Digital Services at the Border (DSAB) require a CESG Tailored Assurance Service (CTAS) Evaluation

Tender description

Why the Work is Being Done Digital Services at the Border (DSAB) requires a inter domain gateway for validation of information across a security boundary. The inter domain gateway has been procured with the first release is due to be delivered on 5th December 2016. The Home Office has requirement that the inter domain gateway undergo a CESG Tailored Assurance Service (CTAS) Evaluation. This must be completed before the end of February 2017. Problem to Be Solved The Home Office require this level of assurance that the security controls in place for the inter domain gateway mitigate any potential risks. Without this assurance the new DSAB platform will not Go Live until CTAS accreditation is successfully completed. Who Are the Users A Border Force officer (user) is required to perform detailed checks for incoming and outgoing individuals at the Border. The CTAS Evaluation needs to perform a detailed assessment of the inter domain gateway so that any risks associated with the new solution have been identified before Go Live. The Home Office will need a level of assurance that the security controls in place for the inter domain gateway mitigate any potential risks. Early Market Engagement Work Already Done Existing Team The supplier's team will be expected to work Home Office Civil Servants, Government Accreditors, external 3rd parties, contractors and suppliers. Current Phase Beta Work Location 2 Marsham Street, London, SW1P 4DF Crown Data Centre, Ark Cody Park, Farnborough, Hampshire, GU14 0LH Working Arrangments During phase 1 of the CTAS evaluation, the supplier's team may work either remotely or on site (Monday – Friday, approximately 09:00 – 18:00) as appropriate. During phase 2 the supplier's team will be required to work physically on site (Monday – Friday, approximately 09:00 – 18:00). Security Clearance The CTAS evaluation will require an SC clearance Additional T&Cs Skills & Experience Provide Cyber Security Consultants who are from the accredited CTAS organisaiton (https://www.ncsc.gov.uk/scheme/tailored-evaluation) Knowledge of security best practises, processes, techniques used for production, pre-production and development environments Pro-active engagement with all stakeholders and programme delivery teams Experience to assess the Architectural Design of the target system for the CTAS evaluation Experience to assess the Security Requirements of the target system for the CTAS evaluation Experience of the implementation of functional testing against the designated test criteria Implementation and assessment of an IT Health Check Fluent English and exceptional communication skills in order to discuss high level requirements with senior stakeholders and 3rd parties, as well as hold low level technical discussion as required Nice to Haves Domain knowledge or inter domain gateways and the associated CESG Architectural Patterns (4 & 14) No. of Suppliers to Evaluate 3 Proposal Criteria Technical solution Approach and methodology How they've identified risks and dependencies and offered approaches to manage them Estimated timeframes for the work Value for money Previous experience Cultural Fit Criteria Work well both independently as well as in a team within our organisation and with 3rd parties Payment Approach Fixed price Assessment Method Written proposal Evaluation Weighting Technical competence 70% Cultural fit 10% Price 20% Questions from Suppliers Budget range £45,000 to £55,000