Provision of Defence Cyber Protection (DCPP) Tool

Tender description

Text to be corrected in the original notice: Place of text to be modified: Section II: File reference Section II.3 Duration in months: Instead of: CCT741 36 months Read: CCT730 60 months Dates to be corrected in the original notice: Place of dates to be added: Closing Date: Instead of: 16 December 2019 Time: 10:00 Read: 16 December 2019 Time: 10:00 Other additional information: The contracting authority considers that this contract may be suitable for economic operators that are small or medium enterprises (SMEs). However, any selection of tenderers will be based solely on the criteria set out for the procurement.The Authority reserves the right to amend any condition related to security of information to reflect any changes in national law or government policy. If any contract documents are accompanied by instructions on safeguarding classified information (e.g. a Security Aspects Letter), the Authority reserves the right to amend the terms of these instructions to reflect any changes in national law or government policy, whether in respect of the applicable protective marking scheme, specific protective markings given, the aspects to which any protective marking applies, or otherwise. The link below to the Gov.uk website provides information on the Government Security Classification. https://www.gov.uk/government/publications/government-security-classifications Advertising Regime OJEU:- This contract opportunity is published in the Official Journal of the European Union (OJEU),the MoD Defence Contracts Bulletin and www.contracts.mod.uk Electronic Trading Potential suppliers must note the mandatory requirement for electronic trading using the Contracting, Purchasing and Finance (CP&F) electronic procurement tool. All payments for Contractor Deliverables under the Contract shall only be made via CP&F. You can find details on CP&F at https://www.gov.uk/government/publications/mod-contracting-purchasing-and-finance-e-procurement-system. The Cyber Risk Profile for this requirement identified by the Cyber Risk Assessment is Moderate, Reference will be advised at ITT release. Indicative timescales for the procurement: - ITT release Jan/Feb 2020 - Contract Award April 2020 The United Kingdom Ministry of Defence will be placing a contract to replace the current Supplier Cyber Protection Tool, which enables the MOD's Defence Cyber Protection Partnership (DCPP) Cyber Security Model. The tool provides both Risk Assessment (RA) and Supplier Assurance Questionnaire (SAQ) functionality, ensuring the process can be flowed down the supply chain. The tool is accessed via the www.gov.uk website and must adhere to UK Government Digital Service (GDS) requirements for design. It uses GDS' Verify online authentication tool to authenticate some of the users. Users log in using multi-factor authentication and are taken to a dashboard showing their existing submissions and can elect to complete an RA or an SAQ. On completion of an RA, the