Joint Crypt Key Programme Client Side Support - Strategy and Plans

Tender description

Summary of the work The Joint Crypt Key Programme requires Client Side support to deliver it's Strategy and Planning Function. Please note at Stage 2 a SoW, Written Proposal, two Case Studies, and Work History for Key Staff will form part of the evaluation criteria. Expected Contract Length 24 Months, with the option for a 6-month extension. Latest start date Friday 17 June 2022 Budget Range £1,200,000 - £1,600,000 (excluding VAT) Why the Work is Being Done JCKP has designed and developed the next generation of CK capabilities (standards, services, components, and infrastructure) that have transitioned to business as usual. These CK capabilities will continually evolve to stay ahead of the threat. JCKP is a transformational programme to modernise how crypt key is used within MOD. It is a joint programme between the Ministry of Defence (MOD) and the National Cyber Security Centre (NCSC). Problem to Be Solved In order to continue to deliver this transformative requirement, the joint NCSC/MOD team has been reconfigured and requires additional Client Side Support to augment the current team of Crown Servants. This procurement is one of 3 to establish a Strategic Planning function, alongside a Business Change capability and additional capacity to Deliver and Manage the constituent projects. The Strategic Planning function will deliver 3 main outputs: 1 - a Requirements Management capability in support of the Head of Capability 2 - a Programme Planning function to develop and maintain programme plans aligned to the Capability Management Plan, also incorporating some financial planning 3 - an Approvals Management function to provide a Centre of Excellence and planning focus for all JCKP approvals Who Are the Users As the Programme Director, I need the confidence that the programme is fully planned using a benefits-led approach As the Programme Manager, I need confidence that the programme artefacts are coherent, up to date, and that constituent projects are initiated, delivered and closed to achieve benefits As the Finance lead, I need the ability to plan, forecast, model and manage all financial aspects of the programme As the Approvals lead for JCKP, I need a Centre of Approvals Excellence to ensure that all project and programme approvals are authored professionally, supported by evidence, assurable and approved in good time to enable the programme to deliver to plan Early Market Engagement Not Applicable Work Already Done The JCKP programme has been running for some considerable time. The legacy arrangements are coming to an end in July 2022 and the new Client Side Support arrangements will reconfigure the way the programme is delivered, alongside changes to the roles undertaken by both MOD and NCSC Existing Team The supplier will be working within the MOD's strategic plans team led by a Grade 6 equivalent and in collaboration with the NCSC Finance and Plans team. There will be regular engagement with the MOD's Capability Branch and with MOD and NCSC Business Change managers. The team will also be work alongside the NCSC's and MOD's other strategic partners, including the delivery of Business Change and Project Management and Delivery. Current Phase Not applicable Skills & Experience • Please provide evidence of Capability Management and Planning experience, including assumptions and requirements management in a complex ICT environment • Please provide evidence of Programme Management experience, including delivery of programme management artefacts for a large programme and development of Target Operating Models • Please provide evidence of Financial and Resource management experience within a Government environment including future planning, cost modelling, forecasting • Please provide evidence of Approvals Management experience within a Government Environment Nice to Haves • Please provide evidence of Military requirements management experience • Please provide evidence of Requirements Management and prioritisation in an Agile environment • Please provide evidence of cryptography experience within Defence • Please provide evidence of Approvals Management experience within MOD and Defence Digital Work Location Although the majority of work may be undertaken remotely, the JCKP team's parent working site will be MOD Corsham, Wiltshire, where most in-person meetings would be located, with a requirement to visit the nearest regional NCSC office for face-to-face classified discussion and collaboration several times per month. Work at other UK sites may be required, but the majority of working can be remote using MS Teams. Working Arrangments The team members will be free to decide their own working hours, but will be expected to attend regular/routine Programme Meetings, either in-person or virtually depending upon classification. Due to the sensitivity of the information (marked as Official Sensitive) contained within Stage 2, the Authority requires bidders who are