Multi factor authentication implementation

Tender description

Why the Work is Being Done HBC require multi factor authentication (MFA/2FA) across on premise and cloud systems using a single MFA solution. We would like an initial assessment of the current position by the end of April 2020, with a view to implementation (needing support) during May/June 2020 Problem to Be Solved HBC have a number of on premise, remote access and (in the very near future) cloud based systems such as 365. In order to provide an additional layer of security and comply with PCI DSS/PSN requirements we must implement a further authentication method (MFA) but wish to avoid the possibility of needing different MFA solutions to address that need. Who Are the Users HBC have around 2,000 users working across a geographically dispersed estate, home workers and customer premises. We need to allow remote access to on premise systems and applications and are in the process of migrating to 365. MFA is seen as a prerequisite to ensuring authorised access to on and off premise systems. Early Market Engagement Initial conversations with our Pen test organisations and PCI inspections have suggested Cisco Duo would answer the need for MFA without needing different solutions for on and off premise. No other engagement has taken place Work Already Done None Existing Team Internal ICT team, selected corporate users (not yet appointed) and Councillors Current Phase Discovery Work Location Harrogate, North Yorkshire Working Arrangments Discovery phase: On-site. Deployment: On-site Support: On or off site by agreement Security Clearance Additional T&Cs Skills & Experience Understand Multi-factor authentication systems, their respective benefits and weaknesses Be familiar with NCSC/PCI DSS requirements and how their solution meets them Have implemented MFA/2FA at other organisations of similar size and complexity Be available to work to the identified timescales identified earlier in this submission Nice to Haves Have familiarity with local government systems and processes Understand constraints over time and budgets No. of Suppliers to Evaluate 5 Proposal Criteria Estimated timeframes for the work, (start to delivery, including any downtime during which the supplier is unable to progress the project) Technical solution, ease of use, and applicability to our needs How they’ve identified risks and dependencies and offered approaches to manage them How the approach or solution meets our organisation’s goal Clarity over roles and responsibilities and implications if deadlines are slipping Cultural Fit Criteria Evidence of integration with a team that are under-resourced, using their resources to ensure completion Open, approachable and supportive. Enabling the ICT team to support the solution after go live Payment Approach Fixed price Assessment Method Reference Presentation Evaluation Weighting Technical competence 75% Cultural fit 5% Price 20% Questions from Suppliers No questions have been answered yet Budget range