Cyber Vulnerability Investigations (CVI) Above Secret Study

Tender description

Who Speclialist Work With The team is a mixture of military, civilian and external contractors. The task will also involve engagement with industry partners delivering CVI's What Specialists Work On -Understand working practices to establish the security requirements for the future working of the CVI Ops Cell. -Assess current requirements for storage, management and exploitation CVI outputs at S and AS security tiers and associated impacts/risks, including that of aggregation and accessibility -Review processes, focusing on current security requirements, and recommend how these processes may need to be adapted -Engage with industry to understand the feasibility and impact for them to conduct all CVI business at different security tiers. -Deliver an options analysis for how CVI Ops Cell activity can be conducted going forward,taking into account recommendations and requirements developed Where the Work Takes Place Work will predominantly take place from MOD Corsham. The winning bidder will also need to engage with stakeholders at other MOD sites such as MOD Main Building and Cheltenham. Industry engagement will be required with current CVI suppliers at various locations. Remote working may be possible on occasions providing the individual has access to an appropriately secure List X environment. This would need to be agreed with MOD before this could take place. Early Market Engagement None Working Arrangements On average, an individual should expect to be on site at MOD Corsham for three days a week in order to engage with the Ops Cell. The other two days will be spent meeting with stakeholders at other sites e.g. MOD Main Building, Cheltenham and CVI supplier sites. No expenses will be paid. Any envisaged expenses should be accounted for in an individuals day rate. Work Location Work will predominantly take place from MOD Corsham. The winning bidder will also need to engage with stakeholders at other MOD sites such as MOD Main Building and Cheltenham. Industry engagement will be required with current CVI suppliers at various locations. Remote working may be possible on occasions providing the individual has access to an appropriately secure List X environment. This would need to be agreed with MOD before this could take place. Security Clearance Due to the nature of the work and the environment in which it is situated, the individual will be required to hold DV clearance before they can start work. Additional T&Cs This role has been judged to be outside of IR35. The weightings given for the technical competences / cultural fit will be used at both the shortlisting and evaluation phases Skills & Experience Have experience analysing business processes and information flows (30%) Have experience in assessing and improving business process and systems within large, complex organisations (20%) Experience of planning and costing business change (20%) Nice to Haves Understand the MOD's approach to Defensive Cyber Operations and the Cyber Vulnerability Investigation capability (10%) Understanding of the MOD Defence Lines of Development (DLOD) approach (10%) Previous experience of working on cyber defence projects (5%) Have ability to evaluate information and present in such a way that is easily understood by the target audience, including through written and oral communication (5%) No. of Specialists to Evaluate 3 Cultural Fit Criteria Quickly form good working relations in order to elicit in-depth business analysis (30%) Ability to ascertain information to support business analysis through effective communication techniques (30%) Values and behaviors in line with MOD core values (40%) Assessment Method Evaluation Weighting Technical competence 60% Cultural fit 20% Price 20% Questions from Suppliers Budget range to get a better understanding of the market and to ensure the best value for money is obtained, we do not wish to disclose our maximum day rate