Joiners, Movers & Leavers (JML) Delivery

Tender description

Summary of the work Assessment method: written proposal then followed by an interview adressing a how supplier will delivery summary of work. Q&A facilities are available to all candidates/suppliers. Expected Contract Length 6 months or end in 31/03/2021 Latest start date Thursday 1 October 2020 Budget Range £275,000 Ex VAT Why the Work is Being Done The Ministry of Justice (MOJ) has a diverse and sizable technology estate, where many systems operate independently without shared authentication and authorisation systems. There are many different user management approaches in use, which means account management when staff and contractors join, change roles, or leave the organisation is inherently a manual activity, and thus prone to delay and error. We seek to make tactical and strategic improvements to all of the processes that drive our joiners, movers and leavers activities to make them more resilient with clearly defined roles and responsibility supported via refresh HR policies & guidance and supplemented through continued security messaging. Digital and Technology Strategic Objective * Fix the basic Problem to Be Solved Recently in January 2020 an independent consultancy produced an exploration report on the MoJ current Joiners, mover & leavers. The purpose is to improve overall Group Security by repositioning security culture and messaging at the heart of this. The problem of inconsistent onboarding and offboarding of employees inc contractors remains that the JML processes and implementations across the MOJ are fragmented and ineffective. Who Are the Users LineManagerPersonal As manager, I need assurance that users have been removed from IT systems after they have left, so I know that I have fulfilled my responsibilities and the information assets are secure. • Beable to get joiners access to all necessary systems and shared mailboxes/drives quickly and simply. Handsoff Manager Persona As manager, I need assurance that users have been removed from IT systems after they have left, so that I know that I have fulfilled my responsibilities and the information assets are secure. • As manager, I need IT processes that rely on little input from me, so that I can concentrate on the strategic and people-related elements of being a manager, not on IT. Digital Champions Persona As a Digital Champion, I need to be informed in advance when people join, move or leave so that I can fulfil my role in supporting line managers effectively. • Have assurance that access to accounts has been revoked if the request for account closure has been accepted and closed. • I need to know what systems and information assets a user has been accessing, so that I can arrange to close these accounts when they leave or change role. Early Market Engagement None aside from Discovery/Exploration. Work Already Done A discovery phase has been concluded. Discovery/exploration report including high level recomendarion and option assessment. Key findings of the discovery/expolration phases completed including user needs, persona, user journey, andr isk statement. Existing Team Digital and Technology Security & Privacy Team - Leads (Senior Senior Advisor, CISO & Security Leads) People Group - HR/Policy/Shared Service and etc MoJ Digital Service Desk - supports Mac users MoJ Service Desk - Contracted service desk for Windows 10 users Digital Champions inc Business Managers Heads of Dept (Deputy Directors) Service Owners Current Phase Alpha Skills & Experience • Evidence of recent and successful experience in delivering JML onboarding/offboarding of HR content for complex enterprise IT systems, conducted in the last three years. • Evidence of recent, demonstrable and successful experience in providing process map/data flow for JML proposed solutions, meeting business needs, conducted in the last three years. • Evidence of recent, demonstrable, effective, and successful experience in delivery and developing digital runbooks for onboarding/offboarding in the last three years. • Evidence of recent, demonstrable and successful experience in IT account remediation including digital forensic analysis in identifying dormant account based on user and organisational(business)needs, conducted in the last three years. • Evidence of recent, demonstrable and successful identification of JML business change ownership (service owners/heads of dept/service desk/HR) across a complex IT systems in the last three years. Nice to Haves • Evidence of successfully implementing identity strategy inc O365/G suites based solutions, at an Enterprise scale, in the last three years. • Evidence of successfully following, implementing and assessing offerings to standards set-out in the GDS Service Assessment Framework, technology code of practice and Cabinet Office spend-controls, in the last-three years. • Knowledge of relevant regulations and guidance relating to security matters in central government Work Location Due COVID-19 limited access to MoJ buildings and as default working arrangements will be remote until further guidance from Public Health England. 