Atlassian Review - PS/19/10

Tender description

Summary of the work Investigating DVLA implementation and use of Atlassian products (e.g. Confluence and JIRA) and associated plugins to ascertain whether best practice is being adhered to in terms of the data processed, controls implemented and compliance with licensing and T&Cs, producing a written report on findings, risks identified and recommendations. Specialist role Business analyst Expected Contract Length 1 Month + 1 Month Latest start date Monday 25 February 2019 Maximum Day Rate £1000 per day inclusive of T&S Early Market Engagement The work is anticipated to involve: • Review the access controls to ensure sensitive data in particular but information / data generally is appropriately protected and available on a need to know basis; • To review the hosting and determine whether on-site or cloud deployment has any specific implications, benefits or risks and whether the current arrangements provide the best balance; • Review the way it is used and any key process work flowing to determine whether use is consistent across the organisation and whether it meets best practice and policies; • Review the amount and type of data being processed and stored in our Atlassian products along with any automated or manual processes to delete such information; • Consider whether DVLA has appropriate licencing agreements in place and is compliant with the licensing and general T&Cs for the use of the product; • To assure whether any necessary or appropriate support arrangements are in place; • Establish accountability and ownership for the tool is in place and is understood; and • Produce a written report to detail the above information outlining recommendations and risks determined by the investigations. Who Speclialist Work With Working with the Information Assurance Group (IAG) the consultant will need to engage stakeholders within the business in order to interrogate existing practices and systems. What Specialists Work On DVLA would like to engage a consultant Subject Matter Expert in order to understand whether the DVLA implementation and use of the Atlassian suite (particularly Confluence and JIRA) and any plug ins is in line with best practice and that the controls employed ensure compliance with any applicable internal policies, the Government Security Classification Policy, the Data Protection Act 2018 and general best practice. Skills & Experience • Experience of implementing Atlassian products (particularly Confluence and JIRA) and plug ins along with best practices. • Knowledge of best practice of implementing Atlassian products and associated plug ins • Evidential experience of delivering reports / presentations on the implementation of Atlassian products in large organisations • Knowledge of and ability to interrogate any respective licencing and contractual terms and conditions Nice to Haves • Understanding of GDPR and Data Protection Law • Understanding of the Government Classification Scheme to understand data value and government guidance on handling data Work Location DVLA, Longview Road, Moriston Swansea SA67JL Working Arrangments 5 Days a week but the Agency will work with the consultant flexibly in order to deliver the requirement. Subsequent report writing can be done on-site or remotely but the consultant will need to be available on-site for any review or presentation of their report. Security Clearance Baseline Personnel Security Standard (BPSS) Additional T&Cs We currently see this role as sitting outside of IR35, as the candidates would not hold a fixed office position and will not have direct day to day direction or supervision. No. of Specialists to Evaluate 10 Cultural Fit Criteria • Engaging with in-house staff and creating an environment of knowledge-sharing • Evidence of working with multiple stakeholders at all levels of the organisation, communicating effectively, establishing consensus and facilitating decision making, including senior executive levels • Excellent communication skills, with emphasis on presenting written findings in a clear manner • Being able to recognise and adapt to organisational behaviours and cultures when delivering requirement Evaluation Weighting Technical competence 60% Cultural fit 10% Price 30% Questions from Suppliers 1. Is this role outside IR35 or Inside IR35? We currently see this role as sitting outside of IR35, as the candidate would not hold a fixed office position and will not have direct day to day direction or supervision. 2. Is there a current incumbent? There is not currently an incumbent in place for this requirement. 3. Would you consider a consultant, working 2/3 days a week, over a 2 to 3 month contract, rather than a full time role on a months contract? As we are anticipating a delivery timescale of up to and not in excess of 20 working days, a consultant working 2/3 days a week over a period that was not stipulated within the original advert of the tender opportunity would not be considered. 4. Is there the possibility of working 3 days per week remotely? The specialist will be required on site during the investigation phase and will only be permitted to work remotely to complete subsequent report writing and with prior agreement from the business. The specialist will also be required onsite to present and discuss the report. 5. We will need to get some clarity on what you find acceptable in terms of working patterns – This reads like a single consultant requirement but I’d prefer that we ‘team’ this to divide up the various aspects of the brief and deliver in a shorter timeframe. Is this acceptable? This is a requirement for a specialist and not an outcome where a team may have been considered. 6. Could you also clarify what is meant by “1 Month + 1 Month”? For example does this mean there is an acceptance for up to 40 working days of effort (assuming 20 working days per month, single consultant)? We are anticipating a delivery timescale of up to and not in excess of 20 working days. 7. You have said that you are able to pay up to £1000 per day, we have a limit on the framework that allows us to submit candidates at £750.00 per day because of the category you have put the role in. We have a suitable specialist with multiple years experience as a Atlassian SME and has previously worked with the DVLA in a similar contract position. Will you consider the candidate at £1000.00 per day once invited in for the next stages? We can make this very clear in the text of the responses to the skills/experience. Only official day rates submitted via the framework will be accepted for this requirement. Suppliers who wish to change the maximum day for future requirements can do so by using the "update your maximum day rate for a role on your DOS” service.