Evergreen management, compliance analysis and security review of the existing M365 platform

Summary

The tender concerns a framework agreement for Microsoft 365 platform services. The contracting entity BG Verkehr and the associated bodies BG ETEM and BGHW may provide IT services jointly or through a dedicated entity, with payments settled according to an internal invoicing mechanism. The objective is to continuously and structurally assess changes in Microsoft 365 and interpret their impact on configuration, security, data protection, operations, and user acceptance. In the future, additional SaaS services may be introduced, and an evergreen approach will be applied: assessment, prioritization and concrete recommendations per contract. Annual conformity checks of tenants regarding data protection and compliance are planned. The aim is to ensure secure data processing and regulatory compliance; while tenant standardization is desirable, it cannot be guaranteed during the contract period.