SPISN/0290 Enterprise Data Analytics Development & Support

Description

Pre-market engagement Information Note released via the Defence Sourcing Portal (DSP) 20/12/23. Defence conferences & Expos (e.g. DSEI 2023, SDSC UK 2023). Work done so far Designed, built, integrated and delivered into service an on premise SECRET platform using DELL Azure Stack Hubs and HMI, and other technologies including but not limited to; DELL networking equipment, F5 - load balancers, Garrison and Veritas - back up devices. Designed, built and delivered into service an OFFICIAL SENSITIVE Azure Cloud tenancy, hosting data analytics and DevSecOps capabilities. The Authority has begun building a new ESLZ in a MOD owned tenancy ready to further develop and scale out to the full capability. Development of a limited Cross Domain Gateway capability. Which phase the project is in Live Existing team The core team in the Data Analytics Centre (DAC) compromises of a mixed team of Military, Civil Service and contractors. The contract roles are broken down into Delivery Head, Product Head, Service Head, a Data Architect. There are several permanent military and civilian contractual staff developers, and it is expected that the Enterprise Partner will work to the DAC and with other suppliers. Address where the work will be done Hereford Working arrangements Ordinarily business operating hours are Monday to Friday for 8hrs per day, usually 0900 – 1700 across both the Cloud and on Premises platforms. The business requires a call off option of 16hrs additional per month to draw upon for out of hours activity (The additional 16hrs will be enacted through a 3 day notice period and split between both platforms). The 0900 – 1700 working hours may change in the future to include additional out of hours support. The Cloud platform will allow remote working, but weekly and ad-hoc on site presence will be required to attend face-to-face meetings. Personnel will require SC clearance. The on Premises platform requires permanent onsite support staff due to the nature of the platform in line with the hours annotated above. Personnel will require DV clearance or SC with a view to acquiring DV. Individuals and Teams will need to rotate between platforms to gain the wider understanding of the organisation, its requirements, context and aid the building of working relationships. Continuous on site presence is the Authority's preferred approach. Bidders to confirm within their proposal about their proposed approach to working arrangements. Provide more information about your security requirements: Security Check (SC) Provide more information about your security requirements: Developed Vetting (DV) Provide more information about your security requirements (optional): OFFICIAL: Minimum SC clearance required. SECRET: SC as minimum and DV for any admin roles. Experience with implementing NIST 800-53 Security Controls Latest start date 2024-05-31 Enter the expected contract length: 2 years Extension period: 1 year Special terms and conditions Special Terms & Conditions will be released during stage two of the down-selection. Are you prepared to show your budget details?: No Confirm if you require a contracted out service or supply of resource Supply of resource: the off-payroll rules may apply Summary of work Suppliers who intend to work as a consortium are encouraged to respond to stage 1 collaboratively. There will be an additional CQ period (1 week) for the questions released at Stage 2 for the down-selected suppliers. As part of the Stage 1 bid return, suppliers must sign and return a copy of the attached Security Aspects Letter (SAL). Build & Migrate OFFICIAL SENSITIVE Azure Tenancy: The current contracted OFFICIAL SENSITIVE (OS) platform is hosted and managed within a supplier owned Azure Tenancy, where prescribed change limitations are placed upon users preforming day to day tasks. The Authority and users must be empowered to deliver in an Agile, DevSecOps manner and technically enabled to carry out change on the platform in line with evolving user requirements, without restrictions being placed by a supplier. The design and build of an OS Cloud Solution utilising where appropriate existing build guides is required within an Authority owned tenancy offering. The existing platform is currently a combination of infrastructure as code and manual build; however, the user requires a platform that is as far as practical all infrastructure as code. There will also be a need to migrate appropriate infrastructure as code and existing workloads from the current OS tenancy to the Authority owned Azure tenancy. Working in unison with the Authority and collaboration with suppliers that currently support the existing OS Cloud and SECRET platforms is a prerequisite. Support to OFFICIAL SENSITIVE Azure Cloud: To provide platform infrastructure, security management, support, and continuous development of an OFFICIAL SENSITIVE Cloud Azure tenancy within an Authority owned environment. The platform use case is for the development, hosting & exploitation of deployed data analytical products and