GOV.UK
KPMG LLP
Microsoft Dynamics Business Central Advisory, Design and Delivery Services
KPMG offers advisory, governance, assessment, implementation and support services for the successful delivery of a Microsoft Dynamics Business Central cloud provisioned ERP solution. We can support your organisation with key challenges from cloud transition to operational transformation in order to deliver successful end-to-end business processes and technical solutions.
Features
- Full lifecycle implementation of Dynamics 365 Business Central
- Cloud enabled Platform as a Service technology
- Help best fit your D365BC deployment to your business requirement
- Guidance when considering an upgrade of existing implementation
- Strategy and governance assessment
- Design and customisation review
- Independent programme assurance
- Rapid delivery methodology for faster, smarter and optimal cost deployment
- Integrates KPMGs services including tax, assurance & controls expertise
Benefits
- KPMG insight and leading practice finance and HR transformation experience
- Improved services with coordinated delivery across multiple functions service providers
- Cost savings during implementation and ongoing support
- Speedier realisation of ERP benefits
- Sustainable, always up-to-date solution
- Low cost Cloud technology, you pay for what you use
- Suports transformation to lower cost base
Pricing
£400 to £2460 per person per day
Service documents
- Pricing document
- Skills Framework for the Information Age rate card
- Terms and conditions
- Modern Slavery statement
Framework
G-Cloud 11
Service ID
735005380521928
Contact
Service scope
| Software add-on or extension | Yes |
| What software services is the service an extension to | The solution provides a secure, Enterprise Resource Planning (ERP) solution using Microsoft's Azure Cloud services. |
| Cloud deployment model |
|
| Service constraints | No |
| System requirements |
|
User support
| Email or online ticketing support | Email or online ticketing |
| Support response times | Response time for questions will depend upon the service management model that individual clients agree to following implementation. |
| User can manage status and priority of support tickets | No |
| Phone support | Yes |
| Phone support availability | 9 to 5 (UK time), Monday to Friday |
| Web chat support | No |
| Onsite support | Onsite support |
| Support levels | User support levels are tailored to specific client needs. The level of support depends upon the service management agreement entered into with the client |
| Support available to third parties | Yes |
Onboarding and offboarding
| Getting started | Online documentation, context sensitive help, direct links to Microsoft user community within the application, specific training depending on implementation project scope. KPMG People & Change advisory service also available depending on project scope. |
| Service documentation | Yes |
| Documentation formats |
|
| Other documentation formats |
|
| End-of-contract data extraction | The Service Management contract will include provisions for the removal of client data from the solution using the standard Microsoft data entity structures. Clients can then transform this information into whatever formats are required for other solutions to use. |
| End-of-contract process | The Service Management contract will include provisions that describe end of contract activities |
Using the service
| Web browser interface | Yes |
| Supported browsers |
|
| Application to install | No |
| Designed for use on mobile devices | Yes |
| Differences between the mobile and desktop service | All services are available on mobile devices that have access to the clients cloud services. Screen resolution differs between mobile, tablet and desktop browser operation. Mobile phone version may have less access to journal pages compared to tablet or desktop browser. |
| Accessibility standards | WCAG 2.1 A |
| Accessibility testing | None |
| API | Yes |
| What users can and can't do using the API | SOAP, JSON, Odata and Rest Metadata. Full CRUD operations are available via Odata and CU are available via REST API |
| API documentation | Yes |
| API documentation formats | HTML |
| API sandbox or test environment | Yes |
| Customisation available | Yes |
| Description of customisation | The solution can be customised to suit clients individual needs. Microsoft Dynamics 365 for Operations does not allow development that overlayers the main Microsoft code. This means that customisations do not affect the ability of the solution to receive regular Microsoft cloud updates |
Scaling
| Independence of resources | The solution is provided through the Microsoft Azure Cloud. Other demands from other clients will not affect delivery of the services to any of our clients |
Analytics
| Service usage metrics | Yes |
| Metrics types | The Service Management contract entered into by the client will provide details of service metrics applicable to the solution. |
| Reporting types |
|
Resellers
| Supplier type | Not a reseller |
Staff security
