II.1.5)Short description of the contract or purchase(s)The National Policing Improvement Agency (NPIA) has a requirement for the implementation of a national Identity and Access Management (IAM) system, and a Framework Arrangement to provide Criminal Justice Organisations with Identity and Access Management components and services.
These 2 distinct requirements have been split into two Lots under this Contract Notice:
Lot 1 - IAM Central Services
This Lot covers the requirement for the implementation of a National Identification, Authentication and Authorisation service known as Identity and Access Management (IAM). These services provided at a national level are known as ‘Central Services’. The system shall support at least the following services:
— Identity Management Service,
— Authentication Service,
— Public Key Infrastructure,
— Privilege Management Infrastructure,
— Audit capability,
— Session management,
— Portal Service,
— Smartcard management,
— Import/export interfaces,
— Reporting capabilities,
— Federated Services.
Implementation: - A detailed design shall be defined by the provider, subject to the specified standards in the ITT documentation and will require approval by the NPIA. The implementation shall be subject to accreditation by the National Accreditor for Police Systems. Accreditation shall be based upon HMG InfoSec Standards and a relevant Security Accreditation Scheme, which will be detailed in the ITT documentation. The software and hardware components will be installed at a site within the UK, which will be detailed in the ITT documentation. It is envisaged that an installation of a back-up system will also be required at a designated DR site. There will also be a requirement for a duplicate system for testing purposes. The systems will need to be designed, built, tested, implemented and integrated by the provider. The provider shall be required to participate proactively in integration activities that form part of the programme as a whole. A proven training capability for the system users and administration staff will be required.
Support: - Once the system is deployed there will be a requirement to provide management structures and skilled personnel to operate and maintain the services for an initial period of at least 12 months. After this initial period, the NPIA may exercise a right to operate and maintain the services using their own staff, whilst utilising baseline support from the provider. The scope of the overall support requirement includes support that will be required for the integration of a number of national applications into IAM Central Services. The support service should run according to ITIL standards and will be required for up to 10 years from system implementation.
The solution shall adhere to open standards and where possible and appropriate, will use commercial off-the-shelf products.
It is anticipated that the Contract Award for this Lot will be made between late December 2008 - February 2009, and that Implementation will be required to be completed prior to the end of Q2/Q3 in 2009.
Full details of the requirement for this Lot will be set out in the ITT documentation.
Lot 2 - IAM Organisations Requirements
This Lot covers the supply, delivery, installation, configuration, integration and support of Identity & Access Management components (hardware, software and associated ancillaries). The requirement also covers the provision of professional services to implement this equipment plus associated policies and processes, and the option of a partial or fully managed IAM service for Organisations deploying IAM throughout the United Kingdom.
The Framework Arrangement shall provide a provision for an Organisation deploying IAM to procure any of the following:
1. FIPS201 PIV (or equivalent) compliant Smart cards, smart card readers, smart card management systems and all associated middleware;
2. Hardware and software platforms for supporting the IAM Organisations’ implementation of the following components:
— Identity Management Service,
— Authentication Service,
— Public Key Infrastructure,
— Privilege Management Infrastructure,
— Audit capability,
— Session management,
— Portal Service,
— Federated Services.
3. Hardware, software and ancillaries for making local applications available to authorised staff in other IAM Organisations;
4. Professional services to implement/integrate any of the above to existing infrastructure;
5. Professional services to develop local policies and processes for the operation of IAM components, which will be subject to accreditiation;
6. Training capability for IAM Organisation staff;
7. A managed service capable of providing a configurable approach to deliver any of the above on behalf of a requesting IAM Organisation.
The provider shall be required to participate proactively in integration activities that form part of the programme as a whole.
It is anticipated that the Contract Award for this Lot will be made between late December 2008 - February 2009, and that the products and services will be required by IAM Organisations immediately thereafter.
Full details of the requirement for this Lot will be set out in the ITT documentation.
IAM Users - The NPIA may require the supply of such services (or parts of the services) for the benefit of or to a number of organisations, including itself and to such extent and in such circumstances as authorised by the NPIA:
(I) police forces (including regional, national and local forces);
(II) other government departments and agencies;
(III) statutory authorities, non departmental public bodies and local authorities;
(IV) private sector and voluntary organisations;
(V) other bodies; whether or not (in each case) they have a direct interest in the prevention and detection of crime (collectively, (i) to (V) known as the 'permitted bodies').
The successful supplier will be required to work in partnership with the Permitted Bodies and their third party suppliers, for example in accordance with Modernising Government initiatives.
II.2.1)Total quantity or scopeThe IAM requirement is split into two Lots.
Lot 1 covers the development, supply and installation of an Identity and Access Management system, plus ongoing operating and maintenance services for a period of up to 10 years from implementation date.
Lot 2 covers the supply and installation of Identity and Access Management components and associated services to IAM Organisations.
II.2.2)OptionsYes
description of these options: For Lot 1 (Central Services), support of the implemented solution will be required for an intial period of at least one year with an option to extend for up to a further nine years. Full details will appear in the ITT.
For Lot 2 (IAM Organisations Requirement), the entire Framework duration will be for up to 4 years. The Framework will be let for 3 initial years, with an option to extend at the end of year 3, for one year. Full details will appear in the ITT.