Notice Information
Notice Title
Multi-Factor Authentication: SMS and Voice Calling
Notice Description
This is to alert interested parties that HM Revenue and Customs is going out to tender to meet its needs for the provision of SMS and Voice Calling as part of a Multi-Factor Authentication process and Customer Service Campaigns. HMRC send out access codes to their customers via SMS or Voice to either landlines or mobiles, anywhere in the world. The Authority intends to award a single supplier contract for the provision of a SMS and Voice Calls service as part of a Multi-Factor Authentication Process. Currently approximately 80 million SMS a year and 2 million voice calls are issued per annum on behalf of HMRC. The service consists of two elements - Multi-Factor Authentication and Customer Service Campaigns. 1) The current scope for the SMS and Voice Calling as part of the Multi-Factor Authentication service is limited to the following: a) To send a 6 digit access code (that expires after 15 minutes) to a customer b) The code can be sent to a landline or mobile via SMS or Voice c) The user could be in the UK or abroad (anywhere in the world) d) The code is sent using a short code associated with HMRC e) To provide a helpdesk function to investigate issues customers have with receiving the access code f) To provide development/changes at nil cost. 2) The SMS service as part of Customer Service Campaigns include all above Multi-Factor Authentication requirements with the below additional requirements: a) Ability to have 2-way SMS if needed, where customers can reply to SMS, and ability to view replies and MI. b) Search Facility, to show all SMS a customer has received. c) Ability to see if SMS has been opened/read. d) A dead number check. The Supplier must check if a number is live or dead before SMS is sent. This must be at a significantly lower cost than the sending of an SMS. If the check fails, this must not prevent the SMS from being sent. Dead numbers will then need to be screened against for future campaigns and removed as necessary. HMRC requires potential providers to comply with the relevant essential requirements below: a.) ISO-27001 Certification as accredited by UKAS or a comparable body, b.) Cyber Essentials Certification c.) Cyber Essentials Plus Certification d.) Pen Testing by CREST approved third party auditor every 3 months for both internal and external system IP's. Tested to OWASP latest guidelines. e.) Dedicated server architecture either third party or owned, must be UKAS accredited to ISO-27001, ISO14001, ISO-9001, ISO18001 f.) Cyber Risk Insurance. g.) Security Patch Management System. Please refer to the additional information section, and relevant documents attached to obtain more information on registering interest for this tender. Additional information: HMRC uses an HMRC instance of SAP Ariba Sourcing Pro (thereafter referred to as HMRC's SAP Ariba) and this must be used to express an interest and/or bid for the opportunity. (Further information about HMRC's SAP Ariba is available on the HMRC website: www.hmrc.gov.uk/about/supplying.htm) Economic operators who have used HMRC's SAP Ariba previously will be registered as part of the HMRC Ariba Supplier Network and you should access the system to obtain your account ID number. Contact details on the system should be checked and, where necessary, additional users added to help avoid multiple registrations for the same organisation. Previously registered users having difficulty recovering their account ID number or identifying users within their organisation should email for assistance sapariba.hmrcsupport@hmrc.gsi.gov.uk. Economic operators using HMRC's SAP Ariba for the first time, including suppliers who are already registered on the wider SAP Ariba supplier network, will need to register at http://hmrc.supplier-eu.ariba.com/ad/register/SSOActions?type=full. (You must ensure that you are directed to the registration page for HMRC's SAP Ariba, identified with the HMRC logo at the top of the page, and to do this you may need to cut and paste the web address directly into your web browser). You will receive a system generated email asking you to activate your SAP Ariba supplier account by verifying your email address. Once you have completed the activation process you will receive a further email confirming the 'registration process is now complete' and providing you with 'your organisation's account ID' number. If an email response from HMRC is not received within one working day of your request, please re-contact sapariba.hmrcsupport@hmrc.gsi.gov.uk (after first checking your spam in-box) notifying non-receipt and confirming when your registration request was first made. Once you have obtained 'your account ID' number, please email Amandip.kang@hmrc.gov.uk and Bhavina.patel1@hmrc.gov.uk with the following information as confirmation that you wish to express an interest and/or bid for the opportunity. The contract reference: MFA SR268256346 Your HMRC SAP Ariba account ID: AN Your organisation's name: Your name: Your email address: Your telephone number: Economic operators who have complied with the foregoing will receive an e-mail confirming access to the online questionnaires. If access is not provided within one working day, please contact amandip.kang@hmrc.gov.uk notifying non-receipt and confirming when your request for access to the online questionnaires was first made. Questionnaires must be fully completed no later 12:00pm on 20/01/2020.