102 Petty France London SW1H 9AJ or 10 South Colonnade, Canary Wharf E14 4PU Working Arrangments Following Agile methodology. Working on site / remote, but assuming remote as default. Use of standard online collaboration tools Slack, Hangouts, Skype, Google G-Suite or Office 365. Report deliverables can also use word doc/power point. Supplier to use their own equipment; MoJ equipment to be provided on an exceptional, case-by-case basis. Access to the Security & Privacy Team Project Manager to provide reviews, direction and clarification on progress on a daily basis. Access to SMEs for insights and environment-specific details, by arrangement. Access to colleagues and suppliers working on other (new) IT systems, by arrangement. Security Clearance Baseline Personnel Security Check (BPSS) as a minimum preferable SC. See https://www.gov.uk/government/publications/government-baseline-personnel-security-standard for further guidance. Additional T&Cs Standard Digital Outcomes and Specialist contract applicable to MoJ. Payment milestone. Please see: https://www.gov.uk/government/publications/digital-outcomes-and-specialists-2-call-off-contract No. of Suppliers to Evaluate 5 Proposal Criteria • Describe the method you would propose to use,referencing your experience on how you would conduct research and assessment to meet our user needs and develop pragmatic security designs for JML • Describe how you would ensure that designed and implemented solutions meet the security expectations placed on them, both at initial deployment, and through life. • Describe how you will ensure that the delivery method will meet applicable legislation, standards, and best practices in cyber security for JML. Cultural Fit Criteria • Evidence of recent, demonstrable and successful identification of JML business change ownership (service owners/heads of dept/service desk/HR) across a complex IT systems in the last three years. • Explain how you’ll ensure collaboration at all levels of the project and programme delivery between users, team members and management. Give examples of where you have successfully applied this approach • Explain how you’ll ensure productive and successful collaboration with suppliers to understand how their technology aligns with MOJ business needs, and to ensure the technology addresses those needs Payment Approach Fixed price Assessment Method Presentation Evaluation Weighting Technical competence 60% Cultural fit 20% Price 20% Questions from Suppliers 1. Is there a current or preferred incumbent? There is no current provider or a preferred supplier. This is an open invitation to all suppliers registered on DOS. 2. You mention an "independent consultancy produced an exploration report" – can you share the report and/or findings? Please refer to the high level summary of the discovery/exploration report. https://drive.google.com/drive/folders/19hNMo6sRDwcNzDqfzPk9JLa-BXqN5NkGFull discovery report will be made available post DOS mini tender. 3. Its mentioned that a discovery/options/recommendations paper has already been produced but there doesn't appear to be a great deal of detail around the specific enhancements/optimizations that MOJ are looking for respondents to deliver against. Will MOJ be providing further detail around specific requirements once they've located a partner with suitable experience/expertise? Four future state options, of varying technical complexity, have been considered.Option 1: Fully Automated, Option 2: Automated IT, Option 3: Supported Manual and Option 4: Manual. Successful supplier will deliver option 4. The enhancements are noted with the summary of works. Option 4 is characterised by initiatives in the following areas:• Policy review.• Accountability.• Manual remediation activities.• Developing runbooks across all areas ofMOJ to support JML activities.• Improving security culture and awareness acrossMOJ.• Better defining theJML responsibilities within Digital and Technology(D&T).Further details for option 4 will be shared with the chosen supplier. 4. What are the expected deliverables from this work (as this isn’t stated)? Deliverables to be agreed post DOS mini tender. At a high level it is defined within the summary of work. E.g Refresh HR policies/guidance. This deliverables may be include Updated MoJ HR Content (This may also include new JML guidance doc) and etc. 5. Is there any particular JML/ IAM Solution or technology that this will be based on? No JML/IAM solution for this phase of delivery. We will be using our existing technology. 6. What organisational area (user base/ applications) does this JML scope cover (i.e. is this for one part of MoJ or all users, and what number of Apps/ systems should this cover)? The user base will cover all users across MoJ, however as part of PoC it will be delivered for use within the Security Privacy Team initially. The MoJ has over 800 apps mixture of cloud and on-prem applications. There are two main systems used within the MoJ: Windows 10 for a majority of the estate and MacBook users using G Suite. Therefore JML onboarding and offboarding will cover these two user base. 7. Can you please direct us to the conclusions/recommendations of the discovery report if available so we can understand the current state and priorities etc. Please refer to the high level summary of the discovery/exploration report. https://drive.google.com/drive/folders/19hNMo6sRDwcNzDqfzPk9JLa-BXqN5NkGFull discovery report will be made available post DOS mini tender. 