Awarded to Layer 7 IT Security

Start date: Monday 2 October 2017
Value: £39,000
Company size: SME
Government Digital Service, part of Cabinet Office

WP1446 Certification Lead for Verify

6 Incomplete applications

6 SME, 0 large

5 Completed applications

4 SME, 1 large

Important dates

Published
Wednesday 16 August 2017
Deadline for asking questions
Friday 18 August 2017 at 11:59pm GMT
Closing date for applications
Wednesday 23 August 2017 at 11:59pm GMT

Overview

Specialist role
Cyber security consultant
Summary of the work
GOV.UK Verify is analysing, reviewing options and making recommendations on the design of its future certification model, which will be applicable to private sector reuse. We need an Information Assurance professional, with knowledge of identity related digital certification models, to undertake this options analysis, alongside the identity team.
Latest start date
Monday 16 October 2017
Expected contract length
Estimated six months
Location
London
Organisation the work is for
Government Digital Service, part of Cabinet Office
Maximum day rate
£750

About the work

Early market engagement
Who the specialist will work with
The specialist will be working with the identity standards and fraud prevention team in the GDS identity assurance programme. This includes two identity advisors and two identity fraud analysts. They will be working independently on the project, but will be involved in regular face to face meetings and team collaboration in order to share and incorporate essential knowledge into the model.
What the specialist will work on
Work package to review existing certification process for the national digital idenitty scheme.
This will include interviews and feedback from Government Digital Service, Certified Companies, relevant acceditation bodies.
Options analysis and recommendations on redesign and expansion of certification model in line with existing and future plans for the national identity scheme. This will include assessment of needs, role of government and other relevant organisations in the UK and internationally.

Work setup

Address where the work will take place
Government Digital Service, The White Chapel Building, 10 Whitechapel High Street, London, E1 8QS.
Working arrangements
Work no more than two (2) days a week from 9am - 5.30pm, for 6 months. Expected to use conference capabilties, google hangouts, email, Slack and other channels to keep in contact with the team when working remotely. Will produce technical documentation and options papers, as well as attending team meetings, such as stand-ups, planning and retrospectives.
The intermediaries legislation doesn't apply to this engagement: this is out of scope for IR35.
Security clearance
SC clearance is essential; DV would be advantageous

Additional information

Additional terms and conditions
Cabinet Office (CO) Travel and Subsistence (T&S) Policy will apply. All expenses must be pre-agreed with between the parties and must comply with the CO T&S Policy.

Skills and experience

Buyers will use the essential and nice-to-have skills and experience to help them evaluate suppliers’ technical competence.

Essential skills and experience
  • Minimum five years experience to show: An understanding of certification models for assessing identity related digital and technology services
  • Minimum five years experience to show: A background in information assurance, security, audit and certification
  • Minimum five years experience to show: An understanding of the identity assurance and identity standards for UK government
  • Minimum five years experience to show: Experience of passing on knowledge in a clear and structured manner
  • Minimum five years experience to show: Ability to work independently in a fast paced environment
Nice-to-have skills and experience
  • Minimum five years experience to show: Experience implementing a certification model(s) for an existing digital service
  • Minimum five years experience to show: Previous experience working in or working closely with a government department
  • Minimum five years experience to show: Previously audited or worked on an identity related service during audit
  • Minimum five years experience to show: Experience of public/private sector relationships
  • Minimum five years experience to show: Demonstrable knowledge of security risks to digital identity services

How suppliers will be evaluated

How many specialists to evaluate
3
Cultural fit criteria
  • Collaborative worker, with a good approach to knowledge sharing
  • Committed to team working and open to team feedback
  • Enjoys working in an open and transparent environment
  • Willing to work according to Agile practises
  • Adaptable and keen to expand knowledge base
Assessment methods
  • Work history
  • Interview
Evaluation weighting

Technical competence

65%

Cultural fit

15%

Price

20%

Questions asked by suppliers

1. Is the role 2 days per week in the office with work from home or is 2 days per week working remotely?
Work no more than two days a week. It is preferred the Certification Lead will work in our Whitechapel office for these 2 days but if necessary, working remotely will be considered.
2. Any chances of change in start date as the latest date mentioned is Monday 16 October 2017?
The work needs to be completed soon and the latest start date allows the process to have delays, however the start date of the contract could be sooner than this if there are no delays. We cannot start a contract after the latest start date; the procurement would have to be cancelled and a new procurement would have to take place if the contract does not start by the latest start date
3. What are the other expenses which will be paid?
All expenses must be pre-approved in advance by Cabinet Office.
Expenses are subject to the Cabinet Office Travel and Subsistence Policy which can be provided on request and will form part of the call-off contract.
4. Will you sponsor SC clearance?
No
5. Any specific format(pdf,doc) in which CVs to be sent later?
We do not accept CVs. There is a specific template for Work Histories and we will email the shortlisted suppliers an excel spreadsheet to complete.
All DOS template documents are here: https://www.gov.uk/guidance/digital-outcomes-and-specialists-templates-and-legal-documents.
6. What technologies will the consultant work on or should have experience with, please give detail.
No specific technologies, we use a google operating system.
7. Is there any travel involved in this role and will the travel expenses be paid?
There may be travel to other organisations across London, or possibly within the UK. No expenses will be paid within the M25. Expenses are subject to the Cabinet Office Travel and Subsistence Policy which can be provided on request and will form part of the call-off contract.
8. Is the rate inclusive or exclusive of VAT?
The day rate excludes VAT
9. Can you please elaborate term: certification model(s)?
Certification is the means by which a party can be assured that another party is compliant to a defined specification. We are looking to come up with the best model for certification for external participants as the programme expands into the private sector, this refers to suitable certification bodies, specifications and if we will have one or many, how the market will be assured etc.
10. Would you consider work permit holders (e.g. Tier 2 General Visa) and EU passport holders for this role
Cabinet Office do not sponsor Tier 2 visas.
Workers with EU passport are allowed to work for Cabinet Ofice.
All people working on the contract must hold SC clearance.