Notice Information
Notice Title
Home Office Child Abuse Image Database (CAID) Hosting and Associated Services 2 - Market Engagement
Notice Description
The Child Abuse Image Database (CAID) is the central image, video and hash store and associated applications that supports the identification of victims, depicted in Indecent Images of Children, and offenders that possess, distribute, and produce such imagery. CAID is a live critical Law Enforcement system, contracted through the Home Office. The current contract for CAID Hosting will expire March 2026 and CAID wants to re-procure these services which include: * providing hosted and managed scalable infrastructure to operate the CAID live and test environments, * providing connectivity of the infrastructure to UK law enforcement, and other stakeholders, with appropriate security and encryption, * service management to maintain and update the infrastructure, supporting capabilities and CAID application suite, and * protective monitoring of the infrastructure, CAID applications, Databases, and other software components. All live CAID environments must be secured to host illegal media and highly sensitive personal data that is classed as Official (SENSITIVE). The Buyer currently considers this means: * Hosted in UK based datacentres with Police Assured Secured Facility status, including the use of Tier 1 public cloud providers. * Separated from other tenants so that underlying infrastructure providers have no access to the CAID applications or data. * Secured connectivity and internal zone security. * Regular scanning for vulnerabilities. * A holistic anti-malware solution. * Encrypted data at rest, with customer managed keys. * Full auditing of administration and user activity. * Monitored via Protective Monitoring. * Strong RBAC with granular control. This exercise will assess the marketplace and includes, * Details of the CAID requirement and a questionnaire will be shared with suppliers who must first sign and return a Non-Disclosure Agreement/Security Aspects Letter (NDA/SAL) before material can be released. Please email the CAID Commercial Team, by 5th June 2024, at CAIDCommercial@homeoffice.gov.uk headed, 'Home Office CAID Hosting and Associated Services 2 Market Engagement' to register your interest. * The NDA/SAL will then be sent for signature and return to the CAIDCommercial email address so material can be released. * An online briefing event will be held in summer 2024, for those suppliers who signed an NDA/SAL, to explain the requirement and answer questions. * The Team may conduct virtual online sessions with interested suppliers that complete and return the questionnaire. Note-the Home Office reserves the right to not hold virtual sessions. The CAID Team will assess the results of this exercise and if a Tender exercise is agreed on, another PIN will be issued with details of the competition and services. This is a zero value PIN for early market engagement for information only and is not a call for competition. The Home Office reserves the right not to enter a formal procurement process or proceed with contract award. Additional information: This exercise aims to gain an understanding and insight into the services available and suppliers who could provide these services. This will inform the tender process and the specification of services. Therefore, this PIN is intended to signal the start of an information gathering exercise. CAID's Hosting and Service Management has been provided since 2014 via the Public Service Network for Policing (PSNfP) contract. Previously legal opinion, last updated in 2020, was that due to considerable data protection and other legal concerns, CAID data should not be held on cloud hosted infrastructure and should remain within Police owned data centres. Since this advice was given there has been considerable development in both cloud hosting technology and the needs and approaches of law enforcement efforts to combat child sexual abuse and exploitation. As such, this opinion had been revisited and it is now considered that removing these restrictions can be compliant with data protection requirements.
Notice Details
Publication & Lifecycle
- Open Contracting ID
- ocds-b5fd17-5af0eeb3-e24d-421e-bedc-d53bd0c25593
- Publication Source
- Contracts Finder
- Latest Notice
- https://www.contractsfinder.service.gov.uk/Notice/e7a7baf8-b279-4d72-9001-2cdb04147991
- Current Stage
- Planning
- All Stages
- Planning
Procurement Classification
- Notice Type
- Market Engagement Notice
- Procurement Type
- Standard
- Procurement Category
- Not specified
- Procurement Method
- Not Specified
- Procurement Method Details
- Not specified
- Tender Suitability
- SME
- Awardee Scale
- Not specified
Common Procurement Vocabulary (CPV)
- CPV Divisions
72 - IT services: consulting, software development, Internet and support
-
- CPV Codes
72000000 - IT services: consulting, software development, Internet and support
Notice Value(s)
- Tender Value
- Not specified
- Lots Value
- Not specified
- Awards Value
- Not specified
- Contracts Value
- Not specified
Notice Dates
- Publication Date
- 21 May 20241 years ago
- Submission Deadline
- Not specified
- Future Notice Date
- 5 Jun 2024Expired
- Award Date
- Not specified
- Contract Period
- Not specified - Not specified
- Recurrence
- Not specified
Notice Status
- Tender Status
- Planning
- Lots Status
- Not Specified
- Awards Status
- Not Specified
- Contracts Status
- Not Specified
Buyer & Supplier
Contracting Authority (Buyer)
- Main Buyer
- HOME OFFICE
- Contact Name
- Robert McMullan
- Contact Email
- caidcommercial@homeoffice.gov.uk
- Contact Phone
- Not specified
Buyer Location
- Locality
- LONDON
- Postcode
- SW1P 4DF
- Post Town
- South West London
- Country
- England
-
- Major Region (ITL 1)
- TLI London
- Basic Region (ITL 2)
- TLI3 Inner London - West
- Small Region (ITL 3)
- TLI35 Westminster and City of London
- Delivery Location
- Not specified
-
- Local Authority
- Westminster
- Electoral Ward
- St James's
- Westminster Constituency
- Cities of London and Westminster
Further Information
Notice Documents
-
https://www.contractsfinder.service.gov.uk/Notice/e7a7baf8-b279-4d72-9001-2cdb04147991
21st May 2024 - Early engagement notice on Contracts Finder
Open Contracting Data Standard (OCDS)
View full OCDS Record for this contracting process
The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.