8. Would you consider the use of modern technology, such as Robotic Process Automation (RPA) and/or Workflow for the Alpha? No. 9. Please can you provide a list of subsidiary organisations that the technology estate includes? e.g Crown prosecution, HM courts services & HM poisons Executive agencyHM Courts & Tribunals ServiceHer Majesty’s Prison and Probation ServiceLegal Aid AgencyOffice of the Public GuardianExecutive non-departmental public bodyJudicial Appointments CommissionYouth Justice Board for England and WalesAdvisory non-departmental public bodyAdvisory Committees on Justices of the PeaceCivil Justice CouncilCivil Procedure Rule CommitteeCriminal Procedure Rule CommitteeFamily Justice CouncilFamily Procedure Rule CommitteeIndependent Advisory Panel on Deaths in CustodyInsolvency Rules CommitteeLaw CommissionPrison Service Pay Review BodySentencing Council for England and WalesTribunal Procedure CommitteeOtherAcademy for Social JusticeHM Inspectorate of Prisons 10. You mention that "an independent consultancy produced an exploration report on the MoJ current Joiners, mover & leavers." Is it possible to have access to a copy of the report to shed further light on the problem statement? This is not possible at this stage of DOS mini tender. 11. The opportunity states that MoJ has a diverse and sizable technology estate. Can you tell us the number of systems, applications and users that are in scope? The user base will cover all users across MoJ, however as part of PoC it will be delivered for use within the Security Privacy Team initially. There are more than 70,000 users across the MoJ. The MoJ has over 800 apps mixture of cloud and on-prem applications. There are two main systems used within the MoJ: Windows 10 for a majority of the estate and MacBook users using G Suite. Therefore JML onboarding and offboarding will cover these two user base. 12. What are the deliverables MoJ expect in the timescale? For example, does MoJ expect a review of processes and improvement recommendations but stops short of writing new process and implementing? Or are the deliverables wider and include implementation of improved process and solutions such as architecting installing and configuring new systems? The scope is to deliver a tactical intervention and service improvement for security controls form onboarding and offboarding. This will entail review of current processes and ensure that technical/HR policies and guidance are updated to reflect this. JML accountability is varied across the estate. The purpose is to ensure a consistent messaging is reflected in HR landing sites to policies and guidelines. 13. What systems are in place to support JML, Recertification and Privileged Account management processes? For our Win10 estate this is overseen by our managed service provider and for our MacBook/G Suite is managed internally. There are no system to support JML aside from the technology portal to request items from the catalogue. 14. For example – are existing processes established? Does MoJ have an identity platform with UIDs and reporting lines already established? Do they have an inventory of systems? Do these systems provide an access inventory of what users have access to? Yes existing process are established but since then there has been a few changes to the support offering and the user journey needs validating. 15. Are any of the JML, Recertification or Privileged Account Management processes or tools outsourced? For our Win10 estate this is overseen by our managed service provider and for our MacBook/G Suite is managed internally. 16. What does ‘fix the basic’ mean under strategic objective? We have 70,000+ employees working in more than 1,000 buildings across the UK. Our users need fast, modern technology they can rely on so they can do their important work. The WiFi has to work, the laptops should boot up quickly, and the line of business systems need to be available all the time. We also need our technology to be patched, supported, secure and should comply with the very sensible GDPR rules around data retention. 17. Does MoJ want the Discovery report recommendations implemented or do they want new recommendations? Can the high level recommendations of the Discovery report be shared? Yes - Option 4 within the discovery report to be implemented. The activities are tactical interventions to help improve our security posture form JML. 18. Are we able to obtain a copy of the discovery report? Please refer to the high level summary of the discovery/exploration report. https://drive.google.com/drive/folders/19hNMo6sRDwcNzDqfzPk9JLa-BXqN5NkGFull discovery report will be made available post DOS mini tender. 19. Who supported MoJ in conducted the Discovery and will the Discovery/Exploration report be made available? The reports and other supporting documentation will be shared with a chosen supplier following DOS mini tender. 20. How many applications/platforms/services need to be integrated with? None. 21. How many user accounts / identities are in-scope? There are two main user IT account: Win10 (0365) for (DOM1) IT account and (G Suite) for MacBook. 22. What level of manual vs automated user account provisioning is in place currently? Manual provisioning in place. 23. What sources of identity do MoJ use and which are considered authoritative (single source of truth)?" (E.g. AD, HR/payroll system, another directory etc.) There are around 23 separate sources of identity. 24. Which Business area/s does it impact? All areas. 25. What end outcome are you looking for out of this 6 month piece of work? In terms end outcome, I expect to see HR guidance/policies that are user centered for end users and better reflects current processes, process maps that is user friendly for end users/line managers, achieving at least min 80% of IT account remediation if not more, digital runbook for onboarding/offboarding and BAU JML stakeholder engagement and ownership. 