This opportunity is closed for applications

The deadline was Wednesday 21 October 2020
Greater Manchester Police

Software Application Packaging Services For Windows 10

9 Incomplete applications

6 SME, 3 large

23 Completed applications

12 SME, 11 large

Important dates

Published
Wednesday 7 October 2020
Deadline for asking questions
Wednesday 14 October 2020 at 11:59pm GMT
Closing date for applications
Wednesday 21 October 2020 at 11:59pm GMT

Overview

Summary of the work
Packaging and testing of software applications for the GMP Windows 10 project, for approximately 120 applications. The contract will also provide further packaging services through the provision of a 'block of credits' to be used on a call-off basis during the contract period.
Latest start date
Tuesday 1 December 2020
Expected contract length
the full contract length is 2 years + optional 6 months extension
Location
North West England
Organisation the work is for
Greater Manchester Police
Budget range
£655K

About the work

Why the work is being done
GMP is upgrading all of its PCs from Windows 7 to Windows 10. The Windows 10 project is the technical enabler to delivery of a transformation in GMP, which is being driven by the National Enabling Programme (NEP). The NEP has been established by the National Police Technology Council (NPTC) to enhance collaboration between police forces across the nation. To achieve this objective, the NEP requires the upgrade and/or implementation of a number of technical platforms and additional services across all forces. So in preparation for the Windows 10 rollout across the GMP estate, a new System Center Configuration Manager (SCCM) system will be implemented.
Problem to be solved
GMP currently has a legacy version of Microsoft SCCM which is used for deploying applications on to Windows 7 PCs. As part of the Windows 10 project, the latest version of SCCM approved by the NEP (see previous section for more details of the NEP) will be implemented. Also, the NEP has provided blueprints for the Windows 10 client build. The portfolio of 120 applications needs to be packaged for deployment via the new SCCM system to the NEP Windows 10 client build.

The application packaging for the Windows 10 project is required to be completed within three months of the contract award.

Additional packaging services on a call-off basis are also required to provide GMP with a packaging service that will supplement the in-house packaging function. GMP require a minimum block of credits that can be called-off for additional packaging requirements, plus the ability to purchase more credits as required.
Who the users are and what they need to do
First and foremost users of the service will be the Windows 10 project team. The subsequent user of the service will be GMP EUC manager who requires further application packaging services.
Early market engagement
An RFI was issued in June 2020 on the bluelight portal which assisted with selection of the procurement route and provided further information about what information suppliers would need from GMP to be able to provide accurate costings for this service.
Any work that’s already been done
An application rationalisation exercise has been carried out internally, which has identified a list of approximately 120 applications which required packaging for Windows 10. These applications have been classified as simple / medium complexity / complex and the list will be supplied with the ITT.
Existing team
The supplier will initially be working with the GMP Windows 10 project team, including a project manager, an application packaging manager, architect and solution assurance manager. The supplier may be required to work with application providers to complete the packaging of applications. In addition, there may be a need to work with representatives from the business during the testing / business assurance phase. Following the completion of the Windows 10 project, the supplier will be required to work with the EUC team.
Current phase
Not started

Work setup

Address where the work will take place
The Sedgley Park Centre, Sedgley Park Road, Prestwich, Manchester M25 0JT and/or Phase II Building, White City Way, Manchester, M16 0RY although some of the services will be delivered remotely as appropriate
Working arrangements
Due to the current Covid-19 pandemic, the GMP project team are based at home. The packaging service can take place remotely via the GMP VPN solution and GMP equipment will be provided to facilitate this. However there is an expectation that if the need arises, meetings or other work will be required to take place on-site.
Security clearance
The team will need to go through the GMP vetting process. Warwickshire Police vetting will be accepted.

Additional information

Additional terms and conditions
GMCA Ts&Cs in addition to the CCS Ts&Cs

Skills and experience

Buyers will use the essential and nice-to-have skills and experience to help them evaluate suppliers’ technical competence.

Essential skills and experience
  • have demonstrable experience in the production of application packaging ready for deployment onto Windows 10 using SCCM
  • have demonstrable experience of application technical discovery
  • have proven methodologies for managing and documenting the application packaging process
  • have proven methodologies for managing and documenting the application packaging testing process
  • have proven methodologies for provision of quality assurance both for the application packages and management of the contract itself
  • have experience of testing in a model office environment
  • have experience of conforming to application packaging principles
  • have knowledge and experience of conforming to Microsoft's application packaging best practice
  • have experience of delivering an application packaging service on a call-off basis
Nice-to-have skills and experience
  • Provide experience in skills and knowledge transfer related to applications packaging
  • Provide experience of packaging for a NEP-compliant Windows 10 build/environment
  • Provide experience in packaging assistive applications, such as JAWS and Dragon

How suppliers will be evaluated

All suppliers will be asked to provide a written proposal.

