Cyber Security Operating Capability (CSOC) Support

Tender description

Why the Work is Being Done SDSR 2015 concluded that Defence held a capability gap over its ability to conduct Defensive Cyber Operations (DCO) at the scope and scale required to mitigate the evolving threat landscape. The CSOC was included as one of several DCO options funded as the primary risk mitigation activity. The CSOC seeks to deliver a federated and modular operating framework for the defensive cyber force elements from across Defence. Problem to Be Solved Support the MOD Cyber Programme in enabling transformation of the conduct of defensive cyber operations at the scope and scale required to achieve Defence outputs. The transformation will cover people, process, information, technology and governance of the CSOC, working with stakeholders from across Defence and synchronised with wider Cyber Programme activity. A surge in capability delivery has driven the requirement for client-side support to the existing crown servant team to achieve programme deadlines by 31 Mar 2019. This task will deliver the planning stage of this transformational work. Who Are the Users Ministry of Defence Early Market Engagement Work Already Done Strategy: Agreed Concept of Operations for the CSOC and initial management structures to enable Defence outputs. Architecture: A prioritised set of user & stakeholder requirements, a high-level architecture and the implications for the CSOC federated structure to guide deployment. Information Architecture: Understand shared information environments and optimal means of architecting to achieve current and future user needs, allowing MOD to plan delivery and identify early benefits. Data Science: Develop understanding of user information needs and criticality of requirements including designing options and methods for exploiting information. Existing Team The existing Programme team consists of Architecture Leads, Project Managers and Technical Support Staff. The user community is distributed across Defence with the core delivery leads based in Corsham and London. Current Phase Alpha Work Location Expect expertise to work from MOD Corsham and MOD Main Building to support the existing team. T&S is included in the budget. Working Arrangments Expect expertise to work from MOD Corsham and MOD Main Building to support the existing team. T&S is included in the budget. Security Clearance SC Clearance must be in place prior to the contract starting due to the projects the team are required to work with. Additional T&Cs Skills & Experience • Extensive understanding of defensive cyber capabilities and the interactions between them to enable a proactive cyber posture. 20% • Proven track record of working with stakeholders to identify requirements, generating programme roadmaps and implementation plans for large-scale complex projects. 20% • Extensive understanding of cyber threats particularly in the context of a large government department with users spread both globally and at differing security tiers. 15% • Previous experience of establishing a CISO within large organisations and implementing cyber risk management structures to support Board-level decisions. 15% • Proven track record of assessing governance procedures for large projects and recommending/implementing improvements. 10% • Previous experience of working on complex cyber defence projects. 5% Nice to Haves • Experience of working with Defence organisations. 5% • Experience of working in cyber security environments. 5% • Have ability to think creatively and can articulate innovative ideas to solving complex business and ICT problems. 5% No. of Suppliers to Evaluate 3 Proposal Criteria • Documented evidence of essential skills • Documented proposed approach and methodology • Clear and concise evidence plus CV’s. • Detailed resources plan • Estimated timeframes for the work • Confirmation of existing clearances Cultural Fit Criteria • Must be able to work in a mixed team of Military, MOD Civil Service and industry partners. 2% • Able to understand role in the wide context of 'Defence' and national security. 2% • Have excellent interpersonal and influencing skills and a positive approach. 2% • Ability to transfer knowledge. 2% • Values and behaviours in line with MOD core values. 2% Payment Approach Fixed price Assessment Method Written proposal Evaluation Weighting Technical competence 70% Cultural fit 10% Price 20% Questions from Suppliers Budget range £820,000 including t&s