Host, manage, maintain and running of The National Security Vetting System

{
  "id": "022387-2023",
  "tag": [
    "award",
    "contract"
  ],
  "date": "2023-08-01T17:46:22+01:00",
  "ocid": "ocds-h6vhtk-03ec35",
  "buyer": {
    "id": "GB-FTS-8358",
    "name": "Cabinet Office"
  },
  "awards": [
    {
      "id": "022387-2023-1",
      "status": "active",
      "suppliers": [
        {
          "id": "GB-FTS-52597",
          "name": "CGI IT UK Limited"
        }
      ],
      "relatedLots": [
        "1"
      ]
    }
  ],
  "tender": {
    "id": "ocds-h6vhtk-03ec35",
    "lots": [
      {
        "id": "1",
        "hasOptions": false,
        "description": "This Voluntary Ex Ante Transparency (VEAT) notice relates to the provisions of services to host, manage, maintain and run Cabinet Office's UK Security Vetting (UKSV) Agency's National Security Vetting System (NSVS). This is a direct award for the services provided by the incumbent in the running of the existing NSVS system, which is a critical security system used by HMG and a significant component of this legacy system's Intellectual Property (IP) is owned by the incumbent. The NSVS system sits in a highly secured accredited environment.  \nThis legacy system is about 10 years old and is in need of transformation. The transformation programme to develop a new vetting system is separately being looked at by UKSV. \nNSVS is faced by highly sophisticated attacks conducted by nation-states with near-limitless resources. A complex set of specific requirements are needed to help keep NSVS (and more importantly the vetting data that it holds) safe and secure, which are being developed as part of the planning for a replacement system and service. The current system is held in a high trust environment in the MoD estate, accredited to a set of standards set by the UK Government's National Technical Authorities including the National Cyber Security Centre and the National Protective Security Authority (NPSA, formerly CPNI). The system is subject to monitoring and access control procedures that are conducted by the MoD, tailored to the configuration of the NSVS system and platform.\nThe National Security Vetting System (NSVS) was built by the incumbent, who was consequently awarded the contract to host, manage, maintain and run NSVS. Built around its predecessor, NSVS was launched into service in 2015. The current contract includes the NSVS service provision and management approach, underpinned by their delivery model below. \nThe NSVS service comprises the following features:\n●\tService governance;\n●\tIn service management;\n●\tService desk;\n●\tInformation Technology Infrastructure Library (ITIL shared services);\n●\tData centres;\n●\tHosting services and event management;\n●\tSecurity Operations Centre monitoring;\n●\tApplication management;\n●\tManagement of change.\nIn addition, the new contract provides enhanced performance management and reporting, clear exit obligations and a value for money commercial model. These new provisions will mean that the UKSV transformation programme can open up options for a long-term replacement solution for NSVS."
      }
    ],
    "items": [
      {
        "id": "1",
        "relatedLot": "1",
        "deliveryAddresses": [
          {
            "region": "UKI"
          }
        ],
        "additionalClassifications": [
          {
            "id": "72212170",
            "scheme": "CPV",
            "description": "Compliance software development services"
          }
        ]
      }
    ],
    "title": "Host, manage, maintain and running of The National Security Vetting System",
    "status": "complete",
    "legalBasis": {
      "id": "32014L0024",
      "scheme": "CELEX"
    },
    "description": "This Voluntary Ex Ante Transparency (VEAT) notice relates to the provisions of services to host, manage, maintain and run Cabinet Office's UK Security Vetting (UKSV) Agency's National Security Vetting System (NSVS). This is a direct award for the services provided by the incumbent in the running of the existing NSVS system, which is a critical security system used by HMG and a significant component of this legacy system's IP is owned by the incumbent. The NSVS system sits in a highly secured accredited environment.  \nThis legacy system is about 10 years old and is in need of transformation. The transformation programme to develop a new vetting system is separately being looked at by UKSV.",
    "classification": {
      "id": "72212100",
      "scheme": "CPV",
      "description": "Industry specific software development services"
    },
    "procurementMethod": "limited",
    "mainProcurementCategory": "services",
    "procurementMethodDetails": "Negotiated without publication of a contract notice",
    "procurementMethodRationale": "NSVS is the only IT platform available to process requests for national security vetting that meets the requirements of both UKSV and its customers. UKSV is an important apparatus protecting the UK from attack by ensuring that suitably qualified people are appropriately vetted during the appointment process. A surge in demand caused by the war in Ukraine and a backlog due to Covid-19 placed increased pressure on the system which has delayed any meaningful transformation work. Cabinet Office has resumed work on transformation but it is not practically possible for a replacement system for NSVS, supplied by an economic operator other than the incumbent, to be procured and operational in time for the expiry of the current contract in February 2024 because:\n•\tthere are no suitable commercial off the shelf products available that would support a quick re-procurement exercise;\n•\treplacing the incumbent with another supplier would mean replicating a very specific set of security controls and building a new environment to manage that complexity, which cannot be done before February 2024; and\n•\tThe incumbent owns essential intellectual property that interfaces with another supplier's software and systems. Any new supplier would need to build a similar interface solution to connect to multiple sources and translate data into suitable formats for the rest of the system to process which would require a considerable length of time.",
    "procurementMethodRationaleClassifications": [
      {
        "id": "D_TECHNICAL",
        "scheme": "TED_PT_AWARD_CONTRACT_WITHOUT_CALL",
        "description": "The works, supplies or services can be provided only by a particular economic operator due to absence of competition for technical reasons"
      }
    ]
  },
  "parties": [
    {
      "id": "GB-FTS-8358",
      "name": "Cabinet Office",
      "roles": [
        "buyer"
      ],
      "address": {
        "region": "UKI32",
        "locality": "LONDON",
        "postalCode": "SW1A2AS",
        "countryName": "United Kingdom",
        "streetAddress": "70 Whitehall"
      },
      "details": {
        "url": "https://www.gov.uk/government/organisations/cabinet-office",
        "classifications": [
          {
            "id": "MINISTRY",
            "scheme": "TED_CA_TYPE",
            "description": "Ministry or any other national or federal authority, including their regional or local subdivisions"
          },
          {
            "id": "03",
            "scheme": "COFOG",
            "description": "Public order and safety"
          }
        ]
      },
      "identifier": {
        "legalName": "Cabinet Office",
        "noIdentifierRationale": "notOnAnyRegister"
      },
      "contactPoint": {
        "name": "Chris Barlow",
        "email": "commercial@cabinetoffice.gov.uk"
      }
    },
    {
      "id": "GB-FTS-52597",
      "name": "CGI IT UK Limited",
      "roles": [
        "supplier"
      ],
      "address": {
        "region": "UKI",
        "locality": "London",
        "countryName": "United Kingdom"
      },
      "details": {
        "scale": "large"
      },
      "identifier": {
        "legalName": "CGI IT UK Limited",
        "noIdentifierRationale": "notOnAnyRegister"
      }
    },
    {
      "id": "GB-FTS-124",
      "name": "Public Procurement Review Service",
      "roles": [
        "reviewBody"
      ],
      "address": {
        "locality": "London",
        "countryName": "United Kingdom"
      },
      "identifier": {
        "legalName": "Public Procurement Review Service"
      }
    }
  ],
  "language": "en",
  "contracts": [
    {
      "id": "022387-2023-1",
      "value": {
        "amount": 0.01,
        "currency": "GBP"
      },
      "status": "active",
      "awardID": "022387-2023-1",
      "dateSigned": "2023-08-01T00:00:00+01:00"
    }
  ],
  "initiationType": "tender"
}