Awarded to CGI

Start date: Wednesday 18 September 2019
Value: £952,380
Company size: large
Cyber Protection Teams (CPT), part of Information Systems & Services in the Ministry of Defence

DCC Technical Support - Cyber Protection Team DCC Embeds

9 Incomplete applications

7 SME, 2 large

8 Completed applications

3 SME, 5 large

Important dates

Published
Thursday 27 June 2019
Deadline for asking questions
Thursday 4 July 2019 at 11:59pm GMT
Closing date for applications
Thursday 11 July 2019 at 11:59pm GMT

Overview

Summary of the work
DCC Embeds will de-risk the introduction/maximize the exploitation of newly developed Defensive Cyber Capabilities across Single Service user base; Royal-Navy, British-Army and Royal Air-Force Cyber Protection Teams. This role's primarily focused on supporting a successful Beta phase of DCC (Small)/accelerating the utilization of MOD’s deployable capability in support of Operations.
Latest start date
Monday 26 August 2019
Expected contract length
18 Months - with option to extend for 4 1/2 months (pending financial approval)
Location
No specific location, eg they can work remotely
Organisation the work is for
Cyber Protection Teams (CPT), part of Information Systems & Services in the Ministry of Defence
Budget range
Up to £1.44m (Inc VAT and T&S) and including the option to extend for 4 1/2 months (pending financial approval)

About the work

Why the work is being done
This task requires Defence Cyber Capability (DCC) Embeds to support military Front Line Commands (FLCs). The DCC Embeds Team will de-risk the introduction and maximize the exploitation of newly developed Defensive Cyber Capabilities across the Single Service (SS) user base; to include Royal Navy, British Army and Royal Air-Force Cyber Protection Teams.
Problem to be solved
There is a need to understand, advocate and augment the delivery of Defensive Cyber Capability across the FLC Cyber Protection Team (CPT) user base.
Client-Side support is required to enable end-users within Single Service Cyber Protection Teams to fully exploit recently delivered deployable Defensive Cyber Equipment and accelerate the utilization of the capability in support of Operations.
Further assistance is required to investigate and capture user requirements and provide deep technical understanding of the technology provided via the MOD Cyber Programme. This will help to plan, deploy and utilise the equipment, feeding back lessons identified to the Project Team.
Who the users are and what they need to do
There are currently four CPTs in the UK which require specialist support and expertise to adopt new technologies being developed by ISS.
Early market engagement
Not applicable
Any work that’s already been done
User engagement has been carried out with end customers to agree the bounds of these tasks.
Technology has been delivered to CPTs, which is currently being supported via the equipment delivery project.

There is no current incumbent for this phase of work.
Existing team
CPTs are Single Service (SS) Force Elements constructed of Suitably Qualified and Experienced Personnel (SQEP). They shall primarily deliver Defensive Cyber Operations to their SS in order to identify, protect, detect, respond and support the recovery of critical systems and military platforms.
Current phase
Beta

Work setup

Address where the work will take place
Colerne (Wiltshire), Portsmouth, Northallerton, and other locations.
Working arrangements
The successful supplier will operate mainly from CPT locations, with regular travel to MOD Corsham, MOD Main Building London, and Reading.
Expertise is expected to work from sites between 08:30 and 17:00 to support the existing CPTs 5 days a week. This will involve engagement with ISS Defend and Operate teams and face-to-face meetings on a daily basis, as well as continual access to MoD terminals such as MODNet, DII Secret and DCC Equipment. It's not possible to deliver the necessary outputs if expertise if not on site.T&S is to be included within the budget for travel to additional sites.
Security clearance
All applicants must have SC Clearance at a minimum (DV is preferable, and required for some key roles). Clearances must be in place prior to submission of Stage 1 evidence.

The Authority WILL NOT sponsor SC/DV Clearance, it must be in place and valid for the duration of the contract.

Additional information

Additional terms and conditions
• Bid Responses to be submitted on the templates provided and in Microsoft Office Excel/Word 2016 format only.
• T&S will be paid based on receipted actuals and in compliance with MoD Policy, no other expenses are permitted.
• Suppliers must use the Authorities Purchase Payment Tool called CP&F or be prepared to sign up to the tool.
• There will be individual working arrangements for each role depending on location (defined at a later stage).
• The intermediaries legislation does not apply to this engagement.

