Secure Service Design

Description

The Services to be provided by the Supplier under the above Lot are listed in Framework Section 2 and outlined below: • Maintenance and enhancement of existing Secure Service Design Products. • Secure Service Design Requirements • Secure Service Design Architecture Brief • UMA Design • UMA Profile • Secure Service Design Privacy Model • Secure Service Design Risk and Trust Profile • Secure Integration • Architectural Briefs for data/dashboard providers • Provide technical expertise to support pre-procurement engagement followed by the procurement activity that is anticipated to commence in April 2021. This will include, responding to supplier questions, reviewing documentation & ongoing support throughout the procurement process. • Service elements: Provide advice, training and support to the team on the following: • Review and analysis of the end to end service (review) • Assess risk & trust needs of your service (risks, standards, design) • Define identity and authentication needs, and their management over time (architecture, standards, design) • Define trust and risk profile of service and its transactions (risk and trust framework, design) • Set identity and trust architecture, securing and authenticating transactions not just user identity (architecture, risk and trust framework, standards) • Establish trusted attribute / verified attribute service design (design) 6 • Define privacy principles, privacy model, consent management and privacy capabilities, prepare for DPIA (privacy framework, architecture, design) • Apply standards for identity, authentication, authorisation and trust eco-system design (profile standards, design) • Define data and meta-data model for integrity and reuse (defining meta-data standards, design) • Ensuring end to end coherent and configurable authorisation capability across: person, browser/device, organisation, system, API, service (architecture, standards, design) • Provide support to the appointed supplier in understanding the secure service design through their discovery and alpha delivery stages. • Training - Mentoring and Support of PDP technology team, ITT team in use of existing and enhanced Secure Service Definition Products. It is expected that the bulk of the service delivered under this contract will be to provide mentoring and support services to PDP covering the service elements listed above. • Further deliverables may be defined, related to the design, specification of requirements and delivery of the secure service.