The Met Office

Transport Weather Manager Ongoing Support, Maintenance and Testing

Incomplete applications

5
Incomplete applications
4 SME, 1 large

Completed applications

11
Completed applications
5 SME, 6 large
Important dates
Opportunity attribute name Opportunity attribute value
Published Monday 8 April 2019
Deadline for asking questions Monday 15 April 2019 at 11:59pm GMT
Closing date for applications Monday 22 April 2019 at 11:59pm GMT

Overview

Overview
Opportunity attribute name Opportunity attribute value
Summary of the work Ongoing support, maintenance and end to end testing of the existing Transport Weather Manager system including lifecycle improvements.
Latest start date Monday 1 July 2019
Expected contract length 2 years
Location South West England
Organisation the work is for The Met Office
Budget range £150,000 - £300,000

About the work

About the work
Opportunity attribute name Opportunity attribute value
Why the work is being done The Met Office owns the UK Transport weather forecasting task on behalf of the Highways England and Department for infrastructure, and delivers road transport weather services to government departments, and the public.

This project is to manage the lifecycle of the existing Met Office Transport Weather Manager forecast system and the services it delivers to customers.
Problem to be solved Transport Weather Manager is an integrated land transport product suite that Met Office customers across, road, rail and independent gritting markets use to view and interact with weather forecast and observation information to make informed critical operational decisions.

Target outcomes include:

1) Delivery of a prioritised backlog of system improvements guided by the Product Owner.

2) Automated Testing eg skills to continue building on the existing Selenium Test Suite.

3) End to End testing

4) Ongoing refining, planning, tracking, testing and operational support and documentation requirements

5) Compliance with Cyber security, MoD DCPP, GDPR, coding, release engineering and documentation standards
Who the users are and what they need to do • As a forecaster, I need to interpret the data and model output in order to produce forecasts, alerts and warnings.

• As Highways England or Department for Infrastructure staff, I need to understand road weather to make operational decisions, mitigate business interruptions and ensure an effective response.

• As a commercial organisation, I need to mitigate the impact of road weather to my operations

• As a scientific collaborator, I want access to the latest road weather data and model output, to support scientific projects

• As a member of the public, I am interested in road weather
Early market engagement
Any work that’s already been done Transport Weather Manager was developed on the Met Office Ripple and WAVE (Web Application and Visualisation Engine) systems and has been in 24/7 operation since 2016. Ripple is used for creation, storage and dissemination of forecast products and services. It uses several web clients and written primarily in Java.
Existing team There is currently a Met Office Product Owner, Service Manager, IT Practitioner, Project Manager and work is supported by a variety of internal technical teams. IT software service, maintenance and testing is undertaken by the incumbent third party contractor. The Met Office has an internal security testing team as well as employing external agencies.
Current phase Live

Work setup

Work setup
Opportunity attribute name Opportunity attribute value
Address where the work will take place Met Office, Fitzroy Rd, Exeter, Devon, EX1 3PB
Working arrangements The successful supplier will be required on-site at Exeter during on-boarding of the service and maintenance/testing team, software releases and for demonstrations. After working relationships have been established, the work can be done remotely.

The service/maintenance/testing team work only on Met Office laptops, providing flexibility to work in Met Office premises or remotely.

The whole team have weekly teleconferences with the Product Owner, Service Manager, Internet Applications Manager and Project Manager.

The Met Office uses Skype for Business and Webex to support communication with remote working teams.

Expenses will be capped in line with Met Office travel and subsistence policy.
Security clearance SC level required. (May start work with BC whilst completing SC clearance, which will be provided by the Met Office).

Additional information

Additional information
Opportunity attribute name Opportunity attribute value
Additional terms and conditions

Skills and experience

Buyers will use the essential and nice-to-have skills and experience to help them evaluate suppliers’ technical competence.

Skills and experience
Opportunity attribute name Opportunity attribute value
Essential skills and experience
  • demonstrate experience of provision of a Developer or Business Analyst : (Reference level : SFIA 3 or 4)
  • demonstrate experience of provision of a Senior / Lead Developer: (Reference level : SFIA 5)
  • demonstrate experience of Java development
  • demonstrate experience of AngularJS
  • demonstrate experience of Jira
  • demonstrate experience of Javascript
  • demonstrate experience Spring Boot
  • demonstrate experience of SQL / Postgres
  • demonstrate experience of software project management and comprehension tool
  • demonstrate experience of Unit Testing
  • demonstrate experience of Automated Testing e.g. Selenium
  • demonstrate experience of Secure coding compliant with Cyber Essentials Plus
  • demonstrate experience of Understanding outputs from IT Health Checks and how to resolve vulnerabilities identified
Nice-to-have skills and experience
  • demonstrate experience of Business Analyst skills for refining Agile stories
  • demonstrate experience of Knowledge transfer during and at the completion of contract
  • Ability to flex developer, test and BA resources, manage changes so that disruption to quality and speed of service delivery is minimised.
  • Demonstrable project management skills in Agile, Kanban and scrum, so that team can deliver work in a planned and organised manner and align with wider Met Office project delivery approaches.
  • Relevant technical skills and experience of the team to undertake the work