Skills and experience

Buyers will use the essential and nice-to-have skills and experience to help them evaluate suppliers’ technical competence.

Essential skills and experience
  • Recent experience of specific Front Line Command (Army, Air, RN) approach to Defensive Cyber Operations
  • Working knowledge of the following technologies: Cisco Firepower IDS/IPS, Endace Full Packet Capture, Gigamon Taps, NiFi information flows and configuration, Hadoop Big Data and Threat Intelligence
  • Strong understanding of military deployed networks, and/or client/server systems.
  • In-depth experience in Cyber Security and/or Information Assurance.
  • Please confirm valid SC/DV-level Security Clearance is currently in place and will be held for the duration of the contract
Nice-to-have skills and experience
  • Knowledge of Agile development, in particular Eliciting and presenting User Stories
  • Exceptional interpersonal skills, including teamwork, facilitation and negotiation
  • Has an excellent understanding of MOD Defensive Cyber Doctrine, Strategy and TTPs, including specific knowledge of Single Service DCO personnel and procedures.

How suppliers will be evaluated

How many suppliers to evaluate
3
Proposal criteria
  • Completion of proposal template documenting proposed approach (including collaboration with existing teams), timeframes and methodology including documented evidence of essential skills (limited to the 6 pages and 2000 words) (20%)
  • Delivery plan explaining how the approach or solution meets user needs including details of resources and locations (10%)
  • Documented evidence of the identified risks and dependencies, offering approaches to effectively manage them (10%)
  • Evidence of suggested team structure, including CV's of proposed team (which are not included in the 2000 word count) and evidence of SC/DV-Clearance (20%)
Cultural fit criteria
  • Upholds the standards of the MOD by utilising its values and behaviours, in particular integrity, honesty and excellence. (5%)
  • Must be able to work in a mixed team of Military, MoD Civil Service and industry partners (5%)
  • Have excellent interpersonal and influencing skills and a positive approach (5%)
  • Ability to transfer knowledge and upskill staff (5%)
Payment approach
Fixed price
Assessment methods
  • Written proposal
  • Case study
Evaluation weighting

Technical competence

60%

Cultural fit

20%

Price

20%

Questions asked by suppliers

1. Is there a current / preferred supplier for this programme?
As mentioned in the advert, there is no current or preferred incumbent/supplier for this phase of work.
2. Can the authority provide a more detailed breakdown of the roles they are looking for as alluded to in the remark about "here will be individual working arrangements for each role"
More detailed role description will be provided to the Shortlisted suppliers as part of the next stage of competition (Stage 2)
3. This requirement initially states "No specific location, eg they can work remotely" but then later states "Expertise is expected to work from sites between 08:30 and 17:00 to support the existing CPTs 5 days a week. " Can the authority please clarify the base location for the 4 CPT`s as we assume this will be where the majority of the work will be based from.
The locations option selected was ‘no specific location’ as support is required in multiple locations throughout the UK, rather than just one location e.g. London.
The Authority can confirm that it is expected that face-to-face working will be the majority of all contact, at all locations, and we will not be providing the means to work remotely.

The base locations for the CPT’s are Colerne (Wiltshire), Portsmouth, Northallerton, and other locations which cannot be specified at this stage due to security reasons.
4. Taking into the potential option for "remote working" and 2Individual working arrangements" will the relevant GFE be made available to enable remote working.
The locations option selected was ‘no specific location’ as support is required in multiple locations throughout the UK, rather than just one location e.g. London.
The Authority can confirm that it is expected that face-to-face working will be the majority of all contact, at all locations, and we will not be providing the means to work remotely.
5. Are suppliers required to have List X?
Suppliers do not need to be List X but will need to be able to receive and store Official Sensitive comms and all resources will have to have UK security clearance at SC or DV.
6. Please clarify work locations/routine.
Overview, location says none, can work remotely.
Work Setup, address, says 5 days per week on-site 0830-1700.
Additional information says individual working arrangements for reach role.
Is this a full-time on-site role?
What degree of flexibility to work off-site is envisaged?
The locations option selected was ‘no specific location’ as support is required in multiple locations throughout the UK, rather than just one location e.g. London.