How many suppliers to evaluate
3
Proposal criteria
  • Past Experience of Delivering Application Packaging Services (10%)
  • Quality Management and Assurance (15%)
  • Team and Project Management Approach - Windows 10 project (15%)
  • Technical Approach (25%)
  • End-to-end packaging process (25%)
  • Management of the Block of Credits (5%)
Cultural fit criteria
Social Value (5%)
Payment approach
Fixed price
Additional assessment methods
Reference
Evaluation weighting

Technical competence

65%

Cultural fit

5%

Price

30%

Questions asked by suppliers

1. Is there a set deadline for when the migration project ends?
There is no set end date at this present time
2. Will there be rolling transitions i.e IT department in month one gets updated to Win10 then in month two another department?
The roll out will be phased with each day new users being onboarded. Break down of this migration strategy is yet to be decided.
3. Can we get access and permissions to a personal area of their network space for us to store and transfer media including VPN access?
It is envisaged that we will provide access to our clientless VPN solution. This will allow you to access a jump box within GMP with no copy and paste facilities to your computer. Network storage would be provided and media transfer would be covered by any data sharing agreement.
4. Could we please have a copy of the Windows 10 Gold Image for our virtual machines?
No all packaging activities needs to be done on GMP machines
5. What security settings should we be aware of? I.e FTP's, Firewalls, Permissioning, USB devices are prohibited etc?
As you would expect GMP has a variety of security methods
6. What security settings should we be aware of? I.e FTP's, Firewalls, Permissioning, USB devices are prohibited etc?
As you would expect GMP has a variety of security methods in place to harden the devices. Once an agreement is in place we can provide a full brief.
7. Is there a core apps list?
The applications are not split out in this way all applications are required for the roll out.
8. Will source media be provided? If provided could the source media be tested by the client i.e compatibility testing on the Source with Windows 10 before we touch it?
Source media and existing Windows 7 package (where applicable) will be provided compatibility testing would not be carried out by GMP prior to the packager completing their work.
9. Please can you ensure the Source media is an offline source, we would need license details as part of the Source to prevent being blocked out of the application during Discovery.
All Windows 7 source media we currently hold are offline versions. All licences will be provided once an agreement is in place.
10. What is the breakdown of the apps to be packaged. E.g. how many simple, medium and complex.
51 Simple, 61 Medium, 6 Complex
11. Have any of the apps previously been packaged?
Yes however none of these packages are being carried forward to Windows 10, the previous packages can be provided for reference.
12. Do GMP have the source media/files, licence details, and installation scrip/configuration for all of the 120 Applications?
Yes to all of the above in regards to our Windows 7 packages some apps are undergoing an upgrade for Windows 10 so will be just sourced media/licence.
13. Are GMP open to using off-shore resource for application packaging and testing?
Yes, however there would need to be consideration of where that off shoring took place in order to comply with Data Protection legislation.
14. Does GMP have any special lockdowns in their LLD’s such as Ivanti EM/AM, Microsoft WDAG, WDAC etc? If so who is responsible for updating the policy?
In our legacy Windows 7 domain we have Ivanti EM/AM however we are going to use WDAG and WDAC. GMP resources will configure this accordingly.
15. In terms of packaging, what are the requirements?
App-v or MSI/EXE deployment?
MSI/EXE with potentially one App-V package however there is an outstanding project so can’t confirm at this stage.
16. Does the GMP have specific deployment standards within SCCM for example:- per user/per machine, ad group deployment etc.
Are these already defined and in place?
GMP’s standard is AD Groups for users however there maybe licence specific requirements where other methods are used. These are not in place currently as out legacy SCCM 2007 did not support this.
17. Is the SCCM infrastructure up and running? Which version?
SCCM infrastructure is currently being built on version 1910
18. Are GMP using intune and co management?
Are there requirements to support this and package/deploy apps appropriately via this method?
Yes to InTune and comanagment however all apps will be delivered via SCCM
19. Due to the nature of windows 10 and O365 will there be any office or windows feature updates during the project phase?
No
20. Who is responsible for any updates to the operating system that an application may need? (.net 3.5, SMB etc)
GMP resources will carry this out
21. Are there any Citrix XD or XA on the estate where these apps need to function?
We have a Citrix environment however it is out of scope for this particular piece of work
22. Where group policy affects the functionality of the application who is responsible for diagnosing this?
The supplier would diagnose and define any GPO remediations.
23. Is it the department or a supplier that has created the windows 10 build and associated App lockdowns for GMP?
A partner has created the build, no app lockdowns are in place yet.
24. What applications exist on the base windows 10 build? Are these applications in scope of this contract?
No applications are baked into the image.
25. Do you want the supplier to have a List-X facility to manage this work.
This is not a requirement for this project
26. How many Specialist would you be comfortable with?
As many or as few as is needed to deliver the requirements in the stated timescale
27. Is there a LLD, low level design available?
No, at the moment the design documents are currently being developed
28. Is there a set deadline for when the migration project ends?
Refer to paragraph 2 under 'Problem to be solved' on the opportunity page.
29. What minimum security requirements do you have for the supplier.
NCSC, Microsoft and Industry good practise. Dependant on the architecture/design
30. The request state 120 apps to be packaged in 3 months. Please explain your estimated project contract which is stated for 2 years.
Refer to paragraph 3 under 'Problem to be solved' on the opportunity page.
31. Is it the department or a supplier that has created the windows 10 build and associated App lockdowns for GMP?
A supplier will be creating the Windows 10 build.