Atlassian Review - PS/19/10

Tender description

Who Speclialist Work With Working with the Information Assurance Group (IAG) the consultant will need to engage stakeholders within the business in order to interrogate existing practices and systems. What Specialists Work On DVLA would like to engage a consultant Subject Matter Expert in order to understand whether the DVLA implementation and use of the Atlassian suite (particularly Confluence and JIRA) and any plug ins is in line with best practice and that the controls employed ensure compliance with any applicable internal policies, the Government Security Classification Policy, the Data Protection Act 2018 and general best practice. Where the Work Takes Place DVLA, Longview Road, Moriston Swansea SA67JL Early Market Engagement The work is anticipated to involve: • Review the access controls to ensure sensitive data in particular but information / data generally is appropriately protected and available on a need to know basis; • To review the hosting and determine whether on-site or cloud deployment has any specific implications, benefits or risks and whether the current arrangements provide the best balance; • Review the way it is used and any key process work flowing to determine whether use is consistent across the organisation and whether it meets best practice and policies; • Review the amount and type of data being processed and stored in our Atlassian products along with any automated or manual processes to delete such information; • Consider whether DVLA has appropriate licencing agreements in place and is compliant with the licensing and general T&Cs for the use of the product; • To assure whether any necessary or appropriate support arrangements are in place; • Establish accountability and ownership for the tool is in place and is understood; and • Produce a written report to detail the above information outlining recommendations and risks determined by the investigations. Working Arrangements 5 Days a week but the Agency will work with the consultant flexibly in order to deliver the requirement. Subsequent report writing can be done on-site or remotely but the consultant will need to be available on-site for any review or presentation of their report. Work Location DVLA, Longview Road, Moriston Swansea SA67JL Security Clearance Baseline Personnel Security Standard (BPSS) Additional T&Cs We currently see this role as sitting outside of IR35, as the candidates would not hold a fixed office position and will not have direct day to day direction or supervision. Skills & Experience Experience of implementing Atlassian products (particularly Confluence and JIRA) and plug ins along with best practices. Knowledge of best practice of implementing Atlassian products and associated plug ins Evidential experience of delivering reports / presentations on the implementation of Atlassian products in large organisations Knowledge of and ability to interrogate any respective licencing and contractual terms and conditions Nice to Haves Understanding of GDPR and Data Protection Law Understanding of the Government Classification Scheme to understand data value and government guidance on handling data No. of Specialists to Evaluate 10 Cultural Fit Criteria Engaging with in-house staff and creating an environment of knowledge-sharing Evidence of working with multiple stakeholders at all levels of the organisation, communicating effectively, establishing consensus and facilitating decision making, including senior executive levels Excellent communication skills, with emphasis on presenting written findings in a clear manner Being able to recognise and adapt to organisational behaviours and cultures when delivering requirement Assessment Method Evaluation Weighting Technical competence 60% Cultural fit 10% Price 30% Questions from Suppliers Budget range £1000 per day inclusive of t&s