Digital, Data, Technology, Cyber Security and Information Management service

Description

Summary of the work We need a delivery partner to provide agile highly-skilled multi-disciplinary Digital, Data, Technology, Information management and Cyber security teams with the flexible capacity to deliver projects that enable FSA services Expected Contract Length 2 years Latest start date Monday 22 November 2021 Budget Range Maximum of £3,000,000. The FSA will not guarantee any minimum spend value under the contract. The FSA may choose to use other routes to market or partners for projects. Why the Work is Being Done The FSA Openness, Digital and Data directorate enables the FSA to deliver services that consumers, businesses and FSA staff need to deliver our mission that food is safe and is what it says it is. We hope to find a flexible outcome-based delivery partner to work with the FSA to enable our delivery and improvement of services: Providing specialist skills and experience for digital, data, technology, information management and cyber security. Providing development and delivery capacity for projects. Importantly we want a partner who demonstrates best practise, enables our people to build their skills and capabilities, with social and environmental values intrinsic in how they work. FSA services need to deliver key business priorities and meet user needs. These services must be secure, robust and meet government standards and accessibility regulations. We look to reuse, before buy, before build. Problem to Be Solved We need a delivery partner to provide agile multi-disciplinary people and teams with flexible capacity to help us develop our services. This includes iteration and integration of existing services and developing new services. This will principally involve providing skilled and experienced development and delivery teams for specified digital, data, technology, information management and cyber security projects. Crucially we want a partner who works in partnership, demonstrates best practise and enables our people to build their skills and capabilities. This engagement will require flexibility and a willingness to adapt as our team evolves to meet our service driven approach. Who Are the Users Everyone in the UK is a potential user of FSA services: As a consumer I need food safety information to keep me and my family safe As a food business I need information to run a food business safely As a Local Authority I need to provide and receive the information I need to maintain food safety controls in my area As an FSA staff member, I need services that enable me to work efficiently and to the best of my ability As FSA Chief Information Officer I need access to DDaT expertise and capacituy to help deliver FSA services As a DDaT professional I want guidance and support from experts to help me develop and build my capabilities Work Already Done We have completed multiple pieces of work including Discovery, Alpha and Beta activity across a range of service areas and technology. You may be involved with work at any stage of the development lifecycle. Existing Team You will be working with the FSA Openness, Data and Digital Directorate (Incorporating Digital, Data, Information Technology and Knowledgement Management Information and Security functions) as well as those Business Teams relevant to the service. This may also include FSA Communications, Policy, Science, Operations, HR, Finance leads. You will also need to work collaboratively with other suppliers and project teams working on digital projects. This may also involve proactively taking on projects from other teams. Current Phase Not applicable Skills & Experience • Experience in rapidly providing digital, data, technology, information management and cyber security expertise and capacity for the delivery of digital services (inc. Digital Data and Technology profession capability framework) • Skills in utilising service design to drive delivery and support for a service focused approach in clients • Experience in taking a portfolio approach to projects, identifying cross project and team benefits, risks and dependencies to ensure success • Capability to provision specialist expertise within a multiskilled project team in technical areas such as records management, cyber security and information knowledge management • Skills in research, designing, prototyping and developing services that meet identified user needs and client standards • Demonstrable experience of challenging the business and identifying actual user needs rather than user wants • Track record of creating Minimum Viable Products and services, ensuring further service iteration is only on evidenced user needs • Experience of identifying, implementing and integrating common off the shelf products to deliver services • Skills in back-end technologies, including databases, use of APIs, data standards and search functionality • Experience utilising existing client technology to deliver projects, including Azure, Office 365, Power Platform, Drupal, Case management • Skilled in implementation of Machine Learning, Artificial Intelligence and robotic automation, demonstrating ethical use of such technology • Skilled in building security and privacy by design into creating public facing content • Experience of meeting cyber security standard and cloud security principles • Demonstrable knowledge and experience of data protection legislation especially Data Protection Impact Assessments • Experience of agile delivery and adopting delivery management that suits the culture and ways of working of the client • Skills in successfully building client capability and successful knowledge transfer so the client has the skills and capabilities for long term service management • Experience of collaborating, partnership working and enabling teams made up of an eco-system of the client organisation, independent contractors, and other partner suppliers • Experience of being open by default, sharing code, data and research with the wider community to maximise public return on investment Nice to Haves • Experience of proactively identifying skills and experience capability needs in client organisations (outside of projects) and advising or supporting the client to cover those gaps • Experience challenging the client to do things better, try alternatives and crucially provide evidence of poor ideas, even if doing so costs the supplier lost revenue in the short term • Experience of proactively advising the client organisation, directorate or team on how they can improve their ways of working Work Location We are flexible about the location of the team, with much of our delivery done by dispersed teams. However if needs be, the expectation is that the team or people will attend key meetings and sessions at various locations within the UK, but principally FSA offices. Working Arrangments You will work to Agile principles. You can primarily work remotely, with occasional face to face, but are