KPMG LLP

Microsoft Dynamics Business Central Advisory, Design and Delivery Services

KPMG offers advisory, governance, assessment, implementation and support services for the successful delivery of a Microsoft Dynamics Business Central cloud provisioned ERP solution. We can support your organisation with key challenges from cloud transition to operational transformation in order to deliver successful end-to-end business processes and technical solutions.

Features

  • Full lifecycle implementation of Dynamics 365 Business Central
  • Cloud enabled Platform as a Service technology
  • Help best fit your D365BC deployment to your business requirement
  • Guidance when considering an upgrade of existing implementation
  • Strategy and governance assessment
  • Design and customisation review
  • Independent programme assurance
  • Rapid delivery methodology for faster, smarter and optimal cost deployment
  • Integrates KPMGs services including tax, assurance & controls expertise

Benefits

  • KPMG insight and leading practice finance and HR transformation experience
  • Improved services with coordinated delivery across multiple functions service providers
  • Cost savings during implementation and ongoing support
  • Speedier realisation of ERP benefits
  • Sustainable, always up-to-date solution
  • Low cost Cloud technology, you pay for what you use
  • Suports transformation to lower cost base

Pricing

£400 to £2460 per person per day

Service documents

G-Cloud 11

735005380521928

KPMG LLP

KPMG G-Cloud Team

02073115767

uk-g-cloud@kpmg.co.uk

Service scope

Service scope
Software add-on or extension Yes
What software services is the service an extension to The solution provides a secure, Enterprise Resource Planning (ERP) solution using Microsoft's Azure Cloud services.
Cloud deployment model
  • Public cloud
  • Private cloud
  • Hybrid cloud
Service constraints No
System requirements
  • Below are offered as examples only
  • Compatible Windows, Mac browser
  • Compatible iOS/Android mobile phone or tablet for mobile device access
  • MS Azure for Private Cloud or Hybrid installation
  • Excel 2016 for import/export functions
  • Outlook 2016, OWA, OWA for iPhone, iPad, or Android

User support

User support
Email or online ticketing support Email or online ticketing
Support response times Response time for questions will depend upon the service management model that individual clients agree to following implementation.
User can manage status and priority of support tickets No
Phone support Yes
Phone support availability 9 to 5 (UK time), Monday to Friday
Web chat support No
Onsite support Onsite support
Support levels User support levels are tailored to specific client needs. The level of support depends upon the service management agreement entered into with the client
Support available to third parties Yes

Onboarding and offboarding

Onboarding and offboarding
Getting started Online documentation, context sensitive help, direct links to Microsoft user community within the application, specific training depending on implementation project scope. KPMG People & Change advisory service also available depending on project scope.
Service documentation Yes
Documentation formats
  • HTML
  • PDF
  • Other
Other documentation formats
  • Word
  • Online
End-of-contract data extraction The Service Management contract will include provisions for the removal of client data from the solution using the standard Microsoft data entity structures. Clients can then transform this information into whatever formats are required for other solutions to use.
End-of-contract process The Service Management contract will include provisions that describe end of contract activities

Using the service

Using the service
Web browser interface Yes
Supported browsers
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari 9+
Application to install No
Designed for use on mobile devices Yes
Differences between the mobile and desktop service All services are available on mobile devices that have access to the clients cloud services. Screen resolution differs between mobile, tablet and desktop browser operation. Mobile phone version may have less access to journal pages compared to tablet or desktop browser.
Accessibility standards WCAG 2.1 A
Accessibility testing None
API Yes
What users can and can't do using the API SOAP, JSON, Odata and Rest Metadata. Full CRUD operations are available via Odata and CU are available via REST API
API documentation Yes
API documentation formats HTML
API sandbox or test environment Yes
Customisation available Yes
Description of customisation The solution can be customised to suit clients individual needs. Microsoft Dynamics 365 for Operations does not allow development that overlayers the main Microsoft code. This means that customisations do not affect the ability of the solution to receive regular Microsoft cloud updates

Scaling

Scaling
Independence of resources The solution is provided through the Microsoft Azure Cloud. Other demands from other clients will not affect delivery of the services to any of our clients

Analytics

Analytics
Service usage metrics Yes
Metrics types The Service Management contract entered into by the client will provide details of service metrics applicable to the solution.
Reporting types
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

