IMICRO UK LTD

Microsoft 365 Licence Provision

iMicro provides the supply and provisioning of Microsoft 365 licences for UK public sector organisations, including healthcare providers and local authorities. It supports the procurement, assignment, renewal, and administration of Microsoft 365 subscriptions in line with customer requirements.

Features

• Supply and provisioning of Microsoft 365 licences
• Assistance with licence selection based on customer requirements
• Management of licence quantities and subscription changes
• Support for licence renewals and term changes
• Centralised billing and invoicing for Microsoft 365 subscriptions
• Coordination with Microsoft where required for licence-related queries

Benefits

• Simple and efficient procurement of Microsoft 365 licences
• Reduced administrative overhead for licence management
• Clear visibility of licence costs and subscriptions
• Flexible scaling of licences as organisational needs change
• Flexible scaling of licences as organisational needs change
• Improved cost control and budget predictability

• Education pricing available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@imicro.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

839737504870940

Contact

Corinne Pegrum
01634 949900
info@imicro.co.uk

About the service

• Service categories:
  • Applications
    • Collaborative
      • Email
        • Email
      • Team collaboration
        • Team collaboration
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: This service is limited to the supply and procurement of Microsoft 365 licences. It does not include administration, configuration, assignment, or removal of licences within the customer’s Microsoft 365 tenant.; ; The service does not require or include engineer level access to customer Microsoft 365 environments. Operational management, configuration, and security responsibilities remain with the customer unless separately agreed under a Microsoft 365 management service.; ; Licence availability, functionality, and service continuity are subject to Microsoft’s terms and platform availability.
• System requirements:
  • Existing or new Microsoft 365 tenant
  • Authority to purchase Microsoft cloud subscriptions
  • Internet access to Microsoft 365 services
  • Authority to agree to Microsoft licensing terms

User support

• Email or online ticketing support: Yes
• Support response times: Service requests and questions are responded to during UK business hours, Monday to Friday, in line with agreed service levels defined at call-off. Requests submitted outside of these hours, including weekends, can be logged via the customer portal and will be responded to in accordance with the agreed service levels on the next working day.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 AA
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Support is limited to administrative assistance related to Microsoft 365 licence procurement, ordering, renewal, and billing queries.; ; No technical support, configuration, or operational management is provided as part of this service.; ; The cost of administrative support is included within the licence pricing agreed at call-off.; ; A technical account manager or cloud support engineer is not provided as part of this service. Where required, a commercial or account contact may be available to support licence-related queries.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Getting started is supported through guidance on licence selection, ordering, and procurement processes. This service does not include user training, documentation, or technical onboarding, as it relates solely to the supply of Microsoft 365 licences.
• Service documentation: No
• End-of-contract data extraction: This service does not store or process customer data. All data remains within the customer’s Microsoft 365 environment and is managed directly by the customer in accordance with Microsoft’s tools and processes. Customers can extract or manage data using Microsoft’s native tools when the contract ends.
• End-of-contract process: At the end of the contract, Microsoft 365 licence supply and billing provided by iMicro will cease in line with the agreed contract terms. Responsibility for Microsoft 365 tenant administration, data management, and ongoing service continuity remains with the customer.; ; The contract price includes licence procurement, renewal management, and billing for the agreed contract period. Any changes to licence quantities, early termination of subscriptions, or additional administrative activity outside the agreed scope may incur additional costs in line with Microsoft licensing terms and will be agreed in advance.

Using the service

• Web browser interface: No
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: No
• User support accessibility: None or don’t know
• API: No
• Customisation available: No

Scaling

• Independence of resources: This service does not use shared operational resources. Microsoft 365 licences are provided on a per-subscription basis, and service performance and availability are governed by Microsoft’s platform. Demand from other customers does not affect licence supply or billing for individual users.

Analytics

• Service usage metrics: No

Supplier type

• Supplier type: Reseller (no extras)
• Organisation whose services are being resold: Microsoft

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: Never
• Protecting data at rest: Encryption of all physical media
• Data sanitisation process: No
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: This service does not store or process customer data. All data resides within the customer’s Microsoft 365 environment and can be exported or managed by the customer using Microsoft’s native tools and processes.
• Data export formats:
  • CSV
  • ODF
• Data import formats:
  • CSV
  • ODF

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: This service does not provide a platform or operational system and therefore does not include any availability guarantees or service level agreements.; ; Availability of Microsoft 365 services is governed by Microsoft’s own service availability commitments and terms. iMicro does not provide refunds or service credits for service availability, as this service relates solely to licence procurement and billing.
• Approach to resilience: This service does not host or operate infrastructure and does not process or store customer data. Resilience of Microsoft 365 services is provided by Microsoft’s cloud platform and datacentre architecture in accordance with Microsoft’s published service resilience and availability commitments.; ; iMicro’s role is limited to licence procurement and billing and does not introduce additional infrastructure dependencies.
• Outage reporting: This service does not operate an application or platform and does not generate outage reports. Any service status updates, dashboards, APIs, or alerts relating to Microsoft 365 availability are provided directly by Microsoft through its standard service health communications.

