FY25 Microsoft Sentinel Migrate

and Modernize (MSMM)

Partner-led

Incentive summary for Microsoft

partners

July 2024

Microsoft Confidential – Shared under NDA

Purpose of Deck, Audience, and How to Use the Deck
Purpose:
This deck is intended to be partner-facing and provides information on MSMM Partner-led—
an overview, the partner approach, and the partner requirements

Audience:
Partners eligible for MSMM

Usage Instructions:
• Save a local copy of this deck
• Rearrange and remove slides as needed

Microsoft Confidential
Shared under NDA
As part of you and/or your company’s relationship with Microsoft, you and/or your company has signed an
NDA with Microsoft. All information you receive about the Microsoft Sentinel Migrate & Modernize Investment
in this meeting is Highly Confidential Information. As a reminder, under the NDA you have agreed not to share
Microsoft’s Confidential Information with anyone outside of Microsoft. Because this is Highly Confidential, even
within Microsoft, you should only share this information on a “need to know” basis with employees you are
certain already know about the Microsoft Sentinel Migrate & Modernize Investment. You must not disclose,
publish, or otherwise reveal Microsoft’s Highly Confidential Information to your friends, family, or any other
third party. Any breach will lead to action up to and including termination of your employer’s relationship with
Microsoft and legal action.

Content included in this deck is near, but not yet final and subject to change.

Microsoft Confidential
Microsoft Sentinel
Migrate and
Modernize Partner-
led overview
Introducing MSMM Partner-led
Nominate customer projects to MSMM to accelerate their modern SIEM journey,
and track approval status via a self-service dashboard

New self-serve workflow Faster approvals via Engagements are Scale faster with
through Microsoft standardized nominated and led more engagements
Commerce Incentives engagement sizes by partners
(MCI)
MSMM Partner-led Overview
A new way for partners to drive migration and modernization for Microsoft Sentinel

1 Streamlined nomination, tracking and payments

Ability to nominate customers into MSMM on a self-service dashboard through
Microsoft Commerce Incentives (MCI)

Faster approval workflow and status trackability of your request

2 Supports Microsoft Sentinel migration and modernization scenarios from

non-Microsoft SIEM, new or existing deployed customers as long as the
project meets the minimum incremental Microsoft Sentinel consumption

Engage with a diverse set of customers

3
MSMM Partner-led supports Strategic and Major enterprise customers with a valid TPID.
Select SMC customers by way of exception process only.
For detailed eligibility, please review MCI Partner Incentive Guide
 Attack surface is expanding due to
growing digital estates and hybrid work

Rapid acceleration and increasing

Triggers of the sophistication of cybercrime
need for a
modern SIEM
Rising costs of silos, licenses
solution and staff

Complex set-up and maintenance

of on-premises infrastructure
 Move faster with simplified threat
detection and response
Detection
Correlate alerts into actionable
incidents using machine learning
Infrastructure

Modernize Security
Operations with Microsoft Investigation
Devices Sentinel Visualize the full scope
of an attack

Cloud-native Powered by AI

Response
Users Act immediately with
300+ partner integrations Built-in automation built-in automation

Applications Across multi-cloud, multiplatform Threat hunting

Hunt across all data with
Powered by community + backed by Microsoft security experts powerful search and query tools
Flexible collecting and archiving options
Eliminate blind spots with affordable solutions to collect, store, and analyze all your security data

Analytics logs Basic logs Archive

Security and activity logs
Used for continuous threat
monitoring, near real-time
detections, and behavioral analytics
Available for 90 days, with option
to archive
Affordable pay-as-you-go pricing
with volume discounts and
predictable commitment tiers
High-volume, investigation logs Low-cost, long-term storage
Accessed on-demand for Meet compliance requirements
ad-hoc querying, investigations,
Archive data up to seven years
and automation
Easily search and restore
Supports ingestion-time parsing
archived logs
and transformation
Available for eight days, with option
to archive

Solve the SOC’s hardest challenges while managing the total cost of operations
Microsoft Sentinel Migrate and Modernize Investment
Engagement Summary Engagement Term

Microsoft Sentinel Migrate and Modernize helps accelerate and simplify customer migration and modernization projects to Microsoft Sentinel workload. In this engagement, July 1, 2024 through
partners will provide expert guidance to execute a Microsoft Sentinel migration project. It can include migrating from any competitors or on-prem solutions to Microsoft June 30, 2025
Sentinel; or driving incremental Microsoft Sentinel consumption through existing or net new customers. The goal of the engagement is to generate Azure Consumption Rate
(ACR) related to Microsoft Sentinel. The engagement may also include the modernization of an existing Microsoft Sentinel deployment, in which case the goal is to increase
existing ACR related to Microsoft Sentinel. Partner needs to deliver and deploy Microsoft Sentinel Migrate and Modernize activities.