expected to work openly and collaboratively on digital channels (using FSA Microsoft 365 services e.g MS Teams) . You are expected to participate in regular check-in calls, stand-ups, planning sessions, show & tells and retrospectives. Statements of work (SoW) will define the development outcomes for each project phase and will be of varied length and size. Enabling knowledge transfer to the FSA during and at the end of a project is critical Security Clearance All supplier team members will need to be cleared to Baseline Personnel Security Standard, and the Supplier lead will be required to sign a non-disclosure agreement (NDA) on behalf of the successful organisation Additional T&Cs Work packages will be released under this contract for each project. These are subject to gaining any required GDS spend approvals. No. of Suppliers to Evaluate 3 Proposal Criteria • How your approach and methodology to working will tie with and enhance FSA ways of working • How your technical proposals will tie in with FSAs approach i.e. reuse (including configuration), then buy (e.g. SaaS) before build (including low code options) • Access to people with relevant skills, knowledge, and experience needed to complete the work, including roles and example CVs • Your outcome focus and delivery of true Minimum Viable Products, based on evidenced user needs, that shorten time to delivering business value. • Knowledge embedding - making knowledge sharing a part of day to day activities and building client capability. • Knowledge embedding - ensuring successful handover at any required stage of a project or a service. • Technical solution/Reusability by design – ensuring solutions are formulated from reusable capabilities, as well as ensuring new capabilities are reusable • How you identify and offer value for money • Case studies of relevant past work, ideally showing how you have worked with organisations similar to FSA • How your technical proposals will tie in with FSAs approach i.e. reuse (including configuration), then buy (e.g. SaaS) before build (including low code options) Cultural Fit Criteria • support in-work progression to help people, including those from disadvantaged groups, develop their skills and achieve their potential, especially within client organisations • support the minimisation and reduction of your clients and your own environmental impact. Especially how you apply this to technology recommendations • work and collaborate with other suppliers in partnership to deliver FSA services • work outloud and openly to make things better, both within the client organisation and beyond • take responsibility and rectify when things go wrong • challenge the business as to their needs and push back when business proposals do not make sense or there is insufficient evidence • How you ensure diversity in teams as diverse teams build things better and are more representative of prospective users • maintain a no-blame culture and encourage people to learn from their mistakes • build inhouse capability Payment Approach Capped time and materials Assessment Method • Case study • Presentation Evaluation Weighting Technical competence 60% Cultural fit 20% Price 20% Questions from Suppliers 1. Is there an incumbent supplier? This service is currently provided by i-10 Limited 2. Would you consider proposal from SME with right skills in a highly regulated Finan dial services background? (we have assumed Finan dial should be financial) Yes, the FSA would consider proposals from any supplier that has the essential skills and experience mentioned in the opportunity. 3. Can you please confirm that there is a presentation stage to this procurement? We have included a presentation as part of the additional assessment methods. We will share details of what the presentation will be on with shortlisted suppliers who are invited to submit a full proposal. 4. Can you please confirm which suppliers have supported you in delivering this type of work to date and if there is anyone you would currently consider as being an incumbent or primary delivery partner? The current incumbent for this is i-10 Ltd. The FSA has previously had a number of different suppliers to provide various aspects of this requirement. 5. Would the Authority accept a Consortium approach for this enquiry? The FSA would consider Consortium approach for this enquiry, however would expect to contract to be in place with a lead organisation 6. Relating to capability to provision specialist expertise within a multiskilled project team in technical areas such as records management, cyber security and information knowledge management.What Record Management system FSA Currently uses? We are currently migrating our records to SharePoint from Wisdom and establishing SharePoint as our principal records management system. Beyond that, there are a small number of specific cases that may use a different product depending on security, this is primarily for sharing with other organisations. 7. Relating to capability to provision specialist expertise within a multiskilled project team in technical areas such as records management, cyber security and information knowledge management.What type of information knowledge management is done in FSA? This covers security, information and records management, data protection, data sharing and information governance. E.g. Carrying out security assurance of suppliers; Ensuring new projects/services adopt a privacy and security by design approach; Advising on Privacy Impact Assessments and Data Sharing Agreements; Liaising with key external bodies like National Archives, Information Commissioner and National Cyber Security Centre. 8. What case management product does FSA use? Please elaborate tech stack. We are currently in the process of procuring a case management product. We do not have an existing product. 9. For ‘Experience of identifying, implementing and integrating common off the shelf products to deliver services’What COTs products does FSA intend to integrate? Could you elaborate current architecture, tech stack, integration requirments to give us a better view. Principally our planned case management product with new or existing products and services. For example, we are currently looking at products for Health and Safety Management as well as Rotas or perhaps with existing products e.g. active directory. It will depend on the specific use case. 10. Could you please elaborate what evidence you want from supplier in this question? “Experience of being open by default, sharing code, data and research with the wider community to maximise public return on investment.” How do you share the work you have done? Do you publish research, information, and Open-Source code on GitHub or somewhere else? Do you blog about lessons learned? How can others in the public sector benefit from similar work you’ve done with other public sector bodies? Do you share or encourage others to share their data? Making things open generally makes things better.