Notice Details
Publication & Lifecycle
- Open Contracting ID
- ocds-b5fd17-2c7fa2fe-6936-4e37-a5b5-1355c974b88a
- Publication Source
- Contracts Finder
- Latest Notice
- https://www.contractsfinder.service.gov.uk/Notice/e4559274-4c07-4e58-aa2f-d6b7307cedae
- Current Stage
- Tender
- All Stages
- Tender
Procurement Classification
- Notice Type
- Tender Notice
- Procurement Type
- Standard
- Procurement Category
- Services
- Procurement Method
- Open
- Procurement Method Details
- Open procedure (above threshold)
- Tender Suitability
- SME
- Awardee Scale
- Not specified
Common Procurement Vocabulary (CPV)
- CPV Divisions
64 - Postal and telecommunications services
-
- CPV Codes
64210000 - Telephone and data transmission services
Notice Value(s)
- Tender Value
- £6,500,000 £1M-£10M
- Lots Value
- Not specified
- Awards Value
- Not specified
- Contracts Value
- Not specified
Notice Dates
- Publication Date
- 23 Dec 20196 years ago
- Submission Deadline
- 20 Jan 2020Expired
- Future Notice Date
- Not specified
- Award Date
- Not specified
- Contract Period
- 31 Mar 2020 - 1 Apr 2022 2-3 years
- Recurrence
- Not specified
Notice Status
- Tender Status
- Active
- Lots Status
- Not Specified
- Awards Status
- Not Specified
- Contracts Status
- Not Specified
Buyer & Supplier
Contracting Authority (Buyer)
- Main Buyer
- H M REVENUE & CUSTOMS
- Contact Name
- Amandip Kang
- Contact Email
- amandip.kang@hmrc.gov.uk
- Contact Phone
- Not specified
Buyer Location
- Locality
- SALFORD
- Postcode
- M60 9LA
- Post Town
- Manchester
- Country
- England
-
- Major Region (ITL 1)
- TLD North West (England)
- Basic Region (ITL 2)
- TLD3 Greater Manchester
- Small Region (ITL 3)
- TLD34 Greater Manchester South West
- Delivery Location
- Not specified
-
- Local Authority
- Salford
- Electoral Ward
- Ordsall
- Westminster Constituency
- Salford
Further Information
Notice Documents
-
https://www.contractsfinder.service.gov.uk/Notice/e4559274-4c07-4e58-aa2f-d6b7307cedae
23rd December 2019 - Opportunity notice on Contracts Finder
Open Contracting Data Standard (OCDS)
View full OCDS Record for this contracting process
The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.
{
"tag": [
"compiled"
],
"id": "ocds-b5fd17-2c7fa2fe-6936-4e37-a5b5-1355c974b88a-2019-12-23T16:04:28Z",
"date": "2019-12-23T16:04:28Z",
"ocid": "ocds-b5fd17-2c7fa2fe-6936-4e37-a5b5-1355c974b88a",
"language": "en",
"initiationType": "tender",
"tender": {
"id": "SR268256346",
"title": "Multi-Factor Authentication: SMS and Voice Calling",
"description": "This is to alert interested parties that HM Revenue and Customs is going out to tender to meet its needs for the provision of SMS and Voice Calling as part of a Multi-Factor Authentication process and Customer Service Campaigns. HMRC send out access codes to their customers via SMS or Voice to either landlines or mobiles, anywhere in the world. The Authority intends to award a single supplier contract for the provision of a SMS and Voice Calls service as part of a Multi-Factor Authentication Process. Currently approximately 80 million SMS a year and 2 million voice calls are issued per annum on behalf of HMRC. The service consists of two elements - Multi-Factor Authentication and Customer Service Campaigns. 1) The current scope for the SMS and Voice Calling as part of the Multi-Factor Authentication service is limited to the following: a) To send a 6 digit access code (that expires after 15 minutes) to a customer b) The code can be sent to a landline or mobile via SMS or Voice c) The user could be in the UK or abroad (anywhere in the world) d) The code is sent using a short code associated with HMRC e) To provide a helpdesk function to investigate issues customers have with receiving the access code f) To provide development/changes at nil cost. 2) The SMS service as part of Customer Service Campaigns include all above Multi-Factor Authentication requirements with the below additional requirements: a) Ability to have 2-way SMS if needed, where customers can reply to SMS, and ability to view replies and MI. b) Search Facility, to show all SMS a customer has received. c) Ability to see if SMS has been opened/read. d) A dead number check. The Supplier must check if a number is live or dead before SMS is sent. This must be at a significantly lower cost than the sending of an SMS. If the check fails, this must not prevent the SMS from being sent. Dead numbers will then need to be screened against for future campaigns and removed as necessary. HMRC requires potential providers to comply with the relevant essential requirements below: a.) ISO-27001 Certification as accredited by UKAS or a comparable body, b.) Cyber Essentials Certification c.) Cyber Essentials Plus Certification d.) Pen Testing by CREST approved third party auditor every 3 months for both internal and external system IP's. Tested to OWASP latest guidelines. e.) Dedicated server architecture either third party or owned, must be UKAS accredited to