Foundations
Bundle
Microsoft 365 tenant deployment, backup setup, and Intune device enrolment — the three services that establish a correctly governed, protected, and recoverable Microsoft 365 environment. Delivered together, coordinated by Konve IT.
Bundle overview
Three services. One coordinated programme.
The three services in this bundle are designed to be delivered in sequence — tenant deployment first, then backup setup, then Intune enrolment. A single Statement of Work covers all three. A single point of contact at Konve IT coordinates the programme. One set of questionnaires, one onboarding process, one delivery timeline.
Your Microsoft 365 tenant deployed and hardened across six workstreams — Entra ID, Exchange Online, SharePoint and OneDrive, Microsoft Teams, Microsoft Defender for Business, and Microsoft Purview. Every workstream configured to the Konve IT security baseline and aligned to Cyber Essentials controls. Delivered with a Tenant Configuration Document and administrator handover session.
- MFA enforcement and Conditional Access policy
- Exchange Online — mailboxes, routing, DNS, retention, anti-phishing
- SharePoint and OneDrive — site structure, permissions, sharing policy
- Microsoft Teams governance and meeting controls
- Defender for Business activation and security baseline
- Microsoft Purview — sensitivity labels, DLP, audit logging
A third-party cloud backup solution deployed immediately following tenant deployment — so your data is protected from day one of Go-Live. Veeam Data Cloud, AvePoint, or Acronis Cyber Protect, selected to match your environment. Coverage across all four data sources: Exchange Online, SharePoint Online, OneDrive for Business, and Microsoft Teams. UK-based immutable storage. Initial backup verified before handover.
- Backup solution selected, deployed, and connected to your tenant
- All four M365 data sources in scope
- UK-based immutable storage — retention aligned to your obligations
- First backup cycle verified before the programme closes
- Backup Configuration Document delivered on completion
Every device your staff use to access Microsoft 365 enrolled into Intune, governed by device compliance policies, and verified as compliant before the programme closes. Intune Plan 1 is included in your Business Premium licence — this service deploys it. BitLocker encryption enforced. Remote wipe capability active. Conditional Access integration with the tenant deployment from Service 01.
- Intune environment setup and Entra ID integration
- Device compliance policies and Conditional Access enforcement
- BitLocker encryption and recovery key escrow
- Windows, iOS, Android, and macOS device enrolment
- BYOD devices via MAM where personally owned devices in scope
- All devices verified compliant before programme closes
One set of forms. One Statement of Work. One programme.
Complete the Konve IT Client Onboarding Form and the relevant service questionnaires — the M365 Tenancy Questionnaire, the M365 Backup Questionnaire, and the Intune Questionnaire. Konve IT issues a single Statement of Work covering all three services.
Complete the onboarding form
Download and complete the Konve IT Client Onboarding Form. Used once across all three services.
Complete the three questionnaires
Download and complete the M365 Tenancy, M365 Backup, and Intune questionnaires. These three documents provide everything needed to issue the Statement of Work.
Review and sign the Statement of Work
Konve IT issues a single Statement of Work covering all three services. On signature, the programme commences.
Secure and Certifiable Bundle
Everything in Foundations plus Cyber Essentials Full Programme and Email Security Deployment — for organisations that need to achieve certification and harden their email alongside the core Microsoft 365 environment.
Full suiteComplete Practice Protection
All six Konve IT services — the complete deployment programme and full managed retainer across every component. The most comprehensive protection available for a UK professional services firm.