26. Is this requirement for an application (service/platform) or is it more around consultancy for processes? It is not for a requirement for an application (service/platform). We are seeking a 'can do attitude' and experience of delivery of works/outcome. 27. Your instructions state that all suppliers will be asked to submit a written proposal which will be evaluation for its technical competence, cultural fit and price (60%, 20%, 20%). Upon looking at the questionnaire the questions focus on our essential skills and experience, and our "nice to have" skills and experience. Please confirm that this assessment, that must be completed by 13 August, is to qualify suppliers down to 5, who will then be requested to respond to the technical competence, cultural fit and price questions at a later date. Written proposal does not need to be completed by 13 August, this only applicable to suppliers that are sifted to round 2 and only 5 suppliers will be sifted to this stage. 28. What time period do you wish this exercise to be delivered over and will the stakeholders be available during this period We would like to have exercise delivered by end of Jan/Feb 2021. Various stakeholders will be available. The project team have held pre-engagement sessions with MoJ internal stakeholders. 29. Who do you envisage the preferred provider will need to engage with across MoJ (role and function) in order to come up with the deliverables? The supplier will need to engage with the project team within the security & privacy for approval of the deliverables. This work has been commissioned by the security & privacy team to ensure robust technical controls are in place as defined in option 4 of the JML roadmap. 30. Can you provide soft-copies of the discovery materials or a precis of them to allow us to better understand the issues and problems faced. Can you also provide a schematic of the technology landscape in place? Please refer to the high level summary of the discovery/exploration report. https://drive.google.com/drive/folders/19hNMo6sRDwcNzDqfzPk9JLa-BXqN5NkGFull discovery report will be made available post DOS mini tender. 31. Can you describe what deliverables and outcomes you expect at the end of this phase of work? In terms end outcome, I expect to see HR guidance/policies that are user centered for end users and better reflects current processes, process maps that is user friendly for end users/line managers, achieving at least min 80% of IT account remediation if not more, digital runbook for onboarding/offboarding and BAU JML stakeholder engagement and ownership. 32. Can you elaborate on what the MoJ team composition and skill set will be that work with the preferred provider In terms of team composition, members of the MoJ team will consist from the core Cyber Delivery Team and Cyber Assistance Team within the Security & Privacy Team. 33. With regard to the support, can we assume you are not looking for any technology/software to be implemented as part of this phase of the solution? Yes - Correct. 34. Do you have any preferences for platforms or technology? None. 35. What were the results Discovery/exploration report? Please refer to the high level summary of the discovery/exploration report. https://drive.google.com/drive/folders/19hNMo6sRDwcNzDqfzPk9JLa-BXqN5NkGFull discovery report will be made available post DOS mini tender. 36. Did an external vendor help MoJ with discovery? If yes, are they allowed to bid for this peice of work? An external vendor supported MoJ with discovery/exploration. All registered DOS suppliers are welcomed to bid for the work. 37. Is the budget to deliver Alpha phase or for Alpha to MVP phases? The budget is to deliver alpha product/services of our current service offering. 38. Is there any focus on supporting a change in people's ways of working? i.e. not solely related to systems? Yes there are elements of changing people's perspective on how they onboard/offboard users. There are existing leavers checklist that requires a change or uplift to ensure that line managers are adhering to this. 39. Can you provide further details about which independent systems are currently in place? There are two main user IT account: Win10 (0365) for (DOM1) IT account and (G Suite) for MacBook. 40. Are you aware that the link you've referenced for the call off contract is DOS2 – should this not be DOS4? Yes. Thank you for making us aware of this. It should refer to DOS4. 41. Please can you share the Discovery document. Please refer to the high level summary of the discovery/exploration report. https://drive.google.com/drive/folders/19hNMo6sRDwcNzDqfzPk9JLa-BXqN5NkGFull discovery report will be made available post DOS mini tender. 42. What is the reach of the work? for instance, MOJ HQ or pan-MOJ including its Executive Agencies and are you focusing on a subset such as leavers or is your expectation that this work will span Joiners, movers and leavers? Please refer to a previous question which has addressed this question. 43. Assuming that there is technology that has been deployed, is this the same solution, does the solution encompass the scope of the stated problem issue, below?‘The problem of inconsistent onboarding and offboarding of employees including contractors remains that the JML processes and implementations across the MOJ are fragmented and ineffective.’ Yes it is the same solution. The issue has been accountability and clear information/guidance on who performs onboarding and offboarding. Within some executive agencies there is clear defined good practices for JML. 44. Please confirm whether the scope of JML in terms of the number of target systems/applications and the details of these? Please refer to a previous question which has addressed this question. 45. Assuming that the high-level request is to provide a consultancy to deliver a JML solution, please advise of the technology/solutions that are in place and their current function to enable the JML delivery within the HR, ServiceDesk and Identity&Access Management components, such as Oracle, Microsoft, Forgerock, ServiceNow, etc.? Integration for JML is out of scope to other applications at this stage. 46. Please provide more detail on the results of the independent consultancy exploration report. Please refer to the high level summary of the discovery/exploration report. https://drive.google.com/drive/folders/19hNMo6sRDwcNzDqfzPk9JLa-BXqN5NkGFull discovery report will be made available post DOS mini tender. 47. The Summary of Work statement is: “written proposal then followed by an interview addressing a how supplier will delivery summary of work. Q&A facilities are available to all candidates/suppliers.” Please clarify what is required from the supplier and what outcome you expect this work to deliver? Suppliers that are sifted to round 2 stage of the DOS mini tender, will be asked to present a presentation on how best to meet and deliver outcomes and addressing the user needs. At this stage, suppliers will be provided an opportunity to ask further clarifications questions before a supplier engagement session is penciled in. 48. How will this work dock into the 3rd Generation Services Programme? Not applicable. 49. What is the reach of the work? for instance, MOJ HQ or pan-MOJ including its Executive Agencies and are you focusing on a subset such as leavers or is your expectation that this work will span Joiners, movers and leavers? The scope of work will cover joiners, movers and leavers across agencies that rely upon the two core platform utilizing Win10 or G Suites. This broken down into users base that rely upon the DOM1 IT account or G Suite account. 50. The Summary of Work statement is: “written proposal then followed by an interview addressing a how supplier will delivery summary of work. Q&A facilities are available to all candidates/suppliers.” Please clarify what is required from the supplier and what outcome you expect this work to deliver? This only applicable to suppliers that are sifted to round 2 of the DOS mini tender and only 5 suppliers will be sifted to this stage. 51. Please provide more detail on the results of the independent consultancy exploration report. Please refer to the high level summary of the discovery/exploration report. https://drive.google.com/drive/folders/19hNMo6sRDwcNzDqfzPk9JLa-BXqN5NkGFull discovery report will be made available post DOS mini tender. 52. Who supported MoJ in conducted the Discovery and will the Discovery/Exploration report be made available? Please refer to the high level summary of the discovery/exploration report. https://drive.google.com/drive/folders/19hNMo6sRDwcNzDqfzPk9JLa-BXqN5NkGFull discovery report will be made available post DOS mini tender. 53. Aside from O365 / G Suite, which SaaS or on prem applications are in scope? 0365/G Suite accounts are in scope. 54. What is your Expected user base? Estimated user base across MoJ 70,000. 55. What are the other initiatives in 'fix the basic' Strategic Objective? Are there any other programmes which will impact this one? There are other programmes of works and may have residual impact but these programmes are standalone programme of works not focusing on JML. 56. Does existing HR systems / authentication/ authorisation systems use SQL or Oracle databases? MoJ have a government shared services (SSCL) for its HR application. 57. Is any HR systems / authencation/ authorisation systems integrated with Microsoft Active Directory No 58. Apart from Microsoft Active Directory, are there any other Microsoft services are running into customer environment like Azure Active Directory? Not known - pending a response from technical team. 59. Are you using any other technologies like Shibboleth or kerberos? Not known - pending a response from technical team. 60. How many independent systems, identified during the discovery phase, are to be included as part of the new JML service, and how many of those are Saas vs COTS on-premise applications vs In-House developed systems? 23 separate sources of identity were identified as part of discovery/exploration phase. 61. How many disparate user personas, identified during the discovery phase, are to be included as part of the JML service? 3 personna were identified as part of the discovery/exploration phase. 62. Does the MOJ have (or follow) a central policy for managing JML?a. If yes, has a review been conducted across MOJ estate to determine compliance against JML policy? There is not a central JML policy. There are number of other related policies such as the access control policy which includes JML messaging. 