Awarded to AMSA InfoSec Ltd

Start date: Monday 15 October 2018
Value: £8,500
Company size: SME
Home Office - Police and Public Protection Technology

Identify the secutity requirements and provide a secuity risk assessment

8 Incomplete applications

7 SME, 1 large

13 Completed applications

11 SME, 2 large

Important dates

Published
Friday 7 September 2018
Deadline for asking questions
Tuesday 11 September 2018 at 11:59pm GMT
Closing date for applications
Friday 14 September 2018 at 11:59pm GMT

Overview

Specialist role
Cyber security consultant
Summary of the work
Security specialist to identify security requirements for the Hendon Data Centre Virtual Estate deployment. Once the requirements have been identified the specialist is required to produce a security risk assessment for submission to the Home Office accreditor. The contract will include any subsequent feedback from the H.O. accreditor to action
Latest start date
Monday 8 October 2018
Expected contract length
3/4 days
Location
London
Organisation the work is for
Home Office - Police and Public Protection Technology
Maximum day rate

About the work

Early market engagement
There are a large number of suppliers within the security market for accrediting IT systems. There are suppliers who are already on the G-cloud framework, which support the necessary requirements
Who the specialist will work with
The specialist will work with Virtual Estate project manager, technical teams and stakeholders for the police open systems and directly with the Home Office security accreditor
What the specialist will work on
Provide security requirements and produce a security risk assessment suitable for accreditation. This will support the development of a virtual estate within Hendon Data Centre

Work setup

Address where the work will take place
Hendon Data Centre
London
NW9
Working arrangements
The specialist will need to communicate (via workshops) will the stakeholders on site for 2 days and off site (optional) to produce security risk assessment
Security clearance
SC cleared (Active)

Additional information

Additional terms and conditions
Standard contract conditions apply

Skills and experience

Buyers will use the essential and nice-to-have skills and experience to help them evaluate suppliers’ technical competence.

Essential skills and experience
  • Security accreditation to provide services to Government
  • Have recent experience of producing high quality security risk assessments to Government orgnisations
Nice-to-have skills and experience
Delivered services relating to data centre security and VMWare configuation

How suppliers will be evaluated

How many specialists to evaluate
5
Cultural fit criteria
  • Take personal responsibility to deliver high quality reports
  • Able to communiacte with stakeholders professionally
Assessment methods
Work history
Evaluation weighting

Technical competence

75%

Cultural fit

5%

Price

20%

Questions asked by suppliers

1. Yes I can confirm this piece of work relates to Hendon Data Centre.
The scope of the project is to deliver a virtual estate to host tenants for critical policing systems/applications. The elements are 1. VMware config - Cisco UCS. 2. SAN storage 3. Security. Service support. This request for an SME is specifically for the gathering of security risk information in order to submit that security risk assessment to the accreditor. In gathering the information there is a requirement to prepare for the ITHC, but not complete the ITHC
2. We’ve been using the SWIFT Risk Discovery method recently, but if a supplier has a viable alternative that will provide a robust risk assessment then this is acceptable
We’ve been using the SWIFT Risk Discovery method recently, but if a supplier has a viable alternative that will provide a robust risk assessment then this is acceptable
3. Yes, the SME will work with a engineer
Yes, the SME will work with a engineer
4. Yes the project manager will arrange and coordinate workshops
Yes the project manager will arrange and coordinate workshops
5. Yes, I have posted an answer for a supplier in 1
Yes, I have posted an answer for a supplier in 1
6. Yes all day rates will include reasonable expenses and VAT
Yes all day rates will include reasonable expenses and VAT
7. Yes consideration would be given to two resources, but this does not mean double the cost. If there are two resources working on this piece of work it is expected timescales would be reduced to complete the work
Yes consideration would be given to two resources, but this does not mean double the cost. If there are two resources working on this piece of work it is expected timescales would be reduced to complete the work
8. The day rate has not been published as the authority invites competitive tender
The day rate has not been published as the authority invites competitive tender