Internet Connection Record 2

Description

Summary of the work The services will include support for (as a minimum): - Architectural design, integration, configuration, testing and deployment of bespoke software and hardware. - Development of quality commercial grade code and documentation. - Participate in showcases of work to stakeholders Expected Contract Length March 2020 Latest start date Wednesday 31 July 2019 Why the Work is Being Done The NCA is developing requirements for the Internet Connection Record National Service to be delivered by Home Office. The ability to require Telecommunications Operators (TOs) to retain limited information about a person’s / device’s internet activity came about as a result of passage of the Investigatory Powers Act 2016. As part of developing those requirements and enhancing our understanding of associated risk, issues and dependencies, it is proposed to run a limited ‘live trial’ of ICR capability over a six month period from August 2019, with one or more UK TOs. This trial will run from the NCA. Problem to Be Solved In order to support the trial above the IDU requires a network appliance integration and bespoke software development service. The trial will prove the technical achievability, and operational value of ICRs. The service is required to configure Gigamon collection capability, identical to that which will be used within the TO engaged in the trial, in order to allow work on trial data manipulation in advance of the trial starting. This individual will also be responsible for designing and configuring the data flow and enrichment requirements for the trial including enabling the disclosed data to be ‘categorised’ from external datasets. . Who Are the Users The recipients of the outputs of this work will be the project team for the trial activities. Early Market Engagement Enquiries have indicated that the required resource is available from companies on the DOS3 Framework.. Work Already Done Significant work has already been invested in ICR service provision by a joint Home Office and NCA team and from which this Live Trial has been developed. Existing Team IDU CCIC staff will support the trial. Current Phase Discovery Skills & Experience • Experience with Gigamon network monitoring equipment integration and configuration - 30 Points • Experience of building and integrating network logging solutions - 15 Points • Experience of network data enrichment using reference data sets and other source data - 25 Points • Ability to assist with pre-release and release processes including final testing, correction and documentation preparation - 5 Points • Strong understanding of JIRA and Confluence - 5 Points • Experience with Elasticsearch / Kibana - 5 Points • Experience of configuring log analysis applications and databases - 20 Points • Knowledge and experience of working with UK Law Enforcement (specifically prior experience with the NCA) - 20 Points Nice to Haves • Solution Architecture - 5 Points • Ability to write structured, maintainable, commercial quality code to a consistent predefined standard - 5 Points • Familiarity with communications data and targeted intercept - 20 Points Work Location IDU CCIC, Spring Gardens Estate, London Working Arrangments The service will be required on a call off basis up to an estimated maximum of 40 days of effort to be delivered over the course of the FY (to the end of March 2020). It is anticipated that the work will be front loaded with less support required during and after the trial. Security Clearance Minimum SC cleared with NCA Top Up. Additional T&Cs Additional terms will be sent out shortlisted suppliers. These will include FOIA terms as the NCA is not subject to FOI requests. Security terms to include Security aspects letter, information security. Shortlisted suppliers will be required to utilise Bravo during the assement stage. At this stage you will need to create an account on the Bravosolutions E-Sourcing portal. No. of Suppliers to Evaluate 4 Proposal Criteria • The proposed approach and methodology - 5 Points • Other relevant skills and experience which may be of benefit to operational activities - 5 Points Cultural Fit Criteria • Working closely with a range of government employees and other consultancies and specialists. Ideally demonstrating having worked successfully in a rainbow team such as this on prior engagements - 5 • Willingness to be flexible to accommodate the needs of the organisation - 5 Points Payment Approach Time and materials Evaluation Weighting Technical competence 75% Cultural fit 5% Price 20% Questions from Suppliers 1. What is your allocated budget? Have specified the FTE time required for each role and would expect suppliers to provide at published rate card. 2. In the Problem to be solved section of the listing the final sentence refers to an individual. Are you expecting this service to be provided by a single resource for the 40 estimated days? For continuity, our preference would be for a single resource but if necessary we can accommodate more than one. 3. Are you using standard scoring and, if so, how does a supplier achieve a 3 versus a 2 on this opportunity for the essential and nice-to-haves? If you are not using standard scoring, can you please explain your scoring methodology? The NCA will be using the standard scoring card as per the DoS 3 framework guidance but we have provided some clarification below on our interpretation of the scores.0. The response provides information of such a poor standard as to provide no confidence that the service meets the requirement.1. The suppliers response provides some clear strengths but giving some concern.2. A good response where strengths clearly outweigh any minor weaknesses.3. Robust and fully comprehensive response. 4. The NCA would like to confirm that this requirement is being conducted as per the guidance of the DoS 3 framework and as such the evaluation process will be fair, open and transparent. The NCA would like to confirm that this requirement is being conducted as per the guidance of the DoS 3 framework and as such the evaluation process will be fair, open and transparent. 5. The NCA would like to confirm that any suppliers involved in the development of requirements will not be permitted to submit bids for the same requirement. The NCA would like to confirm that any suppliers involved in the development of requirements will not be permitted to submit bids for the same requirement.