Home Office

Digital Services at the Border (DSAB) require a CESG Tailored Assurance Service (CTAS) Evaluation

Incomplete applications

0
Incomplete applications

Completed applications

8
Completed applications
4 SME, 4 large
Important dates
Opportunity attribute name Opportunity attribute value
Published Thursday 24 November 2016
Deadline for asking questions Thursday 1 December 2016 at 11:59pm GMT
Closing date for applications Thursday 8 December 2016 at 11:59pm GMT

Overview

Overview
Opportunity attribute name Opportunity attribute value
Summary of the work Quality and Accreditation Service
Latest start date w/c 5 December 2016
Expected contract length Initially two months with the option to extend for up to a further two months
Location London
Organisation the work is for Home Office
Budget range £45,000 to £55,000

About the work

About the work
Opportunity attribute name Opportunity attribute value
Why the work is being done Digital Services at the Border (DSAB) requires a inter domain gateway for validation of information across a security boundary. The inter domain gateway has been procured with the first release is due to be delivered on 5th December 2016.

The Home Office has requirement that the inter domain gateway undergo a CESG Tailored Assurance Service (CTAS) Evaluation. This must be completed before the end of February 2017.
Problem to be solved The Home Office require this level of assurance that the security controls in place for the inter domain gateway mitigate any potential risks.

Without this assurance the new DSAB platform will not Go Live until CTAS accreditation is successfully completed.
Who the users are and what they need to do A Border Force officer (user) is required to perform detailed checks for incoming and outgoing individuals at the Border.

The CTAS Evaluation needs to perform a detailed assessment of the inter domain gateway so that any risks associated with the new solution have been identified before Go Live.

The Home Office will need a level of assurance that the security controls in place for the inter domain gateway mitigate any potential risks.
Early market engagement
Any work that’s already been done
Existing team The supplier's team will be expected to work Home Office Civil Servants, Government Accreditors, external 3rd parties, contractors and suppliers.
Current phase Beta

Work setup

Work setup
Opportunity attribute name Opportunity attribute value
Address where the work will take place 2 Marsham Street, London, SW1P 4DF

Crown Data Centre, Ark Cody Park, Farnborough, Hampshire, GU14 0LH
Working arrangements During phase 1 of the CTAS evaluation, the supplier's team may work either remotely or on site (Monday – Friday, approximately 09:00 – 18:00) as appropriate.

During phase 2 the supplier's team will be required to work physically on site (Monday – Friday, approximately 09:00 – 18:00).
Security clearance The CTAS evaluation will require an SC clearance

Additional information

Additional information
Opportunity attribute name Opportunity attribute value
Additional terms and conditions

Skills and experience

Buyers will use the essential and nice-to-have skills and experience to help them evaluate suppliers’ technical competence.

Skills and experience
Opportunity attribute name Opportunity attribute value
Essential skills and experience
  • Provide Cyber Security Consultants who are from the accredited CTAS organisaiton (https://www.ncsc.gov.uk/scheme/tailored-evaluation)
  • Knowledge of security best practises, processes, techniques used for production, pre-production and development environments
  • Pro-active engagement with all stakeholders and programme delivery teams
  • Experience to assess the Architectural Design of the target system for the CTAS evaluation
  • Experience to assess the Security Requirements of the target system for the CTAS evaluation
  • Experience of the implementation of functional testing against the designated test criteria
  • Implementation and assessment of an IT Health Check
  • Fluent English and exceptional communication skills in order to discuss high level requirements with senior stakeholders and 3rd parties, as well as hold low level technical discussion as required
Nice-to-have skills and experience Domain knowledge or inter domain gateways and the associated CESG Architectural Patterns (4 & 14)

How suppliers will be evaluated

How suppliers will be evaluated
Opportunity attribute name Opportunity attribute value
How many suppliers to evaluate 3
Proposal criteria
  • Technical solution
  • Approach and methodology
  • How they've identified risks and dependencies and offered approaches to manage them
  • Estimated timeframes for the work
  • Value for money
  • Previous experience
Cultural fit criteria Work well both independently as well as in a team within our organisation and with 3rd parties
Payment approach Fixed price
Assessment methods Written proposal
Evaluation weighting

Technical competence

70%

Cultural fit

10%

Price

20%

Questions asked by suppliers

Questions asked by suppliers
Supplier question Buyer answer
1. . The dates for the two Q&A workshops have been revised to allow time for suppliers to respond before the first session, which is now Tuesday 29 November.

DSAB will hold two (2) workshops for interested suppliers on;- - Tuesday 29 November at 10 Great George Street, London SW1P 3AE (13.00 to 14.30) and – Thursday 1 December at 10 Great George Street, London, SW1P 3AE (13.00 to 14.30)
Please contact the DSAB.commercialteam@homeoffice.gsi.gov.uk to confirm attendance - (1 per supplier)
2. What is the schedule for Award, CTASEvaluation workshops and Testing? It is anticipated that Award notification will take place on Monday 12 December or Tuesday 13 December at the latest and not 5 December as shown in the notice.

CTAS Evaluation workshops will be held between Friday 16th and Monday 19th December.

Testing will commence Monday 19th December and is scheduled to continue up to Friday 23 December 2016
3. Please can we clarify the timeline detailed in the clarification response above? The deadline for expressing interest in the 8 December, and the award notification specified as the 12/13th Dec. Our understanding is suppliers have two weeks to express interest, after which the Buying Authority may need to conduct a shortlisting exercise if too many suppliers register interest, where suppliers provide evidence of their 'essential' and 'nice-to-have' skills and experience. CCS indicate a minimum of 5 days must be given to respond. Then the 3 shortlisted suppliers complete the proposal submission stage, after which the contract is awarded. Our understanding is that the additional period described following the shortlisting exercise to provide a proposal is an 'optional' step and we are not proposing to use it for this procurement, due to the time constraints around this particular piece of work.

The workshops that are being held on Tuesday 29th November and Thursday 1 November should provide additional details required to inform any proposals that are to be submitted for consideration regarding this requirement.

Confirmation of clearance will be required to attend the Q&A workshops on Tuesday and Thursday and should be brought with all attendees.
4. Given you want to award the contract by the 12th December, what will the next steps be between the 8th December close date and contract award? Given the short timeframe, please can you tell us how many words will you ask for in the shortlisting questionnaire if you get more than 3 suppliers who tick all boxes. Will you be using the 2000 word template for proposal response? We are proposing to evaluate using the Proposal Template with the 2000 word limit but would suggest that any relevant information not in the proposal is attached.

Please note; - our expectation is that any Proposal documents will be submitted on 8th December along with the shortlisting questionnaire and evaluated at that time. Additional time will not be available to submit a proposal after 8th December. This is due to the time constraints around this particular piece of work.
5. Are there any restrictions on who may attend the Q&A Workshops on Tuesday 29th November and Thursday 1 December? There is a need for all individuals attending the Q&A Workshops to hold SC clearance due to the nature of the CTAS evaluation. Confirmation of clearance held will need to be provided on the day.