ISO-27001, ISO14001, ISO-9001, ISO18001 f.) Cyber Risk Insurance. g.) Security Patch Management System. Please refer to the additional information section, and relevant documents attached to obtain more information on registering interest for this tender. Additional information: HMRC uses an HMRC instance of SAP Ariba Sourcing Pro (thereafter referred to as HMRC's SAP Ariba) and this must be used to express an interest and/or bid for the opportunity. (Further information about HMRC's SAP Ariba is available on the HMRC website: www.hmrc.gov.uk/about/supplying.htm) Economic operators who have used HMRC's SAP Ariba previously will be registered as part of the HMRC Ariba Supplier Network and you should access the system to obtain your account ID number. Contact details on the system should be checked and, where necessary, additional users added to help avoid multiple registrations for the same organisation. Previously registered users having difficulty recovering their account ID number or identifying users within their organisation should email for assistance sapariba.hmrcsupport@hmrc.gsi.gov.uk. Economic operators using HMRC's SAP Ariba for the first time, including suppliers who are already registered on the wider SAP Ariba supplier network, will need to register at http://hmrc.supplier-eu.ariba.com/ad/register/SSOActions?type=full. (You must ensure that you are directed to the registration page for HMRC's SAP Ariba, identified with the HMRC logo at the top of the page, and to do this you may need to cut and paste the web address directly into your web browser). You will receive a system generated email asking you to activate your SAP Ariba supplier account by verifying your email address. Once you have completed the activation process you will receive a further email confirming the 'registration process is now complete' and providing you with 'your organisation's account ID' number. If an email response from HMRC is not received within one working day of your request, please re-contact sapariba.hmrcsupport@hmrc.gsi.gov.uk (after first checking your spam in-box) notifying non-receipt and confirming when your registration request was first made. Once you have obtained 'your account ID' number, please email Amandip.kang@hmrc.gov.uk and Bhavina.patel1@hmrc.gov.uk with the following information as confirmation that you wish to express an interest and/or bid for the opportunity. The contract reference: MFA SR268256346 Your HMRC SAP Ariba account ID: AN Your organisation's name: Your name: Your email address: Your telephone number: Economic operators who have complied with the foregoing will receive an e-mail confirming access to the online questionnaires. If access is not provided within one working day, please contact amandip.kang@hmrc.gov.uk notifying non-receipt and confirming when your request for access to the online questionnaires was first made. Questionnaires must be fully completed no later 12:00pm on 20/01/2020.",
"datePublished": "2019-12-23T16:04:28Z",
"status": "active",
"classification": {
"scheme": "CPV",
"id": "64210000",
"description": "Telephone and data transmission services"
},
"items": [
{
"id": "1",
"deliveryAddresses": [
{
"countryName": "British Oversea Territories"
},
{
"countryName": "Channel Islands"
},
{
"countryName": "Europe"
},
{
"countryName": "Isle of Man"
},
{
"countryName": "Rest of the World"
},
{
"countryName": "United Kingdom"
}
]
}
],
"value": {
"amount": 6500000,
"currency": "GBP"
},
"procurementMethod": "open",
"procurementMethodDetails": "Open procedure (above threshold)",
"tenderPeriod": {
"endDate": "2020-01-20T23:59:59Z"
},
"contractPeriod": {
"startDate": "2020-04-01T00:00:00+01:00",
"endDate": "2022-04-01T23:59:59+01:00"
},
"suitability": {
"sme": true,
"vcse": false
},
"mainProcurementCategory": "services",
"documents": [
{
"id": "1",
"documentType": "tenderNotice",
"description": "Opportunity notice on Contracts Finder",
"url": "https://www.contractsfinder.service.gov.uk/Notice/e4559274-4c07-4e58-aa2f-d6b7307cedae",
"datePublished": "2019-12-23T16:04:28Z",
"format": "text/html",
"language": "en"
},
{
"id": "2",
"documentType": "tenderNotice",
"description": "Supplier Guidance",
"url": "https://www.contractsfinder.service.gov.uk/Notice/Attachment/ca171296-aaa8-450a-bca5-5d2bb6a80994",
"format": "application/pdf"
},
{
"id": "3",
"documentType": "tenderNotice",
"description": "OJEU Notice",
"url": "http://ted.europa.eu/udl?uri=TED:NOTICE:609570-2019:TEXT:EN:HTML"
}
]
},
"parties": [
{
"id": "GB-GOR-D25",
"name": "H M Revenue & Customs",
"identifier": {
"legalName": "H M Revenue & Customs",
"scheme": "GB-GOR",
"id": "D25"
},
"address": {
"streetAddress": "3 Stanley Street",
"locality": "Salford",
"postalCode": "M60 9LA",
"countryName": "England"
},
"contactPoint": {
"name": "Amandip Kang",
"email": "amandip.kang@hmrc.gov.uk"
},
"details": {
"url": "http://www.gov.uk/hm-revenue-and-customs"
},
"roles": [
"buyer"
]
}
],
"buyer": {
"id": "GB-GOR-D25",
"name": "H M Revenue & Customs"
}
}