successful at the Stage 1 down-select to submit an RLI or suitably protected email address to receive the Stage 2 Proposal The supplier should hold an List-X premises OR where working is required above OFFICIAL, MOD office space and systems will be made available. Security Clearance Key team-members will require Developed Vetting clearance and hold UK nationality by contract start. Those without DV require SC clearance. The Authority will not hold or sponsor clearances. Additional T&Cs Suppliers must use the Authority’s Purchase to Payment Tool CP&F or be prepared to sign up to the tool. The Cyber Risk Profile for this requirement identified by the Cyber Risk Assessment is - Not Applicable, Reference –935304846. The Authority reserves the right, but is not obliged to withdraw this advert and/or ITT at any time, or choose not to award any Contract as a result of this tender process, or re-invite Tenders on the same or any alternative basis. No. of Suppliers to Evaluate 5 Proposal Criteria • Demonstration of how the supplier will plan and deliver (including the approach and methodology) the core outcomes and deliverables as specified in the SoR. (15%) • Demonstration of ability to resource core requirements with a suitable mix of qualification and experience levels; should include confidence that supplier will not provide under-SQEP staff to reduce cost. (10%) • Demonstration of the supplier’s capacity to respond appropriately to call-off or surge requirements, including access to the whole range of skills potentially required, in a suitable timeframe. (10%) • Demonstration of ability to provide individuals at a range of security clearances, including for roles where Developed Vetting is essential factor in order to collaborate effectively across the programme. (5%) • Demonstration of how the supplier will mobilise and transition over a 4-week period, ensuring structures are in place to facilitate handover from an incumbent supplier. (10%) • Demonstration of how the proposal demonstrates Value and how continuous improvement will be delivered over the period of the contract. (5%) • Demonstration the supplier has considered Exit planning and credible plans and structures will be in place end of contract term to enable a low-risk transition to a future supplier. (5%) Cultural Fit Criteria • Demonstration of how the supplier will work collaboratively in a geographically distributed, multi-supplier environment, including building capability (using skills transfer as a minimum) within the MOD and NCSC teams. (4%) • Demonstration of an effective team structure, integrated into the JCKP programme, including but not limited to the roles, responsibilities, ways of working, location and communication. (3%) • Demonstration of the ability to respond to evolving requirements and uncertainty, effectively and positively, delivering change through effective collaboration and leadership. (3%) • Social Value - Demonstration of the company’s approach to Support educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications (5%) • Social Value - Demonstration of the company’s approach to delivering additional environmental benefits in the performance of the contract, including working towards net zero greenhouse gas emissions (2.5%) • Social Value - Demonstration of the company’s actions to identify and tackle inequality in employment, skills and pay in the contract workforce (2.5%) Payment Approach Fixed price Assessment Method • Case study • Work history Evaluation Weighting Technical competence 60% Cultural fit 20% Price 20% Questions from Suppliers 1. Can MODNET email addresses be used to receive the Stage 2 documentation? Any e-mail address on a system which has been accredited to handle OFFICIAL-SENSITIVE information can be used to receive Stage 2 information.  This can be transmitted via email through either a @r.mil.uk email address or if appropriate end to end encryption is in place (system enforced or manual protection). 2. Do you have any external suppliers already providing the required services?If so, who are they, and how long have they been providing the services to you? The identity of the JCKP supply chain is sensitive information.  As part of the Continuous Improvement project, this and other procurement's are seeking to replace a single arrangement with multiple client-side support arrangements; this is to ensure the scope is appropriate to the re-structured programme arrangements, to increase supply chain resilience and as a mitigation against inherent incumbent bias; all potential providers who are able to meet the requirements of the framework are free to engage in this procurement. 3. Who from MOD/NCSC will evaluate tenders please (names, job titles etc.)? Due to GDPR, the Authority is unable to disclose details of evaluators to potential bidders. However, all tenders will be evaluated by either MOD Civil Servants within the Crypto and Defensive Cyber delivery team or by separate independent contractors engaged in the support of this procurement.