Home Office - ServiceNow Security Architecture Capability

Tender description

Why the Work is Being Done The Home Office has increased the functionality and use of the ServiceNow Platform significantly over the past 2 years and as a result the level of Security Assurance has also increased. Security Architecture resource is essential to ensure that the ongoing security design of all projects and additional functionality are addressed appropriately. There is limited resource available in the HO to undertake the level of security design and assurance support required for the platform that is going through a high volume of change and integrations, such as standing up the 24/7 Operations Centre to monitor critical HO Services, onboarding of wider business areas with their differing levels of security requirements, collation of higher volume of data etc. This is required by 1st April 2020. Problem to Be Solved Third party supplier to provide access to specialised Security Architecture and assurance capability with specific knowledge and experience of the ServiceNow product and associated integrations such as: Event Management for service and security monitoring, discovery, other SM toolsets, population of CMDB, MID Server technology etc. Security Architecture Capability and Capacity gap – all new functionality, projects and integrations need to be secure by design and to ensure this is done in a robust way, that adheres to stringent Security Policies and Procedures, skilled experience Security Architect resources are required. This would need to include an element of knowledge transfer back in to the relevant teams to ensure Secure by Design principles are understood and worked in to the day to day activities. Who Are the Users ServiceNow is used to support IT Service Operations across the Home Office. Users of ServiceNow include: - End users accessing the Service Catalogue; - Service Operations management, using the data in ServiceNow to manage IT service provision; Service Desk staff supporting end users raising IT issues and - Service Operations staff supporting key ITIL processes. In addition, there are evolving capabilities in the Home Office Cyber Security and IT Operations centres (CSOC and ITOC). These will use ServiceNow for Event Management, using integrations with monitoring tools to view and manage business service health, and to manage and monitor Security Incidents in a secure and controlled environment. Early Market Engagement None Work Already Done The following applications and features have been implemented in the Home Office instance of ServiceNow: -Service Portal; Chat; Incident; Operational Change; Problem; Service Catalogue; Service Request Management; CMDB (including and SCCM integration) and elements of the CSDM; web service integrations with multiple 3rd party and in-house applications; SecOps – Security Incident; Event Management; GRC – Risk Management. The version of ServiceNow implemented is London, patch version 10 with an upgrade to New York patch 5 due 27/02/20. There is currently an internal Security Audit underway alongside an ITHC (IT Health Check). Existing Team The Home Office has an in-house DevOps team of permanent Civil Servants currently consisting of 8 Developers, 2 Business Analysts, Technical Architect, Delivery Manager, Product Manager and a Testing team. This team is being expanded through additional recruitment and will be supplemented by the successful supplier under this contract. Current Phase Not applicable Work Location Home Office locations mainly Croydon and Manchester. Occasional travel to other Home Office locations may be required. Working Arrangments On site working 3-4 days a week co-located with other Home Office ServiceNow resources when required. Security Clearance SC Security Clearance is required to operate on this project. Must hold or be willing to undergo security clearance (SC) Additional T&Cs Standard DOS framework and call-off terms and conditions. Skills & Experience In depth understanding of Security best practice, policies, risk appetite and security controls that should be in place Experience and knowledge of ServiceNow Product Experienced security practitioners with Public Sector experience, CCP SIRA certified or equivalent. Ability to clearly document security guidelines, including policies and processes, that should be followed to maintain Security compliance. Experience in ensuring deliverables are secure by design Ensure security policies and processes relating to ServiceNow are implemented effectively. Develop appropriate security products for tooling that integrates with ServiceNow. At least 2 years’ experience of working within the Public Sector Nice to Haves Support production and agreement of ATOs (Authority to Operate) and ITHC for monitoring tooling and Event Management. Experience of working with agile methodologies No. of Suppliers to Evaluate 4 Proposal Criteria The Match to the essential skills and experience outlined above Demonstration of relevant experience in working with ServiceNow product to achieve security compliance Technical solution Value For Money Approach and methodology Cultural Fit Criteria Ability of the Supplier to match the Home Office Values, which are: Commitment to excellence Open and collaborative team approach Flexible working Commitment to team working o Shares skills and knowledge • Ability to work within an environment of agile delivery and DevOps. Payment Approach Time and materials Assessment Method Evaluation Weighting Technical competence 50% Cultural fit 15% Price 35% Questions from Suppliers No questions have been answered yet Budget range at least 2 x security architects with the ability to increase to approximately 6 resources for a period of 18 - 24 months.