tools. Suppliers will be required to work in unison with other suppliers as directed by the Authority, to enable the successful outcomes of the product delivery life-cycle. Additionally, enable the integration of other components within the Enterprise Data Analytics solution. Support to SECRET ASH: To provide platform infrastructure support and continued development of a geographically separated on-premises SECRET platform. The Data Analytics Platform is currently hosted on Azure Stack Hubs, with associated management infrastructure. The platform use case is for the development and hosting & exploitation of deployed data analytical products and tools. Suppliers will be required to work in unison with other suppliers as directed by the Authority, to enable the successful outcomes of the product delivery life-cycle. Additionally, enable the integration of other components within the Enterprise Data Analytics solution. Service management functions aligned to ITIL (Information Technology Infrastructure Library) 4, encompassed within an agile framework. The Authority requires a route to market to enable the swift procurement of hardware to meet User requirements throughout the project life-cycle. The hardware will be necessary to support an existing cross-classification Data Analytics Platform (OFFICIAL SENSITIVE Cloud & SECRET on-prem), with a Cross-Domain Gateway. Option under Support to SECRET: Support to Cross Domain Gateway (CDG) as a Service: The Authority will require ongoing support to a CDG solution delivered in Q2 2024. The delivered CDG v1.0 capability will be hosted on the higher classification HMI in the interim, with a future requirement to host v2.0 on separate hardware. As a result, the Authority may require the procurement, management, and support for hardware to host v2.0 of the gateway. Suppliers will be required to work in unison with other industry partners & customer engineering teams as directed by the Authority, to enable the successful build of an iterative CDG solution. Where the supplied staff will work West Midlands Who the organisation using the products or services is Ministry of Defence Why the work is being done Current supplier contracts are coming to expiry. Requirements have evolved through lessons identified and greater refined use cases, this now requires a new approach to development and support. The OFFICIAL SENSITIVE tenancy requires migration to allow the Authority to have more control over how the tenancy is managed and how change is initiated. The business problem you need to solve The existing in-service Data Analytics Platform requires continuation of through-life support management. The existing support and delivery contract is due to expire March 24 and MOD must now compete this requirement to ensure that the operational capability does not go unsupported. The current OFFICIAL tenancy is constrained by admin rights that constricts the user experience too much, therefore MOD will move this tenancy to a MOD owned environment Q1 2024. The Authority requires engagement between a new supplier and existing tenancy owner to facilitate any migration activities between current OFFICIAL platform and MOD owned enabling the efficient and successful close down of the legacy platform. The Authority requires the new supplier to integrate closely with the new tenancy build team to facilitate a phased handover for the continuation of the new tenancy build, then support and continually evolve. There will be the requirement to work closely with the existing supplier to efficiently and effectively handover the extant on-premise SECRET platform support contract, with no interruption to the in-service capability. As part of the ongoing support requirement, the Authority expects the supplier, as directed, to deliver continual improvements and evolution to the SECRET platform utilising Infrastructure as Code. While the Authority will guide, there is also the expectation that the new support supplier will maintain knowledge of technology trends through horizon scanning, making recommendations for approval where appropriate. To lead change and encourage a culture of collaboration & compliance in a demanding environment, while informing and supporting governance and control. First user type: Data Analytics Centre (DAC) First user type: Developers First user type: Standard User Enter more details about this user type: As an Internal DAC team, made up of Product and Service functions, Architects, DevSecOps Engineers & Trainers I need to Create/Approve/Implement changes, monitor resource, proactively maintain system uptime, train other users and resolve incidents and problems in an agile manner. Enter more details about this user type: As a developer to the wider organisation I need to Develop products to enhance the data platform, and provide data insights so that I support the user community through their data analysis requirements. Enter more details about this user type: As a Standard User I need to consume the Data, Tooling and Products established on the platform to enable a quicker decision making process.