Resellers
Supplier type Not a reseller

Staff security

Staff security
Staff security clearance Other security clearance
Government security clearance Up to Developed Vetting (DV)

Asset protection

Asset protection
Knowledge of data storage and processing locations Yes
Data storage and processing locations
  • United Kingdom
  • European Economic Area (EEA)
User control over data storage and processing locations Yes
Datacentre security standards Complies with a recognised standard (for example CSA CCM version 3.0)
Penetration testing frequency At least every 6 months
Penetration testing approach Another external penetration testing organisation
Protecting data at rest Other
Other data at rest protection approach Provided by Microsoft as part of the Azure data hosting
Data sanitisation process Yes
Data sanitisation type Explicit overwriting of storage before reallocation
Equipment disposal approach A third-party destruction service

Data importing and exporting

Data importing and exporting
Data export approach Data import and export is managed through the RapidStart tools that are supplied as standard with the solution
Data export formats
  • CSV
  • Other
Other data export formats
  • Colon Separated
  • Excel
  • Semi-Colon Separated
  • Tab Separated
  • Vertical Bar Separated
  • XML
Data import formats
  • CSV
  • Other
Other data import formats
  • Colon Separated
  • Excel
  • Semi-Colon Separated
  • Tab Separated
  • Vertical Bar Separated
  • XML
  • Custom

Data-in-transit protection

Data-in-transit protection
Data protection between buyer and supplier networks TLS (version 1.2 or above)
Data protection within supplier network TLS (version 1.2 or above)

Availability and resilience

Availability and resilience
Guaranteed availability Availability and resilience service levels are derived directly from the underlying Microsoft Azure Cloud service.
Approach to resilience Availability and resilience service levels are derived directly from the underlying Microsoft Azure Cloud service.
Outage reporting The approach to reporting outtages is derived directly from the underlying Microsoft Azure Cloud service.

Identity and authentication

Identity and authentication
User authentication needed Yes
User authentication
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)
  • Username or password
Access restrictions in management interfaces and support channels This is fully configurable identity and access management. Role based access controls restrict access to named users only
Access restriction testing frequency At least once a year
Management access authentication
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

Audit information for users
Access to user activity audit information You control when users can access audit information
How long user audit data is stored for User-defined
Access to supplier activity audit information You control when users can access audit information
How long supplier audit data is stored for User-defined
How long system logs are stored for User-defined

Standards and certifications

Standards and certifications
ISO/IEC 27001 certification Yes
Who accredited the ISO/IEC 27001 Independently audited at 6 months by external accreditation body.
ISO/IEC 27001 accreditation date 2002
What the ISO/IEC 27001 doesn’t cover The scope statement for our ISO certificate reads: ‘The protection of information in relation to the provision of professional services to KPMG clients. This includes all client-facing business units that use KPMG’s centrally managed information systems and processes
ISO 28000:2007 certification No
CSA STAR certification No
PCI certification No
Other security certifications No

Security governance

Security governance
Named board-level person responsible for service security Yes
Security governance certified Yes
Security governance standards ISO/IEC 27001
Information security policies and processes KPMG holds the Cyber Essentials certificate.

Operational security

Operational security
Configuration and change management standard Supplier-defined controls
Configuration and change management approach KPMG defined controls are applied. However these can be varied to suit specific client requirements by agreement. Such tailored non-standard services may attract additional cost.
Vulnerability management type Supplier-defined controls
Vulnerability management approach KPMG defined controls are applied. However these can be varied to suit specific client requirements by agreement. Such tailored non-standard services may attract additional cost. We can provide details upon request
Protective monitoring type Supplier-defined controls
Protective monitoring approach KPMG defined controls are applied. However these can be varied to suit specific client requirements by agreement. Such tailored non-standard services may attract additional cost. We can provide details upon request
Incident management type Supplier-defined controls
Incident management approach KPMG defined controls are applied. However these can be varied to suit specific client requirements by agreement. Such tailored non-standard services may attract additional cost. We can provide details upon request

Secure development

Secure development
Approach to secure software development best practice Conforms to a recognised standard, but self-assessed

Public sector networks

Public sector networks
Connection to public sector networks No

Pricing

Pricing
Price £400 to £2460 per person per day
Discount for educational organisations No
Free trial available No

Service documents

pdf document: Pricing document pdf document: Skills Framework for the Information Age rate card pdf document: Terms and conditions pdf document: Modern Slavery statement
Service documents
Return to top ↑