Partner Eligibility Measure and Reward

Partner Agreement Partners are paid a fixed amount based on the size of the customer project, as defined by the customer’s 1st year Microsoft Sentinel consumption plan
Microsoft AI Cloud Partner Program from deployment date.
Agreement Please refer to Microsoft Sentinel Calculator to estimate consumption
Program Enrollment
Microsoft Commerce Incentives
Engagement Stage 3
Partner requirements *Partner Payment *Partner Payment *Partner Payment
Deal Size Timeline – (Execution
Threat Protection Specialization Market A Market B Market C
& POE Submission)

Medium engagement
Customer Eligibility Project size: >$125K – $250K/year $35,000 USD $28,000 USD $21,000 USD 200 days
planned incremental Sentinel
Enterprise, select SMC-Corporate customers with a valid TPID consumption
detected by Microsoft internal systems Large engagement
The project sizes are the planned Sentinel consumption in Project size: >$250K – $500K/year $50,000 USD $40,000 USD $30,000 USD 260 days
year 1, measured from project completion. planned incremental Sentinel
consumption
Microsoft reserves the right to reject future engagements
or remove partners from the Microsoft Sentinel Migrate
and Modernize if the Microsoft Sentinel Azure
consumption Run Rate (ARR) is found to be inaccurate
when verified against the size of opportunities submitted

Earning Type
Fee
MSMM Partner-led
value and
requirements
Partner Expectations and Requirements
Nominating customers:
Ensure Customer intent before submitting request
To truly take advantage of the new investment at scale, Partners should ensure that their customers
are fully aligned and committed before submitting the request in the MCI Portal.

One funding instance request per customer project

Partners may not use funding for the same engagement multiple times.*

Customer criteria
All Strategic, Major, select SMC Corporate Customers with a valid TPID are eligible.

Sentinel Consumption estimates:

Use the Microsoft Sentinel Calculator to estimate Sentinel consumption.

Partners are expected to bring viable projects to MSMM Partner-led with reasonable Sentinel ACR estimates. Projects
should not be consistently toward the lower-end of the Sentinel ACR thresholds for MSMM Partner led engagements.

* Refer to the Microsoft Commerce Incentives Guide for complete terms and conditions.
MSMM Partner-led Nomination Guidance

Ensure to use the Customer TPID. Please do not use the Tenant ID while nominating.
(if Tenant ID is auto-populated, delete that and enter TPID.)

Each engagement is a distinct scenario with the customer. Please do not nominate
multiple engagements together.
(Example: Medium size and Large size cannot be nominated simultaneously.)

The terms and conditions in the Microsoft Commercial Incentives guide are final and binding on MSMM Partner-led.
MSMM Partner-led Engagement Stages
Stage 01 Stage 02 Stage 03 Stage 04 Stage 05

Nominate Customer Execution & POE Validation Payment

Customer
Partner nominates
customer+ after there
is confirmed intent and
alignment from the
customer to carry out
the engagement.
Partner Center validates
customer eligibility for
partner and customer
Consent POE Submission
Partner requests Partner delivers the Microsoft reviews POE Once approved, claim
customer consent customer engagement documentation will be processed for
payment
Partner Center receives Partner submits claim Microsoft reaches out
customer consent with required Proof of to partner if additional Microsoft issues
Execution (POE) information is needed. payment to partner
Without customer documentation
consent, claim will Note: Project Sentinel ACR
Microsoft approves or
automatically expire Estimates are required for all declines POE
project sizes
Incomplete claims will
automatically expire

Timeline
+
A partner can nominate a
customer through the 'claim a 30 days max from 120–260 days* from 30 days max from 45 days max from
customer' process in Partner nominating the receiving customer claim submission claim approval
Center's MCI engagements
section. customer consent month end

* The exact timeline for this stage will depend on the size of the engagement. Please refer to the individual one-pagers of the respective engagement type for more details.
 Customer Survey (triggered by Partner,
completed by Customer)

MSMM Partner Survey (completed by Partner)

Partner-led
POE Requirements Proof of execution Word template
(uploaded by Partner)

To receive payment, partners must

submit all five required components Azure Pricing Calculator Estimate
of proof of execution (POE) (uploaded by Partner)
according to the timeline for each
engagement size.

Invoice (uploaded by Partner)

Resources
Partner Resources

MSMM MCI MCI Activities Asset library Support

Nominations Incentives Guide Claims Guide
Microsoft Sentinel Migrate aka.ms/incentivesguide https://aka.ms/ Incentive Page SentinelMMPL
& MCIPartnerActivities @microsoft.com
Modernize (Medium) ClaimsGuide Partner Program Guide

POE for Medium Migration

Microsoft Sentinel Migrate
&
Modernize (Large) POE for Large Migration

Microsoft Sentinel Partner Pl

aybook

Partner FAQ
© Copyright Microsoft Corporation. All rights reserved.