KPMG LLP

Microsoft Dynamics 365 Finance & Operations for Local Government

Dynamics 365 Finance and Operations for Local Government is a pre-configured solution based on Dynamics 365 enabling Councils to transform their finance functions. It comprises a combination of pre-built solution assets, delivery assets & tools and a delivery method for faster, lower-risk implementation of the solution and realisation of benefits

Features

  • Full lifecycle implementation of Dynamics 365F&O
  • Pre-built finance function for Local Government featuring leading practice design
  • Full IFRS, and CIPFA Accounting Code compliant accounting solution
  • Cloud enabled Platform as a Service technology
  • Pre-defined Council operating model with efficient ERP processes
  • Rapid delivery methodology for faster, smarter and optimal cost deployment

Benefits

  • Certainty of outcome for the solution and benefits
  • KPMG insight and leading practice finance transformation experience
  • Lower risk implementation methodology featuring pre-built components
  • Cost savings during implementation and ongoing support
  • Speedier realisation of ERP benefits
  • Sustainable, always up-to-date solution
  • Low cost Cloud technology, you pay for what you use
  • Supports collaboration and driving shared business benefits
  • Suports transformation to lower cost base
  • Integrated, agile, mobile enabled design

Pricing

£400 to £2460 per person per day

Service documents

G-Cloud 11

955098715283976

KPMG LLP

KPMG G-Cloud Team

02073115767

uk-g-cloud@kpmg.co.uk

Service scope

Service scope
Software add-on or extension Yes
What software services is the service an extension to The Dynamics for Local Government Solution provides a secure, local government Enterprise Resource Planning (ERP) solution using Microsoft's Azure Cloud services.
Cloud deployment model Public cloud
Service constraints No
System requirements
  • Below are offered as examples only
  • Network latency of <250–300 ms Browser <-> Microsoft Azure datacenter
  • 50KBps bandwidth, recommended higher for high payload scenarios
  • Microsoft .NET Framework version 4.6.2 for all ClickOnce applications
  • Microsoft Office 2016 for Windows installed
  • 64bit OS for Workflow / FR editors (IE only)

User support

User support
Email or online ticketing support Email or online ticketing
Support response times Response time for questions will depend upon the service management model that individual clients agree to following implementation.
User can manage status and priority of support tickets No
Phone support Yes
Phone support availability 9 to 5 (UK time), Monday to Friday
Web chat support No
Onsite support Onsite support
Support levels User support levels are tailored to specific client needs. The level of support depends upon the service management agreement entered into with the client
Support available to third parties Yes

Onboarding and offboarding

Onboarding and offboarding
Getting started Full documentations is provided by MS, sample code is available from MS and developed code by KPMG. KPMG can provide a full range of services including application configuration, integration, data migration, testing, training services, user documentation and support.
Service documentation Yes
Documentation formats
  • HTML
  • PDF
  • Other
Other documentation formats
  • Word
  • Online
End-of-contract data extraction The Service Management contract will include provisions for the removal of client data from the solution using the standard Microsoft data entity structures. Clients can then transform this information into whatever formats are required for other solutions to use.
End-of-contract process Clients can extend the contract or KPMG can provide assistance to support migration of data to other systems

Using the service

Using the service
Web browser interface Yes
Supported browsers
  • Internet Explorer 11
  • Microsoft Edge
  • Chrome
  • Safari 9+
Application to install No
Designed for use on mobile devices Yes
Differences between the mobile and desktop service All services are available on mobile devices that have access to the clients network services. Screen resolution is the only difference between mobile and desktop operation. There are specific PowerApps for mobile use
Accessibility standards WCAG 2.1 A
Accessibility testing N/A
API Yes
What users can and can't do using the API SOAP, JSON, Odata and Rest Metadata. Full CRUD operations are available via Odata and CU are available via REST API
API documentation Yes
API documentation formats HTML
API sandbox or test environment Yes
Customisation available Yes
Description of customisation The solution can be customised to suit clients individual needs. Microsoft Dynamics 365 for Operations does not allow development that overlayers the main Microsoft code. This means that customisations do not affect the ability of the solution to receive regular Microsoft cloud updates

Scaling

Scaling
Independence of resources The solution is provided through the Microsoft Azure Cloud. Other demands from other clients will not affect delivery of the services to any of our clients

Analytics

Analytics
Service usage metrics Yes
Metrics types The Service Management contract entered into by the client will provide details of service metrics applicable to the solution.
Reporting types
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

