Home/Microsoft
Microsoft practice
Microsoft 365 and Surface
Through our parent company Definitive Concept Ltd we license, manage and supply the Microsoft estate — tenants, identity, devices and the hardware itself — so the platform your business runs on and the platform we secure are the same platform.
Licensing
Buy the licence you need, not the one you were sold
Most tenants we inherit are paying for entitlements nobody uses while missing the one that would have stopped last month's incident. We size the licence against your actual usage, your regulatory obligations and your risk — then review it at every renewal.
- Tenant and licence audit before anything is quoted
- Consolidation of shadow subscriptions onto one agreement
- Right-sizing across Business, Enterprise and Frontline plans
- True-up and renewal handled as part of the service
- One invoice covering licences, devices and managed service
Plan map
Where each licence lands
Licence
M365 Business Basic
Web and mobile Office, Exchange, Teams, SharePoint and OneDrive. The floor for any organisation still running mailboxes on a shared host.
Licence
M365 Business Standard
Everything in Basic plus the installed desktop applications and Clipchamp, Bookings and Loop for teams that live in Office all day.
Licence
M365 Business Premium
Standard plus Entra ID P1, Intune, Defender for Business and Purview information protection — the smallest licence that supports a real security baseline.
Licence
Microsoft 365 E3
Enterprise identity, compliance and device management with no seat ceiling. The usual destination once an organisation passes 300 users.
Licence
Microsoft 365 E5
E3 plus Defender XDR, Entra ID P2, advanced audit, eDiscovery and Power BI Pro — for regulated environments and mature SOC operations.
Licence
Frontline (F1 / F3)
Shift and field staff who need Teams, email and policy enforcement without a full desktop entitlement, licensed at frontline rates.
Plan names and inclusions follow Microsoft's current commercial catalogue. We quote against the catalogue live rather than from a price list, so what you see on a proposal is what applies on the day it is signed.
Managed Microsoft 365
What we operate on your behalf
Identity and access
Entra ID tenant design, conditional access, MFA enforcement, privileged access review and joiner-mover-leaver automation.
Device management
Intune enrolment, compliance policies, Autopilot provisioning, application packaging and update rings.
Threat protection
Defender for Office 365, Endpoint and Identity tuned, monitored and escalated by our SOC rather than left on default policy.
Information protection
Purview sensitivity labels, DLP, retention and audit — configured against the obligations that actually apply to you.
Backup and recovery
Exchange, SharePoint, OneDrive and Teams protected in Acronis Cyber Protect Cloud, because Microsoft's retention is not a backup.
Tenant hygiene
Secure Score tracking, licence reconciliation, orphaned account cleanup and a monthly written report you can hand to your board.
Direct vs partner
What buying through us adds
| Aspect | Buying direct | Through Cybernalyst |
|---|---|---|
| Licensing | Self-service card payment, list price, no advice | Right-sized against what you actually use, reviewed at every true-up |
| Support | Microsoft's global queue, no context on your tenant | First line answered locally by the Solutions Specialists who built your tenant |
| Security baseline | Default tenant settings; hardening is your problem | Conditional access, MFA and Defender policy applied and maintained |
| Backup | Retention only — deleted or encrypted data is gone after the window | Independent Acronis backup with tested restores |
| Hardware | Bought separately, imaged by hand, unmanaged | Surface supplied, Autopilot-enrolled and enrolled in Intune before it ships to the user |
| Accountability | Split across a reseller, a vendor and an IT contractor | One contract with Definitive Concept Ltd covering licence, device and platform |
Hardware
Microsoft Surface, delivered ready to work
We supply Surface devices as part of the same agreement as the licences, and they arrive enrolled, imaged and policy-managed. A device that reaches a user unmanaged is a device outside your security controls.
- Procurement through Definitive Concept Ltd, on one invoice with your licences
- Autopilot registration and Intune enrolment before the device leaves us
- Standard image, security baseline and application set applied automatically at first sign-in
- Warranty handling and advance replacement managed by us, not by the end user
- Secure decommissioning with certified data erasure at end of life
Surface Laptop for Business
13.8-inch and 15-inch Copilot+ PCs in Intel and Snapdragon variants — the default fit for knowledge workers.
Surface Pro for Business
13-inch detachable 2-in-1 for staff who move between desk, site and client meetings.
Surface Laptop Studio
Workstation-class device for analysts, designers and engineers running heavier local workloads.
Accessories and docking
Docks, keyboards, pens and displays specified as part of the build so a desk works on day one.
Surface model availability follows Microsoft's current commercial lineup. We specify against the generation shipping at the time of order rather than a fixed model list.
Get in touch
One agreement for licence, device and defence
Tell us what you are running today and we will map it against the licences you actually need, the devices due for replacement and the controls that are missing.
Acronis and Microsoft product information on this website is valid and verified as of August 2026. We are not responsible for any changes made by the vendors after this date. For more information, please contact your account manager.