How suppliers will be evaluated

How suppliers will be evaluated
Opportunity attribute name Opportunity attribute value
How many suppliers to evaluate 3
Proposal criteria
  • Technical solution
  • Approach and methodology
  • How the approach or solution meets user needs
  • Estimated timeframes for the work
  • How they’ve identified risks and dependencies and offered approaches to manage them
  • Value for money
Cultural fit criteria
  • Ability to meet security requirements including Cyber Essentials Plus, meet MoD DCPP requirements and best practises in delivery secure code so risks to Transport Weather Manager service delivery are minimised.
  • Ability to work in partnership with the Met Office. e.g.Helping to establish success criteria, identify and address risks to and improve the efficiency of delivery.
  • Ability to work with Met Office established processes e.g. release management.
  • Good collaboration skills to work transparently with the Met Office as one team in a culture of continuous learning and improvement for the benefit of Met Office customers.
  • Ability to work well as a self-directed team, to design solutions, solve problems and maintain service delivery.
  • Good ability to communicate clearly with IT and non-IT specialisms to share their knowledge and experience with Met Office staff and other third parties.
Payment approach Capped time and materials
Assessment methods
  • Written proposal
  • Case study
Evaluation weighting

Technical competence

60%

Cultural fit

20%

Price

20%

Questions asked by suppliers

Questions asked by suppliers
Supplier question Buyer answer
1. Given that the submission date of 22nd is a Bank Holiday, as is Friday 19th, we would request the submission date is move to midnight 24th April, to reflect the 2 Bank Holiday, to ensure you, the client, get the best responses from submitting suppliers. Unfortunately the publication periods for DOS exercises are locked and automatically applied by the system. I am unable to amend these manually and therefore cannot extend the dates for this excersise to include extra time for bank holidays (as I would normally do). Apologies for the inconvenience in this case.
2. You mention that there is an incumbent supplier, please could you confirm who that is? Civica Digital created the product originally, however they are not an 'incumbent' supplier as their contract to provide the product has now expired.
3. Who was responsible for the original build? Civica Digital developed the product originally.
4. Is there an incumbent providing this service? If so, can you provide there name please? Civica Digital developed the product originally, however they are not an 'incumbent' supplier as their contract to provide the product has now expired.
5. Please can you provide any details regarding the Service Level Agreement (SLA) e.g. is 24/7 support required or office hours and what are the required incident/bug-fix response times? This has not been set yet and would be included as part of the second phase 'Request for Proposal'. This initial phase is designed to locate suitable providers based on the 'essential' and 'nice-to-have' criteria listed on the project.
6. hi is there an incumbent already doing this role ? Civica Digital developed the product originally, however they are not an 'incumbent' supplier as their contract to provide the product has now expired.
7. Does “software project management and comprehension tool” refer to project tracking tools such as JIRA, a build tool such as Maven, or something else? We do use JIRA for tasks, tracking and Project Management. The main focus of this agreement will be support, maintenance and testing, but as a result of this activity, some new development may be required. Further detail would be provided to shortlisted suppliers in the 'Request for Proposal' stage
8. With regard to cultural fit criterion “Ability to meet security requirements including Cyber Essentials Plus …”, will suppliers have to be externally certified by a Cyber Essentials Certification Body? If so, and they are not already externally certified, is a willingness to become certified should the contract be awarded sufficient?

With regard to cultural fit criterion “Ability to … meet MoD DCPP requirements …”, what is the assessed Cyber Risk Profile of the contract? Will suppliers be required to complete a Supplier Assurance Questionnaire and if so when will a RAR be issued?
A: A willingness to become certified will be sufficient

B: This has not been finalized and would be included in the RFP stage, for this phase, please just state your current credentials to meet this requirement as fully as you can.
9. Cyber Essentials (and hence Cyber Essentials Plus, which has the same requirements) does not appear to address secure coding other than to say that bespoke developed web applications are out of scope. For the requirement “demonstrate experience of Secure coding compliant with Cyber Essentials Plus”, should suppliers demonstrate “robust development and testing in line with commercial best practices, such as the Open Web Application Security Project (OWASP) standards” as referenced – but not required – by Cyber Essentials? What we would be looking for is an awareness \ demonstrable experience of coding in line with the Governments Minimum Cyber Security Standard, particularly as Government organizations would use TWM.
So ensure the web application is not susceptible to common security vulnerabilities, such as described in the top ten Open Web Application Security Project (OWASP) vulnerabilities would be the primary example.
10. The ‘Problem to be solved’ section describes a number of required skills/roles (frontend development, backend development, automation testing, planning etc.) but there is a relatively low budget. What is the expected operating model – part-time BAU reactive support, short SoWs for enhancement work etc.?

Given that as per clarification 4, Civica Digital’s contract has expired, is there a growing support/enhancement backlog that the new supplier will need to address urgently at the start of the contract? If so, could the you give an indication of how large that backlog delivery (above and beyond BAU support) is expected to be?
It is likely to be working predominantly Kanban in-season picking off highest priority items from a backlog already in existence or dealing with incidents and issues as they occur. These will be prioritised accordingly by a MO Product Owner. There will be a small number of critical backlog items to be progressed.

There are several things that are considered critical development and most of these are as yet are unsized so it is difficult to put an exact figure on it. We will work within the constraints of the allotted resource specified within the ITT
11. For the requirement “demonstrate experience of Secure coding compliant with Cyber Essentials Plus”, could you clarify how this interacts with your Cyber Essentials scoping? Would Transport Weather Manager be considered a “bespoke (in-house) developed web application” (not in scope) or a “commercial web application”? we would be looking for is an awareness \ demonstrable experience of coding in line with the Governments Minimum Cyber Security Standard, particularly as Government organisations would use TWM.
So ensure the web application is not susceptible to common security vulnerabilities, such as described in the top ten Open Web Application Security Project (OWASP) vulnerabilities would be the primary example.
12. As per clarification 4 that the “software project management and comprehension tool” is JIRA, it appears that the essential skills and experience entries “demonstrate experience of Jira” and “demonstrate experience of software project management and comprehension tool” are identical. Should suppliers provide the same answer for both? This was caused by a specification wording error. The same answer for both questions is perfectly acceptable or the supplier can give examples of JIRA and any other relevant experience if appropriate.