maximum of three days per week.
In response to the challenges precipitated by the COVID-19 pandemic, Wavenet has expanded its benefits package. Notably, the introduction of an Employee Assistance Programme underscores the company's commitment to supporting the holistic well-being of its workforce. Furthermore, recognising the importance of nurturing emerging talent and contributing to community development, Wavenet has embarked on an initiative to onboard apprentices. This endeavour not only fuels the company's growth trajectory but also offers invaluable work experience and formal qualifications to aspiring individuals seeking entry into the job market.Tackling economic inequality
Wavenet's commitment to economic equality and social responsibility was solidified in 2023 when we became a Living Wage Employer, guaranteeing all employees a wage that aligns with the actual cost of living in the UK. This dedication was reaffirmed in May 2024 when the company implemented a 10% increase in line with rising living costs.
The Living Wage Foundation's meticulous methodology is the bedrock of our fair wage practices. Each year, they rigorously compute the cost of a standard shopping basket, encompassing essentials like groceries, energy bills, childcare, and transportation. This thorough analysis enables them to determine the actual cost of living, guiding Living Wage Employers like Wavenet in setting appropriate pay rates for our employees.
As advocates for the Living Wage movement, Wavenet and the Living Wage Foundation empower individuals and families to break free from poverty cycles and flourish with dignity. This partnership not only champions fair compensation but also encourages other businesses to adopt equitable wage practices, fostering community upliftment.
Recognising the importance of nurturing talent, Wavenet has welcomed apprentices into its ranks, providing opportunities for young individuals struggling to find their career paths. Emphasising workplace diversity, the company acknowledges the role of varied perspectives in driving growth and prosperity. With core values centred on innovation, change embracement, diversity appreciation, and social and environmental responsibility, Wavenet collaborates with clients across sectors, both large and small, to innovate products and enhancements that spur growth opportunities.
By prioritising fair compensation, talent development, and diversity, Wavenet not only upholds its values but also enhances employee motivation, productivity, and societal equity. This holistic approach underscores the company's commitment to fostering a fair and thriving workplace environment while actively contributing to broader social and economic betterment.Equal opportunity
Wavenet proudly upholds the principles of equal opportunity employment, actively encouraging individuals from diverse backgrounds to apply for positions within the company. Embracing inclusivity, we provide support to colleagues with disabilities and long-term health issues, fostering an environment where every individual feels valued and empowered to contribute their unique perspectives and talents.
Internal progression is a cornerstone of our organisational culture, as evidenced by our practice of advertising vacant roles internally and providing comprehensive support for colleagues' career development endeavours. We prioritise the advancement of our workforce by funding qualifications and offering tailored training programs aimed at enhancing skills and competencies.
As champions for equitable compensation, Wavenet pays all employees the real living wage, above the government-mandated minimum wage, to help them afford rising costs. Our true living wage employer certification shows our commitment to economic fairness and employee well-being.
With a workforce exceeding 950 individuals, Wavenet is obligated to report and publish our annual gender pay gap, a responsibility we take seriously. Over the past year, concerted efforts have resulted in a marginal reduction of the gender pay gap, reflecting our ongoing commitment to fostering gender equality within the workplace.
Prior to commencing employment, Wavenet diligently verifies that all prospective staff are legally entitled to work in the United Kingdom, adhering to regulatory requirements and ethical standards. Our policies and procedures are meticulously crafted to ensure a non-discriminatory and respectful working environment, where every employee feels valued and safe to voice concerns without fear of reprisal.
Embedded within our organizational ethos is a steadfast commitment to ethical conduct and integrity, as outlined in the The Wavenet Code of Conduct. This commitment extends to interactions with employees, partners, and customers alike, reinforcing our dedication to upholding the highest standards of professionalism and ethical behaviour in all facets of our operations.Wellbeing
At Wavenet, the wellbeing of our colleagues is at the heart of everything we do. We're committed to providing a supportive environment where every team member can thrive both personally and professionally. Our comprehensive range of employee benefits and schemes reflects this dedication to nurturing a holistic sense of wellbeing.
One of the cornerstones of our approach is ensuring access to top-tier healthcare through our private medical care program. This ensures that our employees and their families have access to prompt medical attention whenever needed. Additionally, our life assurance coverage offers peace of mind, providing financial security to our team members and their loved ones.
We understand the importance of work-life balance, which is why we offer a holiday buying scheme. This empowers our employees to tailor their time off to suit their individual needs, enabling them to recharge and return to work refreshed. Our cycle to work scheme not only promotes physical activity but also supports eco-friendly commuting options, contributing to personal and environmental wellbeing simultaneously.
In alignment with our commitment to sustainability, we've implemented an electric car scheme to incentivise the adoption of greener transportation alternatives, reducing emissions and supporting environmentally conscious choices.
Mental health support is paramount, which is why we've established an employee assistance programme. This confidential counselling service provides resources to navigate personal and professional challenges, ensuring that our team members feel supported and valued.
Furthermore, we've trained Mental Health First Responders in each office. These individuals are equipped to offer immediate support and guidance to colleagues in times of need, ensuring that mental health remains a priority throughout our organisation.
We also provide fresh fruit in each office, promoting wellbeing through healthy eating habits. Additionally, we welcome dogs into the office every Friday, recognising the positive impact they have on morale and stress relief.
Pricing
- Price
- £3.33 to £10.00 a licence a month
- Discount for educational organisations
- No
- Free trial available
- No