Criminal Justice System Common Platform Programme (CJSCPP) - IdAM Product Enhancement Team

Tender description

Why the Work is Being Done CJSCPP is a business transformation to enable the CJS, and agencies be more efficient and deliver a better service. Criminal case information will be kept together in one place, and parties will be able to access and update the same data set based on their security profile and associated access rights. IdAM will complete primary development at the end of Q1 2017 and then transition into Product enhancement mode with continuing development at a slower pace combined with 2nd and 3rd line Production Support. Delivery will include both a known backlog and evolving requirements. Problem to Be Solved The CJSCP IdAM system acts as user authentication and service access control to the various CJSCP services and may be extended to support other MoJ services. It includes organisation and user management and supports various authentication levels (e.g. 1FA and 2FA) appropriate to the sensitivity of the systems it protects. It will be necessary to continue enhancements to support developments in the CJSCP, as well as the wider HMCTS Reform Programme, including for work in other jurisdictions and for citizen facing access. Who Are the Users Example needs are: As an HMCTS user administrator I need to manage the users in my organisation so that only the correct people can access the Platform and its services. As a CPS user I need to reset my password in order to keep working. As a CJSCP administrator I need to add a defence organisation to the system and assign an administrator in order that users in that organisation can access CJSCP. There may be future extensions of the service to other user groups, including citizens. Early Market Engagement N/A Work Already Done The primary development and deployment of IdAM is complete. IdAM currently supports user authentication (with and without 2FA). It supports self-service where possible and it supports organisations with a hierarchy allowing each organisation to manage and support its own users. Existing Team The supplier will be working with CJSCP Operational Services and with CJSCP Delivery teams. These are comprised of a mixture of civil servants and multiple suppliers. Current Phase Live Work Location Central London location; initially Rose Court, 2 Southwark Bridge Road London SE1 9HS (the 'Base location', although some UK Travel may be expected) Working Arrangments The suppliers team will be required to work onsite at the base location working a five (5) day week. The Service is being delivered against the GDS Service Manual (e.g. agile delivery aligned to scrum methodology). For any work performed at a location different to that of the Base location and London (outside of the M25), all reasonable travel and expenses costs shall be met in accordance with the rates set out in the MoJ travel and subsistence policy. All expenses will require prior approval before being reimbursed. Security Clearance Disclosure Scotland. See www.disclosurescotland.co.uk/basicdisclosureonline/index.htm Additional T&Cs Any expenses shall be submitted in line with the Ministry of Justice standard Travel and Subsistence policy and agreed in advance of expenditure. Skills & Experience Have experience of working in multi-discipline environments focused on meeting user needs using agile methodologies and delivering digital improvement outcomes=6% Have experience of successfully delivering high transaction digital services to national organisations working in complex and highly regulated environments=6% Experience of agile testing strategies and automation=3% Experience of working in a security testing and delivery cycle=6% Have experience of working with multiple cloud vendor technologies and tools (e.g Azure and UKCloud)=3% Experience of deliverying usable IdAM solutions and integrating them in live services, by maximising use of the products and minimising custom developement=3% ForgeRock partner with evidence of design and delivery of complex IDAM solutions based on OTS products such as Glue and Janrain=2% Nice to Haves ForgeRock delivery experience=1% Have experience of working on three or more digital by default government services with high transaction volumes (100k p/a) and meeting digital by default service standard criteria=1% Be able to hit the ground running and deploy an effective multi-discipline team able to fulfil the required outcomes no later than 1st April 2017=2% Development with – front-end coding (HTML5, CSS 3, Angular 2, Javascript) and back-end coding (SQL, Java 8, DropWizard, JMS) =2% Have expertise operating DevOps and continuous delivery principles, in live national scale operations. Reference practices that enable safe, sustainable releases into live production, mitigating risk to existing operations=2% Experience in delivering as part of a live operational service=1% Experience of delivery using configuration management, orchestration and monitoring tooling (Ansible, Zabbix, ELK stack)=1% Experience of adopting agile approaches in delivering a number of IdAM solutions in large complex environments – demonstrating best practices and approach=1% No. of Suppliers to Evaluate 5 Proposal Criteria Overall Technical Solution and Approach - High Level Delivery Plan, Approach and Method, Timescales, Risks and Dependencies and Quality=6% Proposed team structure (including CVs of key members) - Reference contract/ case studies examples including linked CV’s=8% Value for Money - how the proposal will optimise costs and generate savings=6% Cultural Fit Criteria Proposed approach for working with co-located, multi-vendor HMCTS/CPS team - demonstration of transparency and collaboration, inclding ability to engage and work with users at all levels=5% Have a no-blame culture and encourage people to learn from their mistakes=5% Payment Approach Time and materials Assessment Method Written proposal Case study Reference Presentation Evaluation Weighting Technical competence 60% Cultural fit 10% Price 30% Questions from Suppliers Budget range n/a