Awarded to Principle One

Start date: Monday 21 October 2019
Value: £34,000
Company size: SME
National Crime Agency

Internet Connection Record 2

2 Incomplete applications

1 SME, 1 large

4 Completed applications

2 SME, 2 large

Important dates

Published
Tuesday 25 June 2019
Deadline for asking questions
Tuesday 2 July 2019 at 11:59pm GMT
Closing date for applications
Tuesday 9 July 2019 at 11:59pm GMT

Overview

Summary of the work
The services will include support for (as a minimum):
- Architectural design, integration, configuration, testing and deployment of bespoke software and hardware.
- Development of quality commercial grade code and documentation.
- Participate in showcases of work to stakeholders
Latest start date
Wednesday 31 July 2019
Expected contract length
March 2020
Location
London
Organisation the work is for
National Crime Agency
Budget range

About the work

Why the work is being done
The NCA is developing requirements for the Internet Connection Record National Service to be delivered by Home Office. The ability to require Telecommunications Operators (TOs) to retain limited information about a person’s / device’s internet activity came about as a result of passage of the Investigatory Powers Act 2016. As part of developing those requirements and enhancing our understanding of associated risk, issues and dependencies, it is proposed to run a limited ‘live trial’ of ICR capability over a six month period from August 2019, with one or more UK TOs. This trial will run from the NCA.
Problem to be solved
In order to support the trial above the IDU requires a network appliance integration and bespoke software development service.
The trial will prove the technical achievability, and operational value of ICRs.
The service is required to configure Gigamon collection capability, identical to that which will be used within the TO engaged in the trial, in order to allow work on trial data manipulation in advance of the trial starting. This individual will also be responsible for designing and configuring the data flow and enrichment requirements for the trial including enabling the disclosed data to be ‘categorised’ from external datasets.
.
Who the users are and what they need to do
The recipients of the outputs of this work will be the project team for the trial activities.
Early market engagement
Enquiries have indicated that the required resource is available from companies on the DOS3 Framework..
Any work that’s already been done
Significant work has already been invested in ICR service provision by a joint Home Office and NCA team and from which this Live Trial has been developed.
Existing team
IDU CCIC staff will support the trial.
Current phase
Discovery

Work setup

Address where the work will take place
IDU CCIC, Spring Gardens Estate, London
Working arrangements
The service will be required on a call off basis up to an estimated maximum of 40 days of effort to be delivered over the course of the FY (to the end of March 2020).
It is anticipated that the work will be front loaded with less support required during and after the trial.
Security clearance
Minimum SC cleared with NCA Top Up.

Additional information

Additional terms and conditions
Additional terms will be sent out shortlisted suppliers.
These will include FOIA terms as the NCA is not subject to FOI requests.
Security terms to include Security aspects letter, information security.
Shortlisted suppliers will be required to utilise Bravo during the assement stage.

At this stage you will need to create an account on the Bravosolutions E-Sourcing portal.

Skills and experience

Buyers will use the essential and nice-to-have skills and experience to help them evaluate suppliers’ technical competence.

Essential skills and experience
  • Experience with Gigamon network monitoring equipment integration and configuration - 30 Points
  • Experience of building and integrating network logging solutions - 15 Points
  • Experience of network data enrichment using reference data sets and other source data - 25 Points
  • Ability to assist with pre-release and release processes including final testing, correction and documentation preparation - 5 Points
  • Strong understanding of JIRA and Confluence - 5 Points
  • Experience with Elasticsearch / Kibana - 5 Points
  • Experience of configuring log analysis applications and databases - 20 Points
  • Knowledge and experience of working with UK Law Enforcement (specifically prior experience with the NCA) - 20 Points
Nice-to-have skills and experience
  • Solution Architecture - 5 Points
  • Ability to write structured, maintainable, commercial quality code to a consistent predefined standard - 5 Points
  • Familiarity with communications data and targeted intercept - 20 Points

How suppliers will be evaluated

How many suppliers to evaluate
4
Proposal criteria
  • The proposed approach and methodology - 5 Points
  • Other relevant skills and experience which may be of benefit to operational activities - 5 Points
Cultural fit criteria
  • Working closely with a range of government employees and other consultancies and specialists. Ideally demonstrating having worked successfully in a rainbow team such as this on prior engagements - 5
  • Willingness to be flexible to accommodate the needs of the organisation - 5 Points
Payment approach
Time and materials
Assessment methods
  • Written proposal
  • Case study
  • Work history
Evaluation weighting

Technical competence

75%

Cultural fit

5%

Price

20%

Questions asked by suppliers

1. What is your allocated budget?
Have specified the FTE time required for each role and would expect suppliers to provide at published rate card.
2. In the Problem to be solved section of the listing the final sentence refers to an individual. Are you expecting this service to be provided by a single resource for the 40 estimated days?
For continuity, our preference would be for a single resource but if necessary we can accommodate more than one.
3. Are you using standard scoring and, if so, how does a supplier achieve a 3 versus a 2 on this opportunity for the essential and nice-to-haves? If you are not using standard scoring, can you please explain your scoring methodology?
The NCA will be using the standard scoring card as per the DoS 3 framework guidance but we have provided some clarification below on our interpretation of the scores.
0. The response provides information of such a poor standard as to provide no confidence that the service meets the requirement.
1. The suppliers response provides some clear strengths but giving some concern.
2. A good response where strengths clearly outweigh any minor weaknesses.
3. Robust and fully comprehensive response.
4. The NCA would like to confirm that this requirement is being conducted as per the guidance of the DoS 3 framework and as such the evaluation process will be fair, open and transparent.
The NCA would like to confirm that this requirement is being conducted as per the guidance of the DoS 3 framework and as such the evaluation process will be fair, open and transparent.
5. The NCA would like to confirm that any suppliers involved in the development of requirements will not be permitted to submit bids for the same requirement.
The NCA would like to confirm that any suppliers involved in the development of requirements will not be permitted to submit bids for the same requirement.