Driver & Vehicle Licensing Agency (DVLA)

Atlassian Review - PS/19/10

Incomplete applications

Incomplete applications
14 SME, 1 large

Completed applications

Completed applications
9 SME, 2 large
Important dates
Opportunity attribute name Opportunity attribute value
Published Monday 14 January 2019
Deadline for asking questions Wednesday 16 January 2019 at 11:59pm GMT
Closing date for applications Monday 21 January 2019 at 11:59pm GMT


Opportunity attribute name Opportunity attribute value
Specialist role Business analyst
Summary of the work Investigating DVLA implementation and use of Atlassian products (e.g. Confluence and JIRA) and associated plugins to ascertain whether best practice is being adhered to in terms of the data processed, controls implemented and compliance with licensing and T&Cs, producing a written report on findings, risks identified and recommendations.
Latest start date Monday 25 February 2019
Expected contract length 1 Month + 1 Month
Location Wales
Organisation the work is for Driver & Vehicle Licensing Agency (DVLA)
Maximum day rate £1000 per day inclusive of T&S

About the work

About the work
Opportunity attribute name Opportunity attribute value
Early market engagement The work is anticipated to involve:
• Review the access controls to ensure sensitive data in particular but information / data generally is appropriately protected and available on a need to know basis;
• To review the hosting and determine whether on-site or cloud deployment has any specific implications, benefits or risks and whether the current arrangements provide the best balance;
• Review the way it is used and any key process work flowing to determine whether use is consistent across the organisation and whether it meets best practice and policies;
• Review the amount and type of data being processed and stored in our Atlassian products along with any automated or manual processes to delete such information;
• Consider whether DVLA has appropriate licencing agreements in place and is compliant with the licensing and general T&Cs for the use of the product;
• To assure whether any necessary or appropriate support arrangements are in place;
• Establish accountability and ownership for the tool is in place and is understood; and
• Produce a written report to detail the above information outlining recommendations and risks determined by the investigations.
Who the specialist will work with Working with the Information Assurance Group (IAG) the consultant will need to engage stakeholders within the business in order to interrogate existing practices and systems.
What the specialist will work on DVLA would like to engage a consultant Subject Matter Expert in order to understand whether the DVLA implementation and use of the Atlassian suite (particularly Confluence and JIRA) and any plug ins is in line with best practice and that the controls employed ensure compliance with any applicable internal policies, the Government Security Classification Policy, the Data Protection Act 2018 and general best practice.

Work setup

Work setup
Opportunity attribute name Opportunity attribute value
Address where the work will take place DVLA, Longview Road, Moriston Swansea SA67JL
Working arrangements 5 Days a week but the Agency will work with the consultant flexibly in order to deliver the requirement.

Subsequent report writing can be done on-site or remotely but the consultant will need to be available on-site for any review or presentation of their report.
Security clearance Baseline Personnel Security Standard (BPSS)

Additional information

Additional information
Opportunity attribute name Opportunity attribute value
Additional terms and conditions We currently see this role as sitting outside of IR35, as the candidates would not hold a fixed office position and will not have direct day to day direction or supervision.

Skills and experience

Buyers will use the essential and nice-to-have skills and experience to help them evaluate suppliers’ technical competence.

Skills and experience
Opportunity attribute name Opportunity attribute value
Essential skills and experience
  • Experience of implementing Atlassian products (particularly Confluence and JIRA) and plug ins along with best practices.
  • Knowledge of best practice of implementing Atlassian products and associated plug ins
  • Evidential experience of delivering reports / presentations on the implementation of Atlassian products in large organisations
  • Knowledge of and ability to interrogate any respective licencing and contractual terms and conditions
Nice-to-have skills and experience
  • Understanding of GDPR and Data Protection Law
  • Understanding of the Government Classification Scheme to understand data value and government guidance on handling data

How suppliers will be evaluated

How suppliers will be evaluated
Opportunity attribute name Opportunity attribute value
How many specialists to evaluate 10
Cultural fit criteria
  • Engaging with in-house staff and creating an environment of knowledge-sharing
  • Evidence of working with multiple stakeholders at all levels of the organisation, communicating effectively, establishing consensus and facilitating decision making, including senior executive levels
  • Excellent communication skills, with emphasis on presenting written findings in a clear manner
  • Being able to recognise and adapt to organisational behaviours and cultures when delivering requirement
Assessment methods
  • Work history
  • Reference
  • Interview
  • Scenario or test
  • Presentation
Evaluation weighting

Technical competence


Cultural fit




Questions asked by suppliers

Questions asked by suppliers
Supplier question Buyer answer
1. Is this role outside IR35 or Inside IR35? We currently see this role as sitting outside of IR35, as the candidate would not hold a fixed office position and will not have direct day to day direction or supervision.
2. Is there a current incumbent? There is not currently an incumbent in place for this requirement.
3. Would you consider a consultant, working 2/3 days a week, over a 2 to 3 month contract, rather than a full time role on a months contract? As we are anticipating a delivery timescale of up to and not in excess of 20 working days, a consultant working 2/3 days a week over a period that was not stipulated within the original advert of the tender opportunity would not be considered.
4. Is there the possibility of working 3 days per week remotely? The specialist will be required on site during the investigation phase and will only be permitted to work remotely to complete subsequent report writing and with prior agreement from the business. The specialist will also be required onsite to present and discuss the report.
5. We will need to get some clarity on what you find acceptable in terms of working patterns – This reads like a single consultant requirement but I’d prefer that we ‘team’ this to divide up the various aspects of the brief and deliver in a shorter timeframe. Is this acceptable? This is a requirement for a specialist and not an outcome where a team may have been considered.
6. Could you also clarify what is meant by “1 Month + 1 Month”? For example does this mean there is an acceptance for up to 40 working days of effort (assuming 20 working days per month, single consultant)? We are anticipating a delivery timescale of up to and not in excess of 20 working days.
7. You have said that you are able to pay up to £1000 per day, we have a limit on the framework that allows us to submit candidates at £750.00 per day because of the category you have put the role in.
We have a suitable specialist with multiple years experience as a Atlassian SME and has previously worked with the DVLA in a similar contract position.
Will you consider the candidate at £1000.00 per day once invited in for the next stages? We can make this very clear in the text of the responses to the skills/experience.
Only official day rates submitted via the framework will be accepted for this requirement. Suppliers who wish to change the maximum day for future requirements can do so by using the "update your maximum day rate for a role on your DOS” service.