Microsoft 365 Security and Compliance
Microsoft 365 has two main licences E3 & E5, both include enhanced security and compliance capabilities, E5 in particular. Fordway enable organisations to make best use of licences, setting up 24x7 monitoring and security management, and recommending licence savings to be made from the Microsoft and third party solutions.
Features
- Comprehensive review of Microsoft 365 licence usage
- Assessed and delivered against Microsoft Cybersecurity Reference Architecture
- Understand what is within licences currently held
- Realise savings by retiring third party products
- Comprehensive recommendations with reasoning
- Multifactor authentication and Conditional Access with 24x7 security monitoring
- Extensive knowledge and expertise of latest Microsoft Defender Products
- Service delivered in collaboration with business and IT staff
- 24x7 Security monitoring with MS Secure Score analysis and remediation
- Costed options aligned to business cases and benefits
Benefits
- Provide better security and compliance with current products
- Maximise enhanced features within Microsoft 365 subscription
- Reduce spend on additional third party products
- Work alongside existing IT to create runbook for implementation order
- Independent review, with no predetermined outcomes
- Detailed knowledge of management and security tools/capabilities
- Migration from/to any new products
- Operational Management with/additional to existing IT
- Configuration of Dashboards and Reporting
- Use of automation to improve threat detection and remediation
Pricing
£300.00 to £975.00 a person a day
Service documents
Request an accessible format
Framework
G-Cloud 14
Service ID
8 2 4 6 5 1 5 3 8 6 0 3 6 9 7
Contact
Fordway
Richard Blanford
Telephone: 01483 528200
Email: tenders@fordway.com
Planning
- Planning service
- Yes
- How the planning service works
-
1) Review services to be migrated into cloud or to be set up
2) Service implementation and migration planning
3) Review with business and IT from organisation
4) Managed migration from existing service where needed
5) High level and Low level design process as appropriate
6) Service transition to in house or Fordway support, as applicable, once service migrated - Planning service works with specific services
- Yes
- Hosting or software services the planning service works with
-
- Microsoft 365 for Business Standard & Premium
- Microsoft 365 Enterprise E3 & E5
- Microsoft Defender 365
- Microsoft 365 EMS packs
- Microsoft Defender for Cloud
- Privileged Identity Management (PIM)
- Just In-time access (JIA)
- Conditional Access
Training
- Training service provided
- Yes
- How the training service works
- Training defined as part of service migration planning. Ad-hoc, online and classroom training provided in line with client requirements
- Training is tied to specific services
- Yes
- Services the training service works with
-
- MS Office 365
- MS Azure
- Azure Active Directory (AAD)
- Privileged Identity Management
- Conditional Access
Setup and migration
- Setup or migration service available
- Yes
- How the setup or migration service works
-
1) Review services to be migrated into cloud or to be set up
2) Service implementation and migration planning
3) Review with business and IT from organisation
4) Managed migration from existing service where needed
5) High level and Low level design process as appropriate
6) Service transition to in house or Fordway support, as applicable, once service migrated - Setup or migration service is for specific cloud services
- Yes
- List of supported services
-
- Microsoft 365 for Business Standard & Premium
- Microsoft 365 Enterprise E3 & E5
- Microsoft Defender 365
- Microsoft Defender for Cloud
- Privileged Identity Management (PIM)
- Just In-time access (JIA)
- Conditional Access
- Microsoft 365 EMS packs
Quality assurance and performance testing
- Quality assurance and performance testing service
- Yes
- How the quality assurance and performance testing works
- QA and testing agreed as part of service migration planning and delivery
Security testing
- Security services
- Yes
- Security services type
-
- Security strategy
- Security risk management
- Security design
- Cyber security consultancy
- Security testing
- Security incident management
- Security audit services
- Other
- Other security services
-
- 24 x 7 Security Monitoring and Event Analysis
- PSNA approved security hosting and design
- List N (Nuclear) Certified organisation and facilities
- Security incident response, containment and remediation
- Microsoft 365 Security and Compliance
- Microsoft Azure Security and Compliance
- AWS Security Centre management
- Certified security testers
- Yes
- Security testing certifications
-
- CHECK
- CREST
- Tigerscheme
- Cyber Scheme
Ongoing support
- Ongoing support service
- Yes
- Types of service supported
-
- Buyer hosting or software
- Hosting or software provided by your organisation
- Hosting or software provided by a third-party organisation
- How the support service works
-
All Fordway G-Cloud services
MS Office 365
Microsoft 365
Windows 365
MS Azure
MS Power BI
MS Intune
Amazon Web Services
Google G-Suite
Google Cloud Platform
Service scope
- Service constraints
- UK service
User support
- Email or online ticketing support
- Email or online ticketing
- Support response times
-
Priority 1 incident 24 x 7, 15 minute response.
Priority 2 incident 24 x 7, 1 hour response Priority 3 incident 12 x 5, 4 hour response. - User can manage status and priority of support tickets
- Yes
- Online ticketing support accessibility
- None or don’t know
- Phone support
- Yes
- Phone support availability
- 24 hours, 7 days a week
- Web chat support
- Web chat
- Web chat support availability
- 24 hours, 7 days a week
- Web chat support accessibility standard
- WCAG 2.1 A
- Web chat accessibility testing
- Assistive technologies supported by MS Teams
- Support levels
-
Defined according to SLA required.
P1 - major service impact
P2 - significant service impact
P3 - individual users impacted
P4 - no user impact/information
Technical Account management available, service cost dependent on scope of requirements
Resellers
- Supplier type
- Reseller providing extra features and support
- Organisation whose services are being resold
- Microsoft
Staff security
- Staff security clearance
- Conforms to BS7858:2019
- Government security clearance
- Up to Security Clearance (SC)
Standards and certifications
- ISO/IEC 27001 certification
- Yes
- Who accredited the ISO/IEC 27001
- ISOQAR
- ISO/IEC 27001 accreditation date
- 14/03/2022 (recertification) original certification March 2008
- What the ISO/IEC 27001 doesn’t cover
- ISO27001/27017/27018 Scope of certification available on request
- ISO 28000:2007 certification
- No
- CSA STAR certification
- No
- PCI certification
- No
- Cyber essentials
- Yes
- Cyber essentials plus
- Yes
- Other security certifications
- Yes
- Any other security certifications
-
- List N (Nuclear Industry)
- PSN Code of Connection and Compliance
- PAS555
- NHS IGSoC
- ISO27017
- ISO27018
- GCloud Assured
Social Value
- Social Value
-
Social Value
Fighting climate changeFighting climate change
Using Cloud offers considerable efficiency and consumption savings compared to running in house, on premises and hosted environments
Pricing
- Price
- £300.00 to £975.00 a person a day
- Discount for educational organisations
- No