KPMG LLP
Microsoft Dynamics 365 Finance and Operations Advisory, Design and Delivery Services
Microsoft Dynamics 365 Finance and Operations is a pre-configured solution based on Dynamics 365 enabling organisations to transform their finance functions speedily. It comprises a combination of pre-built ERP solution assets, delivery assets & tools and a delivery method for faster, lower-risk implementation of the solution and realisation of benefits
Features
- Full lifecycle implementation of Dynamics 365F&O
- Help best fit your D365F&O deployment to your business requirement
- Guidance when considering an upgrade of existing implementation
- Cloud enabled Platform as a Service technology
- Strategy and governance assessment
- Design and customisation review
- Independent programme assurance
- Rapid delivery methodology for faster, smarter and lower cost deployment
- Integrates KPMGs services including tax, assurance & controls expertise
Benefits
- KPMG insight and leading practice finance and HR transformation experience
- Improved services with coordinated delivery across multiple functions service providers
- Cost savings during implementation and ongoing support
- Speedier realisation of ERP benefits
- Sustainable, always up-to-date solution
- Low cost Cloud technology, you pay for what you use
- Suports transformation to lower cost base
- Integrated, agile, mobile enabled design
Pricing
£400 to £2460 per person per day
Service documents
- Pricing document
- Skills Framework for the Information Age rate card
- Terms and conditions
- Modern Slavery statement
Framework
G-Cloud 11
Service ID
203918269242314
Contact
Service scope
| Software add-on or extension | Yes |
| What software services is the service an extension to | The solution provides a secure, Enterprise Resource Planning (ERP) solution using Microsoft's Azure Cloud services. |
| Cloud deployment model | Public cloud |
| Service constraints | No |
| System requirements |
|
User support
| Email or online ticketing support | Email or online ticketing |
| Support response times | Response time for questions will depend upon the service management model that individual clients agree to following implementation. |
| User can manage status and priority of support tickets | No |
| Phone support | Yes |
| Phone support availability | 9 to 5 (UK time), Monday to Friday |
| Web chat support | No |
| Onsite support | Onsite support |
| Support levels | User support levels are tailored to specific client needs. The level of support depends upon the service management agreement entered into with the client |
| Support available to third parties | Yes |
Onboarding and offboarding
| Getting started | Full documentations is provided by MS, sample code is available from MS and developed code by KPMG. KPMG can provide a full range of services including application configuration, integration, data migration, testing, training services, user documentation and support. |
| Service documentation | Yes |
| Documentation formats |
|
| Other documentation formats |
|
| End-of-contract data extraction | The Service Management contract will include provisions for the removal of client data from the solution using the standard Microsoft data entity structures. Clients can then transform this information into whatever formats are required for other solutions to use. |
| End-of-contract process | Clients can extend the contract or KPMG can provide assistance to support migration of data to other systems |
Using the service
| Web browser interface | Yes |
| Supported browsers |
|
| Application to install | No |
| Designed for use on mobile devices | Yes |
| Differences between the mobile and desktop service | All services are available on mobile devices that have access to the clients network services. Screen resolution is the only difference between mobile and desktop operation. There are specific PowerApps for mobile use |
| Service interface | Yes |
| Description of service interface | Microsoft is a major software and cloud-services provider to states and governments around the world, it is committed to complying with all relevant international standards and compliance controls. By adhering to these wide-ranging accessibility standards, Microsoft ensures that all customers—both inside and outside of government—can use Microsoft services and products. |
| Accessibility standards | WCAG 2.1 A |
| Accessibility testing | None |
| API | Yes |
| What users can and can't do using the API | SOAP, JSON, Odata and Rest Metadata. Full CRUD operations are available via Odata and CU are available via REST API |
| API documentation | Yes |
| API documentation formats | HTML |
| API sandbox or test environment | Yes |
| Customisation available | Yes |
| Description of customisation | The solution can be customised to suit clients individual needs. Microsoft Dynamics 365 for Operations does not allow development that overlayers the main Microsoft code. This means that customisations do not affect the ability of the solution to receive regular Microsoft cloud updates |
Scaling
| Independence of resources | The solution is provided through the Microsoft Azure Cloud. Other demands from other clients will not affect delivery of the services to any of our clients |
Analytics
| Service usage metrics | Yes |
