Website development and managed hosting partner

Tender description

Why the Work is Being Done The ICO needs to procure a partner to help develop and maintain our website and digital services at ico.org.uk, and manage our hosted environment, on expiry of our current contract. Problem to Be Solved The ICO needs an experienced partner that can develop our Umbraco website and digital services in line with GDS standards, and develop and improve our hosted infrastructure (Azure), alongside supporting our existing site and setup, to meet the changing needs of our users. Who Are the Users As a data controller, I need to pay/renew my annual data protection fee, so that I meet my obligation to pay the data protection fee As an information rights practitioner, I need to be able to access practical guidance about data protection, electronic marketing and freedom of information so that I can meet my obligations under information rights legislation As an information rights practitioner, I need to be able to self-serve and/or contact the ICO to get the information and support I need, so that I can meet my information rights obligations As a citizen, I need to be able to complain/report a concern about an organisations information rights practices to the ICO, so that the ICO can take action to improve the practices of organisations As a citizen, I need to be able to self-serve and/or contact the ICO to get the information and support I need, so that I can exercise my information rights Early Market Engagement Work Already Done Existing Team You will be working most closely with an ICO Product Owner (Digital Architect) and Tester, who manage the development of the services; communications team members who are responsible for the content, and; from time to time, ICO Business Ambassadors involved with specific development projects. Current Phase Live Work Location The ICO's head office is in Wilmslow, Cheshire. However, it's expected that the work will be completed remotely. Working Arrangments The supplier's team would work closely with the ICO's staff. We run two-week agile sprints. The supplier team members would attend regular standups, refinement sessions, reviews and retrospectives, all remotely via video/audio and screen sharing. All work would be completed in the ICO's Azure environment. Azure DevOps is used to manage our backlog, user stories and deployments. Security Clearance Baseline Personnel Security Standard (BPSS) Additional T&Cs Skills & Experience Experience of developing, supporting and maintaining Umbraco-based digital services, including the latest versions of Umbraco CMS, and Umbraco Forms. Experience of extending Umbraco, especially Umbraco Forms. Experience of maintaining and developing new integrations with Umbraco and Umbraco Forms as required, eg open source projects and other third party services. Experience developing, supporting and maintaining pages, forms and databases in ASP.NET and SQL. Experience of meeting best practice coding standards, including compliance with OWASP, and WCAG 2.1 accessibility standards to at least AA. Experience of developing/maintaining digital services with good information rights practices, including compliance with the Data Protection Act, and the rules on cookies. Experience of building digital services that are fully responsive so they work on different devices. Experience of managing the application lifecycle and ability to maintain and develop automated deployment processes for virtual infrastructure and code. Experience of managing and maintaining public cloud hosted environment to maintain appropriate security of information at OFFICIAL and up to OFFICIAL-SENSITIVE, in accordance with recognised frameworks. Proven experience of agile project delivery, eg Scrum or DSDM, including processes to support structured, frequent changes. Experience of supporting public sector organisations in meeting the Digital by Default Service Standard. Experience of managing and maintaining DDoS attack mitigation tools and public cloud DR. Experience of managing DNS. Skills/ability to provide a helpdesk for logging faults and requests available 24/7, with normal support from 8am to 5pm weekdays, and ability to resolve major incidents 24/7, to set SLAs. Nice to Haves Adheres to good data protection, electronic communications and freedom of information practices Experience of supporting customers to become more self-sufficient, including skills and knowledge transfer to an expanding in-house development team. Experience of operating in a way to support customers to meet open standards and avoid vendor lock-in. Experience of integrating Umbraco/Umbraco Forms with back office systems, especially with Microsoft Dynamics CRM, in the cloud and/or on premise. Experience of using Azure integration services, eg Logic Apps, Service Bus and API Management Experience, provision of automated testing tools and ability to run automated testing. No. of Suppliers to Evaluate 8 Proposal Criteria Relevance and depth of examples to meet all must-have technical requirements Evidence, examples of relevant approach and methodology Evidence, examples of providing solutions that meet user needs Evidence, description of ability to provide support in line with requirements, and appropriateness of SLAs (please state what your support SLAs are) Relevance of team skills that would work on our solutions Value for money Cultural Fit Criteria Works as a team with our organisation and other suppliers Is transparent and collaborative when making decisions Embraces learning from mistakes Payment Approach Time and materials Assessment Method Case study Work history Reference Presentation Evaluation Weighting Technical competence 60% Cultural fit 10% Price 30% Questions from Suppliers No questions have been answered yet Budget range expected budget is: up to £100k/year for digital service development approx £180k/year for managed hosting, breakfix support, security and infrastructure, and out of hours provision and support