SGDOS00001 ISMS Assessment

Tender description

Summary of the work Develop and implement comonents for the FCO Services Information Security management System (ISMS). Develop a risk assessment method based on Home Office Technology 'Risk Discovery', conduct risk assessments and develop risk treatment plans and Statement of Applicability. Specialist role Cyber security consultant Expected Contract Length Up to a maximum of 6 months Latest start date Monday 31 July 2017 Maximum Day Rate £1,000.00 but would prefer lower. Who Speclialist Work With There are two teams in place working for the cheif information Security Officer and Cyber Security Manager. Additional dedicated external syupport is required to deliver these key pieces of work. What Specialists Work On Develop and implement comonents for the FCO Services Information Security management System (ISMS). Develop a risk assessment method based on Home Office Technology 'Risk Discovery', conduct risk assessments and develop risk treatment plans and Statement of Applicability. Skills & Experience • deep experitise across a broad spectrum of security disciplines • Leadership & governance • Risk Assessment and Management • ISO/IEC 27001 • Provide evidence of significant experience (3 years preferred) in providing security documentation Nice to Haves • capability to develop and implement an end-to-end risk management lifecycle • Provide evidence of experience implementing NCSC (CESG) security guidelines, standards, and policies Work Location Hanslope Park, Milton Keynes or remotely by arrangment. Working Arrangments Work may be done offsite. However, there will be a need for onsite meetings and collaboration. Security Clearance SC clearance as a minimum. DV preferred. Additional T&Cs Individual Statements of Work (SoW) will be agreed periodically and subject to satisfactory performance of the supplier. This contract is non-exclusive. The intention of this contract is the provision of a service with defined outcomes where the supplier is responsible for deliverables, risk, and provision of individuals. This contract would probably be deemed outside the intermediaries legislation (IR35) but could be affected by factors outside FCOS control. FCOS assumes no liability and will grant no guarantee of status. IPR in any development will rest with FCOS. No. of Specialists to Evaluate 5 Cultural Fit Criteria • Approach to service readiness • Approach to stakeholder management • Approach to developing a One Team approach • Approach to the development of client capability • Approach to people development • Approach to innovation and value for money Evaluation Weighting Technical competence 65% Cultural fit 5% Price 30% Questions from Suppliers 1. We have more than one individual, SC & DV, who would be able to provide the service you require. Can you confirm if you are looking for one individual or for an organisation that can provide a wider range of experience and skills to meet the needs of the FCO. As it’s a work package we are not individual dependent as long as the work gets done. 2. The submission date is the 28th July with a start date of the 31st July. As we know there need to be interviews what is the realistic start date? 1 /9 would be a more realistic start date. 3. Is this role deemed inside or outside IR35? FCO Services ( FCOS ) is a Public Sector organisation. IR35 legislation will apply to FCOS and may apply to off-payroll personnel ( contractors ) who are engaged to provide the service to FCOS through an intermediary. Government guidelines state that an intermediary can be:• Your own limited company• A service or personal service company• A partnershipThe role itself does not determine whether IR35 shall apply but the type of intermediary the contractor provides the service through. Please advise which of the above applies to the person you intend to provide for this work. 4. "Work may be done offsite. However, there will be a need for onsite meetings and collaboration." Do you have an expectation on the balance between onsite and offsite working, for example the number of days the supplier will need to be onsite? I would expect a split of about 75% on site and 25% off site 5. If we are only submitting one individual, would that individual need to have DV to get all the work done? No the individual does not have to be DV cleared. 6. Do you expect the maximum daily rate to include travel and subsistence or will this be charged at actual and reasonable? Maximum daily rate is all inclusive. 7. Is your requirement for a resource to be assigned full time 5 days on site? We don’t envisage 5 days on site 8. You state the anticipated timescales are 6 months. Are you wanting an individual on a full time, 5 day a week basis or do you anticipate say 2 days a week on average is required? We do not anticipate 5 days a week on site.