63. Does the MOJ have a critical date by when compliance should be reached?a. If yes, what does ‘compliance’ mean and by when must it be reached?b. If yes, what will happen if compliance is not reached by this date? There is no critical date for compliance but is actively managed and monitored within governance team. JML products/service/enhancement to be delivered by end of Jan/Feb 2021 ready for PoC. 64. Do you have an existing method for managing identity access control that is not working very well? If so, what are the perceived reasons? No identity access control in place within our platform/environment. 65. Do you have a preferred tool or system for managing identity access control (e.g. ActiveDirectory, SAML, LDAP, Auth0, Azure B:C)? No preferred tool or preference. 66. Has any procurement activity begun or completed for technology/tooling related to JML management (incl. access control)? Not presently planned for this financial year. 67. Do you have a conceptual, pictorial view of your complex enterprise IT systems and how they are connected? Unable share at this stage of DOS mini tender. 68. Do you have a single HR system of record for an employee’s JML status? Yes. 69. Is there a single Application Access Control system which is used to help manage system access for all employees? If so, does it automatically interact with some/all of the required systems? Aside from AD on our DOM1 (Wind 10). 70. For manual system access control changes, is RPA a potential solution? If so, is there any link between this work and the role of the Government Automation Taskforce?If not, please can you help us understand the blockers to RPA being a potential solution? What is RPA? Unable to provide a response to this question. We are only implementing a tactical intervention rather than a digital solution . The project team has shared MoJ JML discovery with Government Shared Service as they are exploring automation across shared services applications/system. 71. Assuming that the high-level request is to provide a consultancy to deliver a JML solution, please advise of the technology/solutions that are in place and their current function to enable the JML delivery within the HR, ServiceDesk and Identity&Access Management components, such as Oracle, Microsoft, Forgerock, ServiceNow, etc.? Four future state options, of varying technical complexity, have been considered.Option 1:Fully Automated, Option 2:Automated IT, Option 3:Supported Manual and Option 4:Manual. Successful supplier will deliver option 4.The enhancements are noted with the summary of works. Option4 is characterised by initiatives in the following areas:• Policy review.• Accountability.• Manual remediation activities.• Developing runbooks across all areas of MOJ to support JML activities.• Improving security culture and awareness across MOJ.• Better defining the JML responsibilities within Digital andTechnology(D&T).Further details for option4 will be shared with the chosen supplier. 72. Please confirm whether the scope of JML in terms of the number of target systems/applications and the details of these? Four future state options, of varying technical complexity, have been considered.Option 1:Fully Automated, Option 2:Automated IT, Option 3:Supported Manual and Option 4:Manual. Successful supplier will deliver option 4.The enhancements are noted with the summary of works. Option4 is characterised by initiatives in the following areas:• Policy review.• Accountability.• Manual remediation activities.• Developing runbooks across all areas of MOJ to support JML activities.• Improving security culture and awareness across MOJ.• Better defining the JML responsibilities within Digital andTechnology(D&T).Further details for option4 will be shared with the chosen supplier. 73. Is the MOJ looking to procure a product/service to act as the central JML orchestration process engine, or develop an in-house solution that integrates with existing user directories and authorisation systems? No 74. What is the reach of the work? for instance, MOJ HQ or pan-MOJ including its Executive Agencies and are you focusing on a subset such as leavers or is your expectation that this work will span Joiners, movers and leavers? Executive agencyHMPPSLegal Aid AgencyOffice of the Public GuardianMOJ HQExecutive non-departmental public bodyJudicial Appointments CommissionYouth Justice Board Advisory Committees on Justices of the PeaceLaw CommissionSentencing Council Academy for Social JusticeHM Inspectorate of PrisonsHM Inspectorate of ProbationIndependent Monitoring BoardsJudicial Appointments and Conduct OmbudsmanJudicial OfficePrisons and Probation OmbudsmanVictims' CommissionerPlease note some agencies will have their own IT system and will have independent supplier/managed service provisions for their IT/asset and will be excluded for JML Delivery. 75. Please can you provide a list of subsidiary organisations that the technology estate includes? e.g Crown prosecution, HM courts services & HM poisons Executive agencyHMPPSLegal Aid AgencyOffice of the Public GuardianMOJ HQExecutive non-departmental public bodyJudicial Appointments CommissionYouth Justice Board Advisory Committees on Justices of the PeaceLaw CommissionSentencing Council Academy for Social JusticeHM Inspectorate of PrisonsHM Inspectorate of ProbationIndependent Monitoring BoardsJudicial Appointments and Conduct OmbudsmanJudicial OfficePrisons and Probation OmbudsmanVictims' CommissionerPlease note some agencies will have their own IT system and will have independent supplier/managed service provisions for their IT/asset and will be excluded for JML Delivery.