Awarded to Thoughtworks Limited

Start date: Monday 11 November 2019
Value: £233,100
Company size: large
Home Office

C16381 Systems Audit

17 Incomplete applications

10 SME, 7 large

16 Completed applications

8 SME, 8 large

Important dates

Friday 26 July 2019
Deadline for asking questions
Friday 2 August 2019 at 11:59pm GMT
Closing date for applications
Friday 9 August 2019 at 11:59pm GMT


Summary of the work
We are looking for a partner to conduct a comprehensive inventory of the systems being used across the Home Office. Some basic work has been performed recently, and we have some prior data which will accelerate and contribute to the final outcome.
Latest start date
Monday 9 September 2019
Expected contract length
3 months
Organisation the work is for
Home Office
Budget range

About the work

Why the work is being done
We are looking for a partner to conduct a comprehensive inventory of the systems being used across the Home Office. Some basic work has been performed recently, and we have some prior data which will accelerate and contribute to the final outcome.
Problem to be solved
Information about the makeup and characteristics of the existing IT estate is currently stored in a fragmented and inconsistent manner, and is not regularly maintained as things change. Without a clear, consistent and up-to-date view of the as-is situation, it is very difficult to plan and deliver initiatives to drive the desired changes. This inventory will form a baseline to feed into System Roadmapping and Lifecycle Planning, helping to determine what shared technology products underpin current and future direction.
Who the users are and what they need to do
The CTO function and Home Office governance boards need to be able to make effective plans and decisions based on clear, consistent and up-to-date enterprise-wide data.
Early market engagement
Any work that’s already been done
We have previously gathered some basic data for the purposed of identifying systems due to be decommissioned. This can contribute to the final outcome.
Existing team
There is no existing team in place. The team will report into the Digital, Data and Technology CTO Function.
Current phase
Not applicable

Work setup

Address where the work will take place
Apollo House, Croydon. Some travel to other Home Office sites might be necessary.
Working arrangements
Meetings and data collection exercises should be face to face on site. Report generation and other tasks can be done remotely.
Security clearance
All staff must have CTC level security clearance prior to starting work. Staff not in current possession of CTC security clearance must be willing to undergo and capable of achieving CTC security clearance.

Additional information

Additional terms and conditions
Travel expenses will be paid for journeys outside the M25 with the prior agreement of the customer and in line with HO Policy. Subsistence will not be payable. £900 cap on day-rates to apply. SFIA grade caps may apply

Skills and experience

Buyers will use the essential and nice-to-have skills and experience to help them evaluate suppliers’ technical competence.

Essential skills and experience
  • • Evidence of delivering technical audits for organisations of a comparable size and complexity as the Home Office within the last two years (one example only).
  • Evidence of the effectiveness of supplier’s tools and methodologies for technology audit (one example only).
  • Evidence of showing systems roadmap insights and other benefits to client organisations from work done by the supplier on audits (one example only)
  • Evidence of identifying risks, dependencies and impacts arising from the stakeholder engagement needed for the delivery of the outcomes (one example only).
Nice-to-have skills and experience
Evidence of deploying evolvable and maintainable systems audit repositories (documents, processes, web sites and/or other tools) actually in use by client organisations (one example only)

How suppliers will be evaluated

How many suppliers to evaluate
Proposal criteria
  • Capability (Organisation and Team)
  • Approach and Methodology
  • Mobilisation including timeframes
  • How they have identified risks and dependencies and offered approaches to manage them
  • Team structure
Cultural fit criteria
  • • Ability to function effectively and collaborate in a multi-supplier environment
  • • Ability to work in a manner in accordance with GDS Service Manual or equivalent
Payment approach
Capped time and materials
Assessment methods
  • Written proposal
  • Work history
  • Presentation
Evaluation weighting

Technical competence


Cultural fit




Questions asked by suppliers

1. Could you please indicate likely time scales for evaluation should we be down selected, in particular what the likely tender response date will be?
The RFP timetable is still being finalised and is subject to change. The current planned date for the proposal deadline is 4pm on 28th August. RFP issue is expected 14th August and supplier presentations are 2nd September.
2. Can you please provide additional detail of the IT estate in scope of the works – including what types of IT assets (servers, networking equipment, end-user devices – mobile?), approximately how many devices, and the location of the assets (are they centralised in a single data centre or spread out geographically?)
The requirement is for an audit of the IT systems that support our business processes and the technologies they use. The requirement is not to produce an asset register of IT equipment. Our systems are not centralised in a single data centre.
3. Is the intention of this project to perform a ‘one-off’ audit or do you require a solution that provides on-going auditing capabilities?
The desired outcome from this piece of work is an accurate systems audit for the as-is and a reproducible process that allows Home Office to evolve and maintain that audit in the future.
4. Do the results of the work need to be entered in to a new / current Configuration Management Database (CMDB)?
The results need to be in a form that allows us to produce and maintain a technology roadmap. No assumptions have been made as to the form this will take.
5. Does the scope of works include the mapping of applications and services? Would there be a requirement for data assets to be mapped also?
The primary focus is to produce an audit of the applications and services that support our business processes. There is no requirement for this audit to include detailed description of the data stored/processed by those services.
6. How detailed should the audit be?
• e.g. Host, OS, Software, Running Software, Database, Tables, Categorisation or indexing of data?
The audit needs to support the production and maintenance of a systems roadmap and dependency planning. The level of detail needs to support the outcome however the primary focus is to produce an audit of the applications and services not a detailed technical audit of platforms.
7. Is any organisation currently engaged in delivering services linked to this requirement?
8. Has any previous work been completed that is linked to this opportunity?
We have completed some basic work internally that can contribute to the final outcome.
9. What is the buyer looking for to reach a 3 point scoring answer?
A demonstration by the Supplier of exceeding the skills and experience required.