Joint Cyber Unit Capability Development and Integration Support

Tender description

Why the Work is Being Done JCU protects the MoD infrastructure through a set of Defensive Cyber Operations (DCO) tools. The network structure and the data sets that will be provided to JCU are changing. Current DCO tools will not be able to hold and analyse this data. Subsequently, the CySAFA project is transitioning data feeds/service to a modular, loosely coupled architecture in support of legacy tools. JCU’s defensive capability is also evolving with the delivery of CSOC and the provision of Microsoft security tooling. As a result, JCU is undergoing a major transformation, both in terms of business processes and defensive cyber tooling. Problem to Be Solved Additional support is urgently needed to enable the transformation occurring within JCU in response to the change in defensive cyber tooling and business processes. This will allow JCU to conduct DCO at the scope and scale required to achieve Defence outputs. There is a requirement for client-side support to the existing crown servant/military team to enable JCU transformation activities, specifically focused around CSOC, CySAFA and E5 Security Modules. This task requires skills within both enterprise architecture and business analysis. Who Are the Users Ministry of Defence – Joint Forces Command. (Corsham). JCU (Cor) require support to enable the JCU transformation activities detailed above. Early Market Engagement N/A Work Already Done Use Case Refinement Use Case development and validation process developed. Generation and refinement of M365 Use Cases and the relation to the wider enterprise has been initiated. Business Process Development Knowledge Management and CySAFA IDAM processes captured. New business processes developed to support use and management of the newly designed and implemented CSOC knowledge base. A working Risks, Assumptions, Issues, Dependencies and Opportunities log capturing opportunities for business process and capability enhancement relating to E5 tooling has been established. Knowledge Transfer Use case creation, defence policy and technical subject knowledge transfer in progress. Existing Team The existing team consists of crown servants and military personnel who have a wide range of functions and skillsets. Current Phase Discovery Work Location MOD Corsham, Westwells Road, Corsham, Wiltshire SN13 9NR Working Arrangments The successful supplier team will work from MOD Corsham. It is not possible to deliver the necessary outputs if expertise are not available on site. The successful supplier team may also need to travel to other MOD locations to complete elements of the work Security Clearance DV Clearance must be in place prior to the contract starting due to the projects the team are required to work with. The Authority WILL NOT sponsor DV Clearance, it must be in place and remain valid for the duration of the contract. Additional T&Cs • Bid Responses to be submitted on the templates provided and in Microsoft Office Excel/Word 2016 format only • Due to Christmas leave period, we aim to evaluate Stage 1 (shortlisting) w/c 07th Jan and aim to contact suppliers with results w/c 14th Jan, however all suppliers will be informed if these dates change • T&S will be paid based on receipted actuals and in compliance with MoD Policy, no other expenses are permitted • Suppliers must use the Authorities Purchase to Payment Tool called CP&F or be prepared to sign up to the tool Skills & Experience Experience of helping organisations achieve an enterprise level view in order to support the delivery of complex projects Experience of working with stakeholders to assess and implement business processes, governance arrangements and ways of working in relation to defensive cyber operations Experience within ISS and of ongoing defence projects relating to the operation and enhancement of the MOD core networks Extensive understanding of cyber threats particularly in the context of a large government department with users spread both globally and at differing security tiers Understanding of wider defence initiatives and dependencies on the delivery of cyber defence Understanding of DCO Operations in the context of defending the MoD enterprise Nice to Haves Demonstrable and relevant experience of undertaking knowledge transfer Have ability to think creatively and can articulate innovative ideas to solving complex business and ICT problems Ability to present and articulate technical risks in a business context Understanding and experience of working with HMG/ MOD policies including JSP 440 and 604 No. of Suppliers to Evaluate 3 Proposal Criteria Documented evidence of essential skills (10%) Documented proposed approach and methodology (10%) Clear evidence on Proposal template (limited to the 6 pages and 2000 words), and CV’s which are not included within word count and can be sent as separate attachments (10%) Detailed resource plan (10%) Estimated timeframes for the work (5%) Confirmation of existing clearances (5%) Cultural Fit Criteria Must be able to work in a mixed team of Military, MoD Civil Service and industry partners (5%) Have excellent interpersonal and influencing skills and a positive approach (5%) Ability to transfer knowledge and upskill staff (5%) Values and behaviours in line with MoD core values (5%) Payment Approach Fixed price Assessment Method Written proposal Case study Evaluation Weighting Technical competence 50% Cultural fit 20% Price 30% Questions from Suppliers Budget range up to £200000 (inc vat and t&s)