WP1446 Certification Lead for Verify

Tender description

Summary of the work GOV.UK Verify is analysing, reviewing options and making recommendations on the design of its future certification model, which will be applicable to private sector reuse. We need an Information Assurance professional, with knowledge of identity related digital certification models, to undertake this options analysis, alongside the identity team. Specialist role Cyber security consultant Expected Contract Length Estimated six months Latest start date Monday 16 October 2017 Maximum Day Rate £750 Who Speclialist Work With The specialist will be working with the identity standards and fraud prevention team in the GDS identity assurance programme. This includes two identity advisors and two identity fraud analysts. They will be working independently on the project, but will be involved in regular face to face meetings and team collaboration in order to share and incorporate essential knowledge into the model. What Specialists Work On Work package to review existing certification process for the national digital idenitty scheme. This will include interviews and feedback from Government Digital Service, Certified Companies, relevant acceditation bodies. Options analysis and recommendations on redesign and expansion of certification model in line with existing and future plans for the national identity scheme. This will include assessment of needs, role of government and other relevant organisations in the UK and internationally. Skills & Experience • Minimum five years experience to show: An understanding of certification models for assessing identity related digital and technology services • Minimum five years experience to show: A background in information assurance, security, audit and certification • Minimum five years experience to show: An understanding of the identity assurance and identity standards for UK government • Minimum five years experience to show: Experience of passing on knowledge in a clear and structured manner • Minimum five years experience to show: Ability to work independently in a fast paced environment Nice to Haves • Minimum five years experience to show: Experience implementing a certification model(s) for an existing digital service • Minimum five years experience to show: Previous experience working in or working closely with a government department • Minimum five years experience to show: Previously audited or worked on an identity related service during audit • Minimum five years experience to show: Experience of public/private sector relationships • Minimum five years experience to show: Demonstrable knowledge of security risks to digital identity services Work Location Government Digital Service, The White Chapel Building, 10 Whitechapel High Street, London, E1 8QS. Working Arrangments Work no more than two (2) days a week from 9am - 5.30pm, for 6 months. Expected to use conference capabilties, google hangouts, email, Slack and other channels to keep in contact with the team when working remotely. Will produce technical documentation and options papers, as well as attending team meetings, such as stand-ups, planning and retrospectives. The intermediaries legislation doesn't apply to this engagement: this is out of scope for IR35. Security Clearance SC clearance is essential; DV would be advantageous Additional T&Cs Cabinet Office (CO) Travel and Subsistence (T&S) Policy will apply. All expenses must be pre-agreed with between the parties and must comply with the CO T&S Policy. No. of Specialists to Evaluate 3 Cultural Fit Criteria • Collaborative worker, with a good approach to knowledge sharing • Committed to team working and open to team feedback • Enjoys working in an open and transparent environment • Willing to work according to Agile practises • Adaptable and keen to expand knowledge base Evaluation Weighting Technical competence 65% Cultural fit 15% Price 20% Questions from Suppliers 1. Is the role 2 days per week in the office with work from home or is 2 days per week working remotely? Work no more than two days a week. It is preferred the Certification Lead will work in our Whitechapel office for these 2 days but if necessary, working remotely will be considered. 2. Any chances of change in start date as the latest date mentioned is Monday 16 October 2017? The work needs to be completed soon and the latest start date allows the process to have delays, however the start date of the contract could be sooner than this if there are no delays. We cannot start a contract after the latest start date; the procurement would have to be cancelled and a new procurement would have to take place if the contract does not start by the latest start date 3. What are the other expenses which will be paid? All expenses must be pre-approved in advance by Cabinet Office.Expenses are subject to the Cabinet Office Travel and Subsistence Policy which can be provided on request and will form part of the call-off contract. 4. Will you sponsor SC clearance? No 5. Any specific format(pdf,doc) in which CVs to be sent later? We do not accept CVs. There is a specific template for Work Histories and we will email the shortlisted suppliers an excel spreadsheet to complete. All DOS template documents are here: https://www.gov.uk/guidance/digital-outcomes-and-specialists-templates-and-legal-documents. 6. What technologies will the consultant work on or should have experience with, please give detail. No specific technologies, we use a google operating system. 7. Is there any travel involved in this role and will the travel expenses be paid? There may be travel to other organisations across London, or possibly within the UK. No expenses will be paid within the M25. Expenses are subject to the Cabinet Office Travel and Subsistence Policy which can be provided on request and will form part of the call-off contract. 8. Is the rate inclusive or exclusive of VAT? The day rate excludes VAT 9. Can you please elaborate term: certification model(s)? Certification is the means by which a party can be assured that another party is compliant to a defined specification. We are looking to come up with the best model for certification for external participants as the programme expands into the private sector, this refers to suitable certification bodies, specifications and if we will have one or many, how the market will be assured etc. 10. Would you consider work permit holders (e.g. Tier 2 General Visa) and EU passport holders for this role Cabinet Office do not sponsor Tier 2 visas.Workers with EU passport are allowed to work for Cabinet Ofice.All people working on the contract must hold SC clearance.