Awarded to EP90group Ltd

Start date: Monday 4 December 2017
Value: £60,000
Company size: SME
Government Digital Service, part of Cabinet Office

WP1489 Investigating Threats to Identity

6 Incomplete applications

4 SME, 2 large

4 Completed applications

4 SME, 0 large

Important dates

Published
Tuesday 17 October 2017
Deadline for asking questions
Thursday 19 October 2017 at 11:59pm GMT
Closing date for applications
Tuesday 24 October 2017 at 11:59pm GMT

Overview

Specialist role
Cyber security consultant
Summary of the work
Cyber security and identity risk advisor to support ongoing research into risks and threats to the UK identity ecosystem.
Latest start date
Monday 4 December 2017
Expected contract length
120 working days (6 months)
Location
London
Organisation the work is for
Government Digital Service, part of Cabinet Office
Maximum day rate
£500

About the work

Early market engagement
None
Who the specialist will work with
The Identity Standards and Fraud Prevention team are responsible for understanding the risks and threats of identity crime and identity fraud from organised crime groups and other threat actors. This is undertaken in partnership with the public, private and academic sector. It is the key component and research used for the the development and design of the UK government's identity standards and assurance model.
What the specialist will work on
The research will focus on threats to the identity ecosystem that could be used by a fraudster trying to get through the identity verification process. This review will incorporate an analysis of indicative costs for the different sources of identity evidence, availability relating to specific countries, establish if the breadth of available data is increasing or decreasing, what the changes are every fortnight / month by identity evidence type.

Work setup

Address where the work will take place
Government Digital Service, The White Chapel Building, 10 Whitechapel High Street, London, E1 8QS
Working arrangements
The project will last for 6 months.
At the end of the first month an initial findings report will be established.
At the end of month 2 an agreed template for reporting will be created which will include additional findings to month 1.
From months 3 through 6, fortnightly reports will be provided to the agreed template.
The research team will provide weekly updates on progress, with face to face meetings scheduled every 3 weeks at GDS in London.
Security clearance
Minimum Baseline Personnel Security Standard

Additional information

Additional terms and conditions
"All expenses must be pre-agreed with between the parties and must comply with the Cabinet Office (CO) Travel and Subsistence (T&S) Policy."

"All vendors are obliged to provide sufficient guarantees to implement appropriate technical and organisational measures so that the processing meets the requirements of GDPR and ensures the protection of the rights of data subjects. For further information please see the Information Commissioner's Office website:https://ico.org.uk/for-organisations/data-protection-reform/overview-of-the-gdpr/"

Skills and experience

Buyers will use the essential and nice-to-have skills and experience to help them evaluate suppliers’ technical competence.

Essential skills and experience
  • Minimum 5 years experience analysing the risks and threats to identity ecosystems in the UK and globally
  • Minimum 5 years previous experience utilising the dark web and analysing the capabilities and behaviours of organised crime
  • Minimum 5 years academic research experience into cybersecurity and identity risks
  • Previous experience of working or collaborating with law enforcement, security and military organisations on cybersecurity and identity risks
Nice-to-have skills and experience
  • 2+ years experience working within or with UK government
  • Knowledge of international identity documents
  • Understanding of the UK government's identity and assurance model
  • Working proficiency in multiple languages

How suppliers will be evaluated

How many specialists to evaluate
3
Cultural fit criteria
  • Adaptable and flexible worker
  • Keen to develop new skill sets and competencies
  • Previously worked, or open to working in an agile environment
Assessment methods
  • Work history
  • Reference
  • Interview
Evaluation weighting

Technical competence

65%

Cultural fit

15%

Price

20%

Questions asked by suppliers

1. Will this role fall within IR35?
This role is outside of IR35
2. Hi, £500 seems very light for this type of role, is there any chance the budget could be increased?
The rate is set at £500 exclusive of VAT
3. Given current market rates for Cyber security SME`s and the experience required is there any possibility for an increase in the offered rate.
the rate is set at £500 exclusive of VAT
4. Working proficiency in multiple languages" Can you please confirm which languages are preferred?
No specific languages are required, but fluency in languages additional to English would be beneficial.
5. Is there any flexibility with the rate? I have someone who I feel could do this but he is seeking £650 per day.
The rate is set at £500 exclusive of VAT
6. Is there any flexibility with the rate? I have someone who I feel could do this but he is seeking £650 per day.
The rate is set at £500 exclusive of VAT
7. What is the lead time for feedback once the application is submitted?
We aim to give feedback within 5 working days of the closing date
8. Any chances of change in start date as the latest date mentioned is Monday 4 December 2017
The start date could be earlier - the successful applicant must be able to start between the first week of November and Monday 4th December
9. What are the other expenses which will be paid
There may be travel to other organisations across London, or possibly within the UK. No expenses will be paid within the M25. Expenses are subject to the Cabinet Office Travel and Subsistence Policy which can be provided on request and will form part of the call-off contract
10. Any specific format(pdf,doc) in which CVs to be sent later
If shortlisted, specialists will be asked to provide a work history within a template provided
11. Any specific format(pdf,doc) in which CVs to be sent later
If shortlisted, specialists will be asked to provide a work history within a template provided
12. Is occasional remote working allowed?
Yes, Government Digital Service operates a flexible working policy
13. What technologies will the consultant work on or should have experience with , please give detail
Any successful applicant would be encouraged to utilise their existing experience of different technologies to gather, analyse, organise and display information effectively. The successful applicant may choose which technologies they prefer to work with to do this. Essential requirements are for working proficiency with Google and Windows Operating systems.
14. Is there any travel involved in this role and will the travel expenses be paid ?
There may be travel to other organisations across London, or possibly within the UK. No expenses will be paid within the M25. Expenses are subject to the Cabinet Office Travel and Subsistence Policy which can be provided on request and will form part of the call-off contract
15. Is the rate inclusive or exclusive of VAT?
Exclusive
16. Would you consider work permit holders (e.g. Tier 2 General Visa) and EU passport holders for this role ?
Cabinet Office do not sponsor Tier 2 visas.
Workers with an EU passport are allowed to work for Cabinet Office.