GoJ - M&D- Cyber Security 2022 Programme - Certificate Management Services

Tender description

<p>The Certificate Management project aims to deliver a new certificate management and Public Key Infrastructure (PKI) solution across Government of Jersey (GOJ). The implemented solution may follow a ‘hybrid’ operating model with a third-party managed root certificate authority. The successful Supplier will use the recommendations and requirements outlined in a PKI Discovery Review which has been procured by GOJ as the baseline criteria for the new solution and will be made available to the successful Supplier. The key deliverables include:</p> <ul> <li>Design and specify a semi-managed (hybrid) certificate management solution in alignment with good practise such as T-scheme and the previously procured PKI Discovery Report,</li> <li>Implement a suitable Root CA and subordinate CA services in support of organisational requirements,</li> <li>Document and define use-case models for internally and externally managed certificates,</li> <li>Provision a certificate management platform capable of managing the certificate lifecycle including renewal, revocation, destruction and auditing,</li> <li>Deploy a pilot scheme as a proof-of-concept of the proposed solution,</li> <li>Develop a Target Operating Model (TOM), to define how the proposed solution will be operated,</li> <li>Create an onboarding framework based on the pilot testing and TOM to facilitate wider rollout of the solution,</li> <li>Formally present and hand over the solution to GOJ for approval and adoption,</li> </ul> <p>Bidders are asked to register their interest through the <a href="https://www.channelislandtenders.com/">Channel Islands Tenders (channelislandtenders.com)</a> portal.&nbsp; Please register, sign-in and complete the NDA within the relevant attachment area.&nbsp; Once completed, bidders will be granted access to a restricted area containing the ITT documents and supporting information.</p> <p>Please also note that a market engagement session will be held on the 3rd November at 16:15 for those who have completed the NDA.&nbsp; If you are unable to complete the document in time, a recording of the session will be made available.</p> Keywords: Certificate Management, Cyber Security Programme