Security Project Team to support INetwork and IStandUK

Tender description

Summary of the work A Security Team, led by a CCP Lead SIRA is required for: - Cyber resilience & GDPR workshops - Work on web assets, updates & security - WARP discovery report around Resilience agenda - Cert literature review - Update to Data Handling Guidelines version 5 Expected Contract Length Three month term with a possible extension up to two years Latest start date Thursday 8 March 2018 Why the Work is Being Done The work supports delivery for a number of projects within the National Cyber Security Programme-Local that iStandUK and iNetwork (Tameside MBC) are delivering for MHCLG under a memorandum of understanding. The wider programme supports the ongoing transformation of the English local government sectors' understanding of cyber threats and weaknesses and support the delivery of an accurate cyber risk picture through a programme of strategic mentoring seminars, supplementary briefing materials, horizon scanning and forward looking research activities. Problem to Be Solved Support the development of specific briefing materials, training products, horizon scanning and forward looking research activities that will enable a wider understanding of how English Local Government and their partners can be assisted to mitigate cyber threats. Who Are the Users As a Local Authority we need to have access to support materials to help us understand to mitigate cyber threats. Existing Team The existing team is made up of: MHCLG National Cyber Security Programme-Local Team and iNetwork. Current Phase Not applicable Skills & Experience • Have a team led by a CCP qualified Lead SIRA • Have demonstrated expertise of Data Handling best practice • Provide evidence of having understanding / experience of regional WARPs • Knowledge and experience of developing Cyber Exercises • Knowledge and experience of working with the Resilience community • Knowledge and experience of of Emergency Planning and Business Continuity Work Location The work can be done remotely with necessary travel to London to work with MHCLG. Additional travel required to regions around England (e.g. London, Manchester, Bristol and Birmingham). Working Arrangments The bulk of the work does not require the supplier to work onsite with MHCLG in London or iNetwork in Tameside with the exception of face-to-face meetings in London as and when required (anticipate no more than once a week). Regular phone calls will be necessary over the course of delivery. The supplier will be required to attend a minimum of 4 regional events in England, and to travel as appropriate to meetings in England to support research activities. Travel & subsistence Expenses are inclusive in day rate. Security Clearance Lead SIRA to hold SC Clearance No. of Suppliers to Evaluate 3 Proposal Criteria • Approach and methodology • Estimated timeframes for the work Cultural Fit Criteria • Be transparent and collaborative when making decisions • Work as a team with our organisation and other suppliers • Can work with clients with low technical expertise Payment Approach Capped time and materials Evaluation Weighting Technical competence 75% Cultural fit 5% Price 20% Questions from Suppliers 1. Please can you indicate an estimated budget for this requirement? The budget is up to £80k exclusive of VAT 2. Is there an incumbent providing this service? No contract has been awarded to anyone to deliver this service. 3. Can the authority confirm the IR35 status of this requirement? Tameside Council HR will undertake IR35 assessment of the new supplier. The outcome of IR35 assessments depends on the organisation that is being assessed. However, we anticipate that the supplier will fall outside of IR35 because we are seeking a team to support the work. 4. There is mention of providing a security team. How many people do you require? We have no set number in mind, but we will need the supplier to have capacity to draw on additional support if required. A minimum of two additional staff in addition to the lead SIRA is required to support regional events. 5. It mentions Security Clearance for the lead person. Will you sponsor the clearance or must the candidate already have the security clearance in place? Due to the tight timescales for delivery, it is preferred that the candidate have the security clearance in place.