Awarded to Outsource UK Ltd

Start date: Friday 16 June 2017
Value: £118,736
Company size: SME
Ministry of Defence

CSOC Programme Plan Manager

18 Incomplete applications

12 SME, 6 large

17 Completed applications

14 SME, 3 large

Important dates

Friday 5 May 2017
Deadline for asking questions
Tuesday 9 May 2017 at 11:59pm GMT
Closing date for applications
Friday 12 May 2017 at 11:59pm GMT


Specialist role
Cyber security consultant
Summary of the work
Develop the MOD’s Cyber Security Operations Centre (CSOC) FY 18/19 Programme Plan and gain the approvals required for implementation
Latest start date
Wednesday 17 May 2017
Expected contract length
Until 31st Dec 17
Organisation the work is for
Ministry of Defence
Maximum day rate

About the work

Early market engagement
Who the specialist will work with
Civilian, Military and Contractor personnel within the Defence Cyber Programme (DCP) and the wider MOD
What the specialist will work on
1. Build on existing work to establish the requirements framework for the Cyber Security Operations Centre (CSOC) and mature this framework in support of developing a Programme Plan

2. Develop a Programme Plan detailing capability requirements to support development of the CSOC in FY 18/19

3. Develop the documentation required in support of gaining approval for the Programme Plan

4. Managing the staffing of the Programme Plan through the necessary boards and committees to gain approval for the plan

Work setup

Address where the work will take place
The DCP is based in MOD Main Building in London and the specialist will generally be expected to base themselves here at least three days a week. Occasional travel to other MOD locations is expected
Working arrangements
The specialist will generally be expected to base themselves in Main Building at least three days a week to attend any relevant meetings and provide briefs/updates as required by the DCP. The other days may be used by the specialist to progress the task as they see fit. No expenses will be paid and bidders should consider this when making a bid
Security clearance
Individuals will be required to hold a minimum DV clearance

Additional information

Additional terms and conditions

Skills and experience

Buyers will use the essential and nice-to-have skills and experience to help them evaluate suppliers’ technical competence.

Essential skills and experience
  • Extensive understanding of cyber threats especially in the context of a large governmental department (15%)
  • Extensive understanding of defensive cyber capabilities and the interactions between them (15%)
  • The ability to work with stakeholders to identify requirements and document these in a clear and concise manner (10%)
  • Experience of identifying, recording and managing risk at programme and project level (10%)
  • Experience of assessing governance procedures and recommending/implementing improvements (5%)
  • Intimate knowledge of MOD’s Capability Directorate, Joint User construct, Cyber Operations and the acquisition/scrutiny process (25%)
  • Proven ability to work within a team of individuals with varying backgrounds (5%)
Nice-to-have skills and experience
  • Experience of staffing work through military and civilian channels (5%)
  • Experience of working in MOD/Defence organisations (5%)
  • Experience of working in cyber security (5%)

How suppliers will be evaluated

How many specialists to evaluate
Cultural fit criteria
  • Must be able to work in a mixed team of Military, MOD Civil Service and industry partners
  • Must be willing to embrace a just culture
  • Able to understand role in the wide context of 'Defence' and national security
Assessment methods
  • Work history
  • Interview
Evaluation weighting

Technical competence


Cultural fit




Questions asked by suppliers

1. Could you please confirm the IR35 status of this role?
The HMRC tool has deemed this role to be outside of IR35
2. Would you consider someone with 'SC Enhanced' clearance?
Due to the nature of the role, DV clearance is required
3. Is there now, or has there recently been, an incumbent doing similar work for the Authority?
Yes, there was an individual doing preliminary work for this package of work. That contract has now come to an end and this role is for follow on work
4. Would you take candidates with SC clearance who are eligible to be put through DV Clearance?
The tight time-scale for the project would make obtaining DV clearance infeasible
5. Please confirm IR35 Status for this role.
Please see the response to Q1
6. Does this role fall within or outside the scope of IR35?
Please see the response to Q1
7. Is this role judged to fall within the IR35 regulations?
Please see the response to Q1
8. Is this role inside or outside of IR35?
Please see the response to Q1
9. Does this role fall inside IR35
Please see the response to Q1
10. Does this role fall inside IR35
Please see the response to Q1
11. Can the authority confirm the status of this role with regards to IR 35 Legislation
Please see the response to Q1
12. Is this role in or out of scope for IR35?
Please see the response to Q1
13. Will this role fall Outside of IR35?
Please see the response to Q1
14. You say "3 days on site". Does that mean the other 2 days could be working at home?
No, the 3 days refers to Main Building in London. The other 2 days will be spent visiting other sites, such as MOD Corsham
15. Please can you confirm the maximum day rate, and, if this role is In or Out of scope of IR35 Thanks
There is no maximum day rate for the role. The advert gives an indication of the calibre of person required for the role and applicants should price their bid accordingly. For the IR35 scope, please the response to Q1.
16. We spotted throughout the requirement that there will be occasional travel to other sites, can you provide the site list and will there be any expenses or is this to be included in the daily rate? Please can you also confirm feedback date as I see the start date is next week?
The main site will be MOD Corsham although others may be required as the task progresses. No expenses will be paid and this should be considered when making a bid. We will endeavour to provide feedback to applicants by the 19th May.
17. To follow on from the above question RE whether there is someone already doing this or has been recently- Is this same person applying/ being considered for this particular new contract?
As an open competition the advert is available to all on DOS and until the bids are received, we will remain unaware of the tenders submitted.
18. 1. Is there any flexibility with the start date for this requirement as the latest start date listed (17th May) only allows 2 days for reviewing evidence, interviewing and onboarding 2. How much travel will be required and how many other sites will the specialist be expected to travel to?
The latest start date for the role should be the 1st June 17 - I am unable to change this on the system. It is envisaged that 2 days of travelling will be required a week with MOD Corsham being the most likely destination but other destinations may be required as the task progresses. No overseas travel will be required.
19. • Is clearance essential or can they be working towards? • Will the position be extended- for how long? • Re :Intimate knowledge of MOD’s Capability Directorate, Joint User construct, Cyber Operations and the acquisition/scrutiny process (25%) is this essential?
Current DV clearance is required due to the nature of the role. Time-scales for the task mean waiting for a clearance to be granted is not possible. The stated deliverables are required by the end of 2017 in order to obtain necessary approvals - there remains a possibility that follow on activity will be required although this is by no means certain. Yes, due to the nature of the task, intimate knowledge of these areas is essential to progressing the programme plan through the necessary approval boards and committees within the challenging time-scales.
20. • What is the interview process, length and type. • Can we submit CV’s on the digital portal or is there a separate address that these can be sent to? Do you like CV’s to be pasted onto the answers • Is there a contact that we can qualify further details with after the initial queries and before submitting
The interview will be face to face and last roughly 45 minutes – it will delve deeper into the evidence supplied in the application. There is no requirement to submit a separate CV - any relevant information should be included in your submission. Under the rules of the framework, all questions/queries must be submitted through the portal.