Identity and authentication

• User authentication needed: No
• Access restrictions in management interfaces and support channels: Access to iMicro’s internal systems used for licence procurement and billing is restricted to authorised personnel only, using role-based access controls and least-privilege principles.; ; Support and account communications are limited to nominated customer contacts through agreed commercial channels. This service does not provide access to customer Microsoft 365 management interfaces or require administrative access to customer environments.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: Yes
• Software Security Code of Practice: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: IMicro maintains documented information security policies and procedures aligned to ISO27001, including access control, data protection, incident management, and staff awareness.; ; Information security governance is overseen by senior management, with day-to-day responsibility assigned to a nominated Information Governance lead. Policies are reviewed regularly and communicated to staff, with compliance supported through role-based access controls and ongoing awareness activities.; ; This service does not involve the storage or processing of customer data. Any interaction with third-party platforms, including Microsoft, is conducted in accordance with supplier security policies and contractual obligations.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: This service does not include technical configuration or change management within customer Microsoft 365 environments. Configuration and change management for Microsoft 365 services remains the responsibility of the customer and Microsoft.; ; Changes relating to this service are limited to licence procurement activities, including licence quantity changes, subscription term changes, renewals, and cancellations. These are tracked through internal billing systems for the duration of the contract.; ; Licence-related changes are assessed for commercial and contractual impact prior to execution. This service does not introduce technical or security changes to customer environments and therefore does not impact the security configuration of Microsoft 365.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: This service does not operate infrastructure or software components and does not involve technical configuration or patching activities. iMicro does not deploy patches or manage vulnerabilities for Microsoft 365 within this service.; ; Potential threats are assessed at an organisational level, focusing on information security risks associated with commercial systems, access controls, and processes used for licence procurement and billing.; ; Information on security threats and vulnerabilities is obtained from recognised sources, including vendor security advisories, industry guidance, and relevant public sector cyber security communications. Vulnerability management and patching of Microsoft 365 are the responsibility of Microsoft and the Customer.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: This service does not include protective monitoring of customer Microsoft 365 environments. iMicro does not operate or access customer platforms as part of this licence procurement service.; ; Potential compromises relevant to this service are limited to organisational risks within iMicro’s internal systems, which are managed through standard information security controls and incident reporting procedures.; ; Protective monitoring and incident response for Microsoft 365 services are provided by Microsoft.
• Incident management type: Supplier-defined controls
• Post-quantum cryptography secure: No
• Incident management approach: This service does not include incident management for customer Microsoft 365 environments. iMicro does not operate or monitor customer platforms as part of this licence procurement service.; ; Pre-defined incident management processes are in place for iMicro’s internal systems and business operations. Licence-related issues or queries are reported by customers via agreed commercial or account contacts.; ; Incident reporting for Microsoft 365 service availability or security events is provided directly by Microsoft in accordance with its platform processes.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0.0%
• Between £250,000 and £500,000: 1.0%
• Between £500,001 and £1,000,000: 2.0%
• Between £1,000,001 and £2,500,000: 3.0%
• Between £2,500,001 and £5,000,000: 4.0%
• Over £5,000,001: 5.0%

Standards and certifications

• ISO/IEC 27001 certification: Yes
• ISO/IEC 27001 accredited by: Alcumus ISOQAR
• ISO/IEC 27001 accreditation date: Friday 10 May 2024
• What the ISO/IEC 27001 doesn’t cover: It's Comprehensive
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• ISO 9001 certification accredited by: Alcumus ISOQar
• ISO 9001 accreditation date: Friday 10 May 2024
• What the ISO 9001 doesn’t cover: It's comprehensive
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Cyber essentials plus: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials Plus certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials Plus certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Other security certifications: No

Social value

• Mission: Kick start economic growth:

  To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

  Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

  • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
  • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
  • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering
  • Delivery of apprenticeships, supported internships and T Level industry placement opportunities (Level 2, 3 and 4+) in relation to the contract

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@imicro.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.