| Staff security clearance | Other security clearance |
| Government security clearance | Up to Developed Vetting (DV) |
Asset protection
| Knowledge of data storage and processing locations | Yes |
| Data storage and processing locations |
|
| User control over data storage and processing locations | Yes |
| Datacentre security standards | Complies with a recognised standard (for example CSA CCM version 3.0) |
| Penetration testing frequency | At least every 6 months |
| Penetration testing approach | Another external penetration testing organisation |
| Protecting data at rest | Other |
| Other data at rest protection approach | Provided by Microsoft as part of the Azure data hosting |
| Data sanitisation process | Yes |
| Data sanitisation type | Explicit overwriting of storage before reallocation |
| Equipment disposal approach | A third-party destruction service |
Data importing and exporting
| Data export approach | Data import and export is managed through the RapidStart tools that are supplied as standard with the solution |
| Data export formats |
|
| Other data export formats |
|
| Data import formats |
|
| Other data import formats |
|
Data-in-transit protection
| Data protection between buyer and supplier networks | TLS (version 1.2 or above) |
| Data protection within supplier network | TLS (version 1.2 or above) |
Availability and resilience
| Guaranteed availability | Availability and resilience service levels are derived directly from the underlying Microsoft Azure Cloud service. |
| Approach to resilience | Availability and resilience service levels are derived directly from the underlying Microsoft Azure Cloud service. |
| Outage reporting | The approach to reporting outtages is derived directly from the underlying Microsoft Azure Cloud service. |
Identity and authentication
| User authentication needed | Yes |
| User authentication |
|
| Access restrictions in management interfaces and support channels | This is fully configurable identity and access management. Role based access controls restrict access to named users only |
| Access restriction testing frequency | At least once a year |
| Management access authentication |
|
Audit information for users
| Access to user activity audit information | You control when users can access audit information |
| How long user audit data is stored for | User-defined |
| Access to supplier activity audit information | You control when users can access audit information |
| How long supplier audit data is stored for | User-defined |
| How long system logs are stored for | User-defined |
Standards and certifications
| ISO/IEC 27001 certification | Yes |
| Who accredited the ISO/IEC 27001 | Independently audited at 6 months by external accreditation body. |
| ISO/IEC 27001 accreditation date | 2002 |
| What the ISO/IEC 27001 doesn’t cover | The scope statement for our ISO certificate reads: ‘The protection of information in relation to the provision of professional services to KPMG clients. This includes all client-facing business units that use KPMG’s centrally managed information systems and processes |
| ISO 28000:2007 certification | No |
| CSA STAR certification | No |
| PCI certification | No |
| Other security certifications | No |
Security governance
| Named board-level person responsible for service security | Yes |
| Security governance certified | Yes |
| Security governance standards | ISO/IEC 27001 |
| Information security policies and processes | KPMG holds the Cyber Essentials certificate. |
Operational security
| Configuration and change management standard | Supplier-defined controls |
| Configuration and change management approach | KPMG defined controls are applied. However these can be varied to suit specific client requirements by agreement. Such tailored non-standard services may attract additional cost. |
| Vulnerability management type | Supplier-defined controls |
| Vulnerability management approach | KPMG defined controls are applied. However these can be varied to suit specific client requirements by agreement. Such tailored non-standard services may attract additional cost. We can provide details upon request |
| Protective monitoring type | Supplier-defined controls |
| Protective monitoring approach | KPMG defined controls are applied. However these can be varied to suit specific client requirements by agreement. Such tailored non-standard services may attract additional cost. We can provide details upon request |
| Incident management type | Supplier-defined controls |
| Incident management approach | KPMG defined controls are applied. However these can be varied to suit specific client requirements by agreement. Such tailored non-standard services may attract additional cost. We can provide details upon request |
Secure development
| Approach to secure software development best practice | Conforms to a recognised standard, but self-assessed |
Public sector networks
| Connection to public sector networks | No |
Pricing
| Price | £400 to £2460 per person per day |
| Discount for educational organisations | No |
| Free trial available | No |