The Authority can confirm that it is expected that face-to-face working will be the majority of all contact, at all locations, and we will not be providing the means to work remotely.

The base locations for the CPT’s are Colerne (Wiltshire), Portsmouth, Northallerton, and other locations which cannot be specified at this stage.
7. The requirement is ambiguous. Do you require a resource to work with each CPT? Or a multi-disciplinary team to work across the CPTs under the guidance of a full-time lead who would work predominantly from one location?
We require a resource to work with each CPT.
8. The requirement is ambiguous. Do you require a resource to work with each CPT? Or a multi-disciplinary team to work across the CPTs under the guidance of a full-time lead who would work predominantly from one location?
We require a resource to work with each CPT.
9. Taking into the potential option for "remote working" and 2Individual working arrangements" will the relevant GFE be made available to enable remote working
The locations option selected was ‘no specific location’ as support is required in multiple locations throughout the UK, rather than just one location e.g. London.

The Authority can confirm that it is expected that face-to-face working will be the majority of all contact, at all locations, and we will not be providing the means to work remotely.
10. Can you clarify what roles will be required to undertake this work?
Also, the ad states that work can be done remotely but also requires daily contact on site. Can you please clarify?
More detailed role description will be provided to the Shortlisted suppliers as part of the next stage of competition (Stage 2)

The locations option selected was ‘no specific location’ as support is required in multiple locations throughout the UK, rather than just one location e.g. London.

The Authority can confirm that it is expected that face-to-face working will be the majority of all contact, at all locations, and we will not be providing the means to work remotely.
11. Does the budget (£1.44m) include the option for 4.5 months, or will that be additional budget?
The budget of 1.44m does include the option for 4.5 months.
12. Can you confirm that the written proposal and case study will be the assessment method once the number of suppliers have been shortlisted through the current online application?
Yes that is correct.
13. What is the average supplier payment performance (i.e. the time taken to pay suppliers)? What is the department's average supplier payment performance to SME suppliers?
Payment is in accordance with the individual contracts and is normally within 30 days of supplier invoice. This also applies for SME suppliers. All payments will be through the CP&F automated system and normally within this time period.
14. Embeds are expected to work Full Time (5DPW) on site at each of the 4 CPT locations (with travel to Corsham, MB & Reading). 3 x working addresses are stated (Colerne, Portsmouth & Northallerton), please verify where the 4 CPTs are located.
The base locations for the CPT’s are Colerne (Wiltshire), Portsmouth, Northallerton, and other locations which cannot be specified at this stage due to security reasons.
15. The answer to Q11 suggests the budget will cover the 18 months plus a 4.5 month extension. The role description mentions that the extension is subject to financial approval meaning the extension is additional to the stated budget. Which is correct? And is this actually an 18 month or 22.5 month contract?
The budget covers the period of the 18 month contract including the option to extend for a further 4.5 months. Suppliers should provide a breakdown of cost for the 18 months and separately the option period of 4.5 months.
16. Can the authority provide any guidance or expectation on how much travel across the UK will be required.
We anticipate there may be travel to Corsham at least once per month, travel to London at least once every 2 months and travel to Reading at least every month. The supplier may also need to travel to other location once every 2 months and Ad-Hoc travel might be required over and above that However, specific locations for these are not yet confirmed.
17. You have confirmed that you require an embed for each CPT. You have confirmed locations as Corsham (presumably Army) Portsmouth (presumaby RN), Northallerton (we believe also to be Army) and 'other locations'. This is plural implying more than one. So there could be 5 or more CPTs to support. For clarity, how many CPTs are there to be supported as each needs a dedicated resource.
As mentioned in the advert there will be 4 CPTs, the locations of these will be Colerne (Wiltshire), Portsmouth, Northallerton, and one other location that cannot be specified. The ‘other locations’ mentioned also include Corsham, Reading and London, which were mentioned in ‘Working arrangements’ section of the advert.