| Metrics types | The Service Management contract entered into by the client will provide details of service metrics applicable to the solution. |
| Reporting types |
|
Resellers
| Supplier type | Reseller providing extra features and support |
| Organisation whose services are being resold | N/A |
Staff security
| Staff security clearance | Other security clearance |
| Government security clearance | Up to Developed Vetting (DV) |
Asset protection
| Knowledge of data storage and processing locations | Yes |
| Data storage and processing locations |
|
| User control over data storage and processing locations | Yes |
| Datacentre security standards | Complies with a recognised standard (for example CSA CCM version 3.0) |
| Penetration testing frequency | At least every 6 months |
| Penetration testing approach | Another external penetration testing organisation |
| Protecting data at rest | Other |
| Other data at rest protection approach | Provided by Microsoft as part of the Azure data hosting |
| Data sanitisation process | Yes |
| Data sanitisation type | Explicit overwriting of storage before reallocation |
| Equipment disposal approach | A third-party destruction service |
Data importing and exporting
| Data export approach | Data import and export is managed through the Microsoft Data Management Framework tools that are supplied as standard with the solution |
| Data export formats |
|
| Other data export formats |
|
| Data import formats |
|
| Other data import formats |
|
Data-in-transit protection
| Data protection between buyer and supplier networks | TLS (version 1.2 or above) |
| Data protection within supplier network | TLS (version 1.2 or above) |
Availability and resilience
| Guaranteed availability | Availability and resilience service levels are derived directly from the underlying Microsoft Azure Cloud service. |
| Approach to resilience | Availability and resilience service levels are derived directly from the underlying Microsoft Azure Cloud service. |
| Outage reporting | The approach to reporting outtages is derived directly from the underlying Microsoft Azure Cloud service. |
Identity and authentication
| User authentication needed | Yes |
| User authentication |
|
| Access restrictions in management interfaces and support channels | This is fully configurable identity and access management. Role based access controls restrict access to named users only |
| Access restriction testing frequency | At least once a year |
| Management access authentication |
|
Audit information for users
| Access to user activity audit information | You control when users can access audit information |
| How long user audit data is stored for | User-defined |
| Access to supplier activity audit information | You control when users can access audit information |
| How long supplier audit data is stored for | User-defined |
| How long system logs are stored for | User-defined |
Standards and certifications
| ISO/IEC 27001 certification | Yes |
| Who accredited the ISO/IEC 27001 | Independently audited at 6 months by external accreditation body. |
| ISO/IEC 27001 accreditation date | 2002 |
| What the ISO/IEC 27001 doesn’t cover | The scope statement for our ISO certificate reads: ‘The protection of information in relation to the provision of professional services to KPMG clients. This includes all client-facing business units that use KPMG’s centrally managed information systems and processes |
| ISO 28000:2007 certification | No |
| CSA STAR certification | No |
| PCI certification | No |
| Other security certifications | No |
Security governance
| Named board-level person responsible for service security | Yes |
| Security governance certified | Yes |
| Security governance standards | ISO/IEC 27001 |
| Information security policies and processes | KPMG holds the Cyber Essentials certificate. |
Operational security
| Configuration and change management standard | Supplier-defined controls |
| Configuration and change management approach | KPMG defined controls are applied. However these can be varied to suit specific client requirements by agreement. Such tailored non-standard services may attract additional cost. |
| Vulnerability management type | Supplier-defined controls |
| Vulnerability management approach | KPMG defined controls are applied. However these can be varied to suit specific client requirements by agreement. Such tailored non-standard services may attract additional cost. We can provide details upon request |
| Protective monitoring type | Supplier-defined controls |
| Protective monitoring approach | KPMG defined controls are applied. However these can be varied to suit specific client requirements by agreement. Such tailored non-standard services may attract additional cost. We can provide details upon request |
| Incident management type | Supplier-defined controls |
| Incident management approach | KPMG defined controls are applied. However these can be varied to suit specific client requirements by agreement. Such tailored non-standard services may attract additional cost. We can provide details upon request |
Secure development
| Approach to secure software development best practice | Conforms to a recognised standard, but self-assessed |
Public sector networks
| Connection to public sector networks | No |
Pricing
| Price | £400 to £2460 per person per day |
| Discount for educational organisations | No |
| Free trial available | No |