Implementation of Acuity STREAM Risk Management Tool

Tender description

Why the Work is Being Done The UK MOD, sponsored by Joint Forces Command (JFC) Cyber Joint User, has a requirement to visualise, assess and manage the cyber-related risks across the MOD enterprise in a software tool. The MOD requires an understanding of cyber risk to make informed choices on necessary courses of action set against risk threshold. In addition, the MOD requires a method of assessing compliance with standards and regulations (eg ISO 27001, JSP 892) and an ability to support compliance audit. Work must be completed by 31 March 2018. Problem to Be Solved Delivery of a Acuity STREAM Risk Management tool, with a 2 year license, which will allow 10 concurrent users. Integration with an existing MOD-owned AHE, managed access to users at multiple sites. Initial tool configuration, VDI integration and user training, integration with a modular open system architecture and exploration of data feeds that can be exploited to inform the risk. Provision of PMO function including access to Acuity professional services. Who Are the Users Users require access to a risk management tool to allow visualisation, assessment and managment of the cyber-related risks across the MOD enterprise. Early Market Engagement None Work Already Done None Existing Team The supplier will be working with a mixture of military and civil servents Current Phase Not applicable Work Location System integration and technical effort focused at MOD Corsham (ARK Datacentres, Spring Park, Westwells Road, Corsham, Wiltshire, SN13 9GB). User support, training and requirements elicitation at MOD Main Building (Horse Guards Avenue, London, SW1A 2HB) Working Arrangments It is expected that the supplier spend the majority of time in Corsham, but will spend 1 to 2 days per week (flexibly) with the users in London to ensure requirements are understood, to present project progress, collaboratively configure the tool and provide user training. No expenses will be paid, these should be included in a supplier's bid. Security Clearance SC clearance, as a minimum, for all personnel involved must be in place and valid for the duration of the contract. The Authority will not sponsor new clearances or clearance renewals. Additional T&Cs Skills & Experience A proven track record in implementing Acuity STREAM (25%) A proven track record in designing and implementing Hortonworks (20%) Experience of delivering in an Agile (Scrum) framework (10%) Have know-how of identifying and raising project dependencies, whilst working in a wider team with multiple projects in-flight (10%) Familiarity with ARK Datacentres / Crown Hosting facilities (5%) Weightings given above will be used at both the shortlisting and evaluation phase Nice to Haves Previous experience of working on cyber defence projects (10%) Have ability to evaluate information and present in such a way that is easily understood by the target audience, including through written and oral communication (5%) Have ability to own issues and drive them to resolution. Provide direction to inform sound decisions based on business priority and technical feasibility (5%) Have ability to think creatively and be able to articulate innovative ideas to solving complex business and IT problems (5%) Experience working with Ministry of Defence IT systems, networks, and end user devices (MODNet, DII, RLI, SLI) (5%) Weightings given above will be used at both the shortlisting and evaluation phase No. of Suppliers to Evaluate 3 Proposal Criteria Approach and methodology (50%) Estimated team size and roles (5%) High-level plan and estimated work schedule (30%) Approach to demonstrating progress (15%) Cultural Fit Criteria Have excellent interpersonal and influencing skills and a positive approach (25%) Have the people skills to work with senior stakeholders to secure access to people in their working environment (30%) Values and behaviours in line with MOD core values (45%) Weightings given above will be used at both the shortlisting and evaluation phase Payment Approach Fixed price Assessment Method Written proposal Work history Evaluation Weighting Technical competence 70% Cultural fit 10% Price 20% Questions from Suppliers Budget range approval for £300k