{
"tag": [
"compiled"
],
"id": "ocds-b5fd17-5af0eeb3-e24d-421e-bedc-d53bd0c25593-2024-05-21T11:32:20+01:00",
"date": "2024-05-21T11:32:20+01:00",
"ocid": "ocds-b5fd17-5af0eeb3-e24d-421e-bedc-d53bd0c25593",
"language": "en",
"initiationType": "tender",
"title": "Home Office Child Abuse Image Database (CAID) Hosting and Associated Services 2 - Market Engagement",
"planning": {
"milestones": [
{
"id": "1",
"title": "Engagement end date",
"type": "engagement",
"dueDate": "2024-06-05T23:59:59+01:00"
}
],
"documents": [
{
"id": "1",
"documentType": "marketEngagementNotice",
"description": "Early engagement notice on Contracts Finder",
"url": "https://www.contractsfinder.service.gov.uk/Notice/e7a7baf8-b279-4d72-9001-2cdb04147991",
"datePublished": "2024-05-21T11:32:19+01:00",
"format": "text/html",
"language": "en"
}
]
},
"tender": {
"id": "9651",
"title": "Home Office Child Abuse Image Database (CAID) Hosting and Associated Services 2 - Market Engagement",
"description": "The Child Abuse Image Database (CAID) is the central image, video and hash store and associated applications that supports the identification of victims, depicted in Indecent Images of Children, and offenders that possess, distribute, and produce such imagery. CAID is a live critical Law Enforcement system, contracted through the Home Office. The current contract for CAID Hosting will expire March 2026 and CAID wants to re-procure these services which include: * providing hosted and managed scalable infrastructure to operate the CAID live and test environments, * providing connectivity of the infrastructure to UK law enforcement, and other stakeholders, with appropriate security and encryption, * service management to maintain and update the infrastructure, supporting capabilities and CAID application suite, and * protective monitoring of the infrastructure, CAID applications, Databases, and other software components. All live CAID environments must be secured to host illegal media and highly sensitive personal data that is classed as Official (SENSITIVE). The Buyer currently considers this means: * Hosted in UK based datacentres with Police Assured Secured Facility status, including the use of Tier 1 public cloud providers. * Separated from other tenants so that underlying infrastructure providers have no access to the CAID applications or data. * Secured connectivity and internal zone security. * Regular scanning for vulnerabilities. * A holistic anti-malware solution. * Encrypted data at rest, with customer managed keys. * Full auditing of administration and user activity. * Monitored via Protective Monitoring. * Strong RBAC with granular control. This exercise will assess the marketplace and includes, * Details of the CAID requirement and a questionnaire will be shared with suppliers who must first sign and return a Non-Disclosure Agreement/Security Aspects Letter (NDA/SAL) before material can be released. Please email the CAID Commercial Team, by 5th June 2024, at CAIDCommercial@homeoffice.gov.uk headed, 'Home Office CAID Hosting and Associated Services 2 Market Engagement' to register your interest. * The NDA/SAL will then be sent for signature and return to the CAIDCommercial email address so material can be released. * An online briefing event will be held in summer 2024, for those suppliers who signed an NDA/SAL, to explain the requirement and answer questions. * The Team may conduct virtual online sessions with interested suppliers that complete and return the questionnaire. Note-the Home Office reserves the right to not hold virtual sessions. The CAID Team will assess the results of this exercise and if a Tender exercise is agreed on, another PIN will be issued with details of the competition and services. This is a zero value PIN for early market engagement for information only and is not a call for competition. The Home Office reserves the right not to enter a formal procurement process or proceed with contract award. Additional information: This exercise aims to gain an understanding and insight into the services available and suppliers who could provide these services. This will inform the tender process and the specification of services. Therefore, this PIN is intended to signal the start of an information gathering exercise. CAID's Hosting and Service Management has been provided since 2014 via the Public Service Network for Policing (PSNfP) contract. Previously legal opinion, last updated in 2020, was that due to considerable data protection and other legal concerns, CAID data should not be held on cloud hosted infrastructure and should remain within Police owned data centres. Since this advice was given there has been considerable development in both cloud hosting technology and the needs and approaches of law enforcement efforts to combat child sexual abuse and exploitation. As such, this opinion had been revisited and it is now considered that removing these restrictions can be compliant with data protection requirements.",
"status": "planning",
"classification": {
"scheme": "CPV",
"id": "72000000",
"description": "IT services: consulting, software development, Internet and support"
},
"items": [
{
"id": "1",
"deliveryAddresses": [
{
"countryName": "United Kingdom"
}
]
}
],
"suitability": {
"sme": true,
"vcse": false
}
},
"parties": [
{
"id": "GB-SRS-sid4gov.cabinetoffice.gov.uk/s4Rw35Tf",
"name": "Home Office",
"identifier": {
"legalName": "Home Office",
"scheme": "GB-SRS",
"id": "sid4gov.cabinetoffice.gov.uk/s4Rw35Tf"
},
"address": {
"streetAddress": "Peel Building, Marsham Street",
"locality": "LONDON",
"postalCode": "SW1P4DF",
"countryName": "England"
},
"contactPoint": {
"name": "Robert McMullan",
"email": "caidcommercial@homeoffice.gov.uk"
},
"roles": [
"buyer"
]
}
],
"buyer": {
"id": "GB-SRS-sid4gov.cabinetoffice.gov.uk/s4Rw35Tf",
"name": "Home Office"
}
}