RM1043.8 DBS Architecture and Security Services

Tender description

Pre-market engagement There has been no pre tender market engagement and there are no plans to undertake any. We will follow the 2-Stage process set out for the DO6 procurement framework. Work done so far An incumbent supplier is in place on a short term basis providing this service. Which phase the project is in Not applicable Existing team The existing Architecture team comprises a Chief architect and 3 permanent Technical Architects. The existing Security Team comprises of a lead cyber risk manager, 2 cyber risk mangers, 1 operational security lead and 3 operational security managers Address where the work will be done No specific location - Can work entirely remote. Working arrangements All work will be undertaken remotely. Some travel may be required. Expenses will be limited to £2500 per annum for each year of the contract and all travel and subsistence will require prior approval. In accordance with DBS Travel & Expenses Policy Provide more information about your security requirements: Security Check (SC) Provide more information about your security requirements (optional): All roles must be SC cleared. Latest start date 2025-04-01 Enter the expected contract length: 2 years Extension period: 1 year Write the term or acronym: CISO Write the term or acronym: TR Write the term or acronym: LTER Write the term or acronym: DA Are you prepared to show your budget details?: Yes Indicative maximum: £2500000 per annum Indicative minimum: £2000000 per annum Confirm if you require a contracted out service or supply of resource Contracted out service: the off-payroll rules do not apply Summary of work The DBS is replacing its legacy technology estate (LTER) alongside delivery of a wider Technology Roadmap (TR). Internal and external stakeholders and needs to be able to validate potential solutions against the DBS target architecture and ensure both LTER and TR activities are delivered sympathetically to one another. The target architecture must be maintained in response to assurance and procurement and delivery activity across both programmes. Access to CISO industry expertise must be available as part of the overall LTER and TR programme delivery oversight, and provide guidance for implementation of ongoing cyber and physical controls required to achieve and maintain the DBS internal and external security standard obligations. Where the supplied staff will work No specific location (for example they can work remotely) Who the organisation using the products or services is N/A Why the work is being done The DBS is replacing its legacy technology estate (LTER) alongside delivery of a wider Technology Roadmap (TR). Internal and external stakeholders and needs to be able to validate potential solutions against the DBS target architecture and ensure both LTER and TR activities are delivered sympathetically to one another. The target architecture must be maintained in response to assurance and procurement and delivery activity across both programmes. Access to CISO industry expertise must be available as part of the overall LTER and TR programme delivery oversight, and provide guidance for implementation of ongoing cyber and physical controls required to achieve and maintain the DBS internal and external security standard obligations. The business problem you need to solve The DBS are embarking on a programme to replace its legacy technology estate (LTER) alongside delivery of a wider Technology Roadmap (TR). The existing technology estate is a mix of deprecated technologies and in places over 20 years old. There is a strategic intent to move away for large bespoke applications to a disaggregated SaaS model. A destination architecture view has been produced and provides a high level blueprint for all activity, with follow on activities within each of the associated programme workstreams to drive out the granular level of detail. Internal and external stakeholders need to be able to validate potential solutions against the DBS target architecture and ensure both LTER and TR activities are delivered with consideration to one another as well as understanding the cross dependencies. The target architecture must be maintained in response to assurance and procurement and delivery activity across both programmes. Internal and external stakeholders need to be able to rely on the cyber risk assurance of potential new solutions and periodical assurance of existing technology estate components as part of the LTER delivery and TR programmes. Access to CISO industry expertise must be available as part of the overall LTER and TR programme delivery oversight, and provide guidance for implementation of ongoing cyber and physical controls required to achieve and maintain the DBS internal and external security standard obligations. First user type: Strategic Leadership Team DBS leadership team. Advice and assurace of transition to DA. Specific CISO advice regarding potential risks/mitigations and threat landscape of future state LTER Programme Board Technology Roadmap Steering Group Project Delivery Teams Internal Architecture and Security Teams Data Protection Team External Stakeholders (GIAA, ICO, GovSec etc)