RM1043/CCT824 - Information Assurance Specialist Hosting Support

Tender description

Summary of the work ISS delivers the core ICT platform for Defence. Cyber security professionals are required to work with the ASDT EMPORIUM programme in line with information assurance and Cyber security policy to introduce a number of assured cloud hosting services and associated projects to transform application and system hosting within the MoD. Specialist role Cyber security consultant Expected Contract Length 12 Months with an extension option of 3 months pending internal financial approval. Latest start date Monday 2 December 2019 Maximum Day Rate £900.00 (inc VAT) or £750.00 (ex VAT) maximum budget per day. Who Speclialist Work With The specialist will be required to work with the Crown Servant Security Assurance Coordinator in addition to the ASDT (Application Service Development Team) agile teams and Project Stakeholders. One specialist will be working with hosting teams. One will focus on applications and on-boarding onto platforms and one will be concentrating on Data Centre rationalisation and migration of systems. What Specialists Work On Review of HLD/LLD Completion and maintenance of DART Define CTAS scope Production of Security Requirements Statements and Risk Balance Cases Production and Review of RMADS and OSMP and other associated documentation to achieve accreditation Review ITHC Testing and remediation plans Audit supplier for correct level of due diligence Production of Pre-PIA and PIA, MOD Code of Connection and MOD Statement of Connection Conformity Chair of SWG and Security Surgeries and production/distribution of outputs Audit of live operations and Inspection of Protective Monitoring System Regular meetings with Accreditor and NCSC Witness system performance post changes in the design Skills & Experience • Holds CCP Practictioner Status - 25 Points • Evidence of Information Risk Management in the HMG and/or Defence context - 20 Points • Evidence of security knowledge associated with Cloud Security - 20 Points Nice to Haves • Holds CCP - Certified Cyber Professional Senior Practitioner status - 10 points • Holds CISSP - Certified Information Systems Security Professional status - 10 Points • Holds CISM - Certified Information Security Manager status - 10 Points • Knowledge and understanding of agile ways of working - 5 Points Work Location ISS (Information Systems and Services), Mustang Building, Rudloe Site, MoD Corsham, Westwells Road, Corsham, Wiltshire, SN13 9NR. Working Arrangments All tasking will take place from MoD Corsham and the specialist is required 5 days a week. The working day is 8 hours including 30 minutes for lunch. Travel may be required within the UK with Travel and Subsistence costs away from MoD Corsham recoverable in correspondence with MoD Departmental/Policy rates. Security Clearance Developed Vetting Clearance must be in place prior to and for the duration of the contract starting due to the projects the individual is required to work with. No. of Specialists to Evaluate 3 Cultural Fit Criteria • Work as a team with our organisation and other suppliers • Be transparent and collaborative when making decisions • Have a no-blame culture and encourage people to learn from their mistakes • Take responsibility for their work • Share knowledge and experience with other team members Assessment Method Interview Evaluation Weighting Technical competence 70% Cultural fit 5% Price 25% Questions from Suppliers 1. Can the Authority please confirm the IR35 status of this role? The intermediaries legislation does not apply to this engagement. The role is outside of IR35. 2. Is there a current incumbent? I can confirm that there is a current incumbent. 3. Can the Authority confirm if they are working with an incumbent supplier ? I can confirm that the Authority are working with an incumbent supplier. 4. Is there an existing incumbent? I can confirm that there is a current incumbent. 5. Please can you confirm if there is an incumbent? I can confirm that there is a current incumbent. 6. Can you confirm there is a current incumbent for this role? I can confirm that there is a current incumbent. 7. Please could you confirm the IR35 status for this opportunity? The intermediaries legislation does not apply to this engagement. The role is outside of IR35. 8. Please could you confirm if there is an incumbent in place? I can confirm that there is a current incumbent. 9. Is there an incumbent in the role? I can confirm that there is a current incumbent. 10. Please confirm if this assignment falls outside or inside IR35? The intermediaries legislation does not apply to this engagement. The role is outside of IR35. 11. Can the Authority please confirm the requirement to be onsite 5 days a week as an ability to allow for remote working will reduce the burden on Corsham infrastructure and increase the desirability to SME`s? As the project is working to the Agile methodology and the Security element of the project is across all the agile teams, the opportunities to work remotely are limited due to the requirement to attend stand-up and other meetings on-site and to be present on the floor plate when the need arises. ASDT is open to contractors working remotely on occasion, with some currently working from home regularly one day a week , however contractors must be aware that they may be required to be on-site 5 days a week if there is a programme requirement and the workload dictates. 12. Is there an incumbent for all 3 of these roles? The contracts of the current contractors, who are filling the roles; are finishing. There are two incumbents in the roles at this time and the third role is currently vacant.