Resellers
Supplier type Reseller providing extra features and support
Organisation whose services are being resold N/A

Staff security

Staff security
Staff security clearance Other security clearance
Government security clearance Up to Developed Vetting (DV)

Asset protection

Asset protection
Knowledge of data storage and processing locations Yes
Data storage and processing locations
  • United Kingdom
  • European Economic Area (EEA)
User control over data storage and processing locations Yes
Datacentre security standards Complies with a recognised standard (for example CSA CCM version 3.0)
Penetration testing frequency At least every 6 months
Penetration testing approach Another external penetration testing organisation
Protecting data at rest Other
Other data at rest protection approach Provided by Microsoft as part of the Azure data hosting
Data sanitisation process Yes
Data sanitisation type Explicit overwriting of storage before reallocation
Equipment disposal approach A third-party destruction service

Data importing and exporting

Data importing and exporting
Data export approach Data import and export is managed through the Microsoft Data Management Framework tools that are supplied as standard with the solution
Data export formats
  • CSV
  • Other
Other data export formats
  • Colon Separated
  • Excel
  • Semi-Colon Separated
  • Tab Separated
  • Vertical Bar Separated
  • XML
Data import formats
  • CSV
  • Other
Other data import formats
  • Colon Separated
  • Excel
  • Semi-Colon Separated
  • Tab Separated
  • Vertical Bar Separated
  • XML
  • Custom

Data-in-transit protection

Data-in-transit protection
Data protection between buyer and supplier networks TLS (version 1.2 or above)
Data protection within supplier network TLS (version 1.2 or above)

Availability and resilience

Availability and resilience
Guaranteed availability Availability and resilience service levels are derived directly from the underlying Microsoft Azure Cloud service.
Approach to resilience Availability and resilience service levels are derived directly from the underlying Microsoft Azure Cloud service.
Outage reporting The approach to reporting outtages is derived directly from the underlying Microsoft Azure Cloud service.

Identity and authentication

Identity and authentication
User authentication needed Yes
User authentication
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)
  • Username or password
Access restrictions in management interfaces and support channels This is fully configurable identity and access management. Role based access controls restrict access to named users only
Access restriction testing frequency At least once a year
Management access authentication
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

Audit information for users
Access to user activity audit information You control when users can access audit information
How long user audit data is stored for User-defined
Access to supplier activity audit information You control when users can access audit information
How long supplier audit data is stored for User-defined
How long system logs are stored for User-defined

Standards and certifications

Standards and certifications
ISO/IEC 27001 certification Yes
Who accredited the ISO/IEC 27001 Independently audited at 6 months by external accreditation body.
ISO/IEC 27001 accreditation date 2002
What the ISO/IEC 27001 doesn’t cover The scope statement for our ISO certificate reads: ‘The protection of information in relation to the provision of professional services to KPMG clients. This includes all client-facing business units that use KPMG’s centrally managed information systems and processes
ISO 28000:2007 certification No
CSA STAR certification No
PCI certification No
Other security certifications No

Security governance

Security governance
Named board-level person responsible for service security Yes
Security governance certified Yes
Security governance standards ISO/IEC 27001
Information security policies and processes KPMG holds the Cyber Essentials certificate.

Operational security

Operational security
Configuration and change management standard Supplier-defined controls
Configuration and change management approach KPMG defined controls are applied. However these can be varied to suit specific client requirements by agreement. Such tailored non-standard services may attract additional cost.
Vulnerability management type Supplier-defined controls
Vulnerability management approach KPMG defined controls are applied. However these can be varied to suit specific client requirements by agreement. Such tailored non-standard services may attract additional cost. We can provide details upon request
Protective monitoring type Supplier-defined controls
Protective monitoring approach KPMG defined controls are applied. However these can be varied to suit specific client requirements by agreement. Such tailored non-standard services may attract additional cost. We can provide details upon request
Incident management type Supplier-defined controls
Incident management approach KPMG defined controls are applied. However these can be varied to suit specific client requirements by agreement. Such tailored non-standard services may attract additional cost. We can provide details upon request

Secure development

Secure development
Approach to secure software development best practice Conforms to a recognised standard, but self-assessed

Public sector networks

Public sector networks
Connection to public sector networks No

Pricing

Pricing
Price £400 to £2460 per person per day
Discount for educational organisations No
Free trial available No

Service documents

pdf document: Pricing document pdf document: Skills Framework for the Information Age rate card pdf document: Terms and conditions pdf document: Modern Slavery statement
Service documents
Return to top ↑