Notice Information
Notice Title
Request for Information - Content thread removal service
Notice Description
As part of our Digital Services provision, the SSS requires to build and support a technology platform which can detect and remove malicious content from digital content for the following use cases: (1) Upload of content by citizens or third parties during the benefit applications process (2) Transfer of data between SSS and third-parties or government departments. This Content Threat Removal Service will contribute to the design of supporting systems to facilitate The Scottish Government in delivering valued services safely. This is a Request for Information and is to attain indicative costs and learning options only, this is document does not create, obligate or guarantee a contract or framework agreement.
Lot Information
Lot 1
Following devolvement of powers over a range of disability benefits to the Scottish Parliament under the Scotland Act 2016, the Scottish Government is looking to provide support to the development of Scotland's Social Security Agency. As part of our Digital Services provision, the SSS requires to build and support a technology platform which can detect and remove malicious content from digital content for the following use cases: (1) Upload of content by citizens or third parties during the benefit applications process (2) Transfer of data between SSS and third-parties or government departments. This Content Threat Removal Service will contribute to the design of supporting systems to facilitate The Scottish Government in delivering valued services safely. It is anticipated that contracts for the Content Threat Removal Service will commence in Summer 2019 and run continuously for a minimum of 1 year, with the possibility of a contract extension for a further year. (This is only indicative, Scottish Government reserves the right to change or amend the term). This is a Request for Information and is to attain indicative costs and learning options only, this is document does not create, obligate or guarantee a contract or framework agreement. Social Security Scotland (SSS) is currently reviewing options to provide a technology platform which will scan and prevent files containing malicious content from being imported to SSS Digital Platforms over various channels including public-facing web portals, file transfer traffic, web services traffic, and email. Proposed technical controls should include: 1. Enforcement of uni-directional flow control to ensure data only flows one way through our channels. 2. Enforcement of a protocol break which terminates the network connection and application protocol, with the connection being re-built at a later stage to prevent protocol based attacks. 3. Transformation engine which processes an object with a complex data format (e.g. Microsoft Office document) into a simple format, removes unwanted content such as active code (e.g. macros or scripts), rendering the malicious code ineffective, and then re-builds the object back into its original format for onward transfer to the destination. 4. Syntactic verification of content to ensure the structure and syntax of an object are correct (e.g. content is valid XML or JSON which conforms to a specified schema). Verification components should ensure all potentially active content has been removed. Digital content in scope include but are not limited to: Productivity documents (e.g. Microsoft Office or Adobe PDF documents) Image files - multiple formats Audio files - multiple formats Video files - multiple formats XML/JSON files
Notice Details
Publication & Lifecycle
- Open Contracting ID
- ocds-r6ebe6-0000588473
- Publication Source
- Public Contracts Scotland
- Latest Notice
- https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=JUN358038
- Current Stage
- Planning
- All Stages
- Planning
Procurement Classification
- Notice Type
- PCS Notice - Website Prior Information Notice
- Procurement Type
- Framework
- Procurement Category
- Services
- Procurement Method
- Not Specified
- Procurement Method Details
- Not specified
- Tender Suitability
- Not specified
- Awardee Scale
- Not specified
Common Procurement Vocabulary (CPV)
- CPV Divisions
72 - IT services: consulting, software development, Internet and support
-
- CPV Codes
72222300 - Information technology services
72267100 - Maintenance of information technology software
Notice Value(s)
- Tender Value
- £1
- Lots Value
- Not specified
- Awards Value
- Not specified
- Contracts Value
- Not specified
Notice Dates
- Publication Date
- 21 Jun 20196 years ago
- Submission Deadline
- Not specified
- Future Notice Date
- 30 Aug 2019Expired
- Award Date
- Not specified
- Contract Period
- Not specified - Not specified
- Recurrence
- Not specified
Notice Status
- Tender Status
- Planned
- Lots Status
- Planned
- Awards Status
- Not Specified
- Contracts Status
- Not Specified
Buyer & Supplier
Contracting Authority (Buyer)
- Main Buyer
- SCOTTISH GOVERNMENT
- Contact Name
- Not specified
- Contact Email
- ian.whitelaw@gov.scot
- Contact Phone
- +44 1312445522
Buyer Location
- Locality
- EDINBURGH
- Postcode
- EH6 6QQ
- Post Town
- Edinburgh
- Country
- Scotland
-
- Major Region (ITL 1)
- TLM Scotland
- Basic Region (ITL 2)
- TLM1 East Central Scotland
- Small Region (ITL 3)
- TLM13 City of Edinburgh
- Delivery Location
- TLM Scotland
-
- Local Authority
- City of Edinburgh
- Electoral Ward
- Leith
- Westminster Constituency
- Edinburgh North and Leith
Further Information
Notice Documents
-
https://www.publiccontractsscotland.gov.uk/NoticeDownload/DownloadDocument.aspx?id=JUN358038&idx=1
21st June 2019 - Request for information - Content threat removal services -
https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=JUN358038
Request for Information - Content thread removal service - As part of our Digital Services provision, the SSS requires to build and support a technology platform which can detect and remove malicious content from digital content for the following use cases: (1) Upload of content by citizens or third parties during the benefit applications process (2) Transfer of data between SSS and third-parties or government departments. This Content Threat Removal Service will contribute to the design of supporting systems to facilitate The Scottish Government in delivering valued services safely. This is a Request for Information and is to attain indicative costs and learning options only, this is document does not create, obligate or guarantee a contract or framework agreement.
Open Contracting Data Standard (OCDS)
View full OCDS Record for this contracting process
The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.
{
"tag": [
"compiled"
],
"id": "ocds-r6ebe6-0000588473-2019-06-21T00:00:00Z",
"date": "2019-06-21T00:00:00Z",
"ocid": "ocds-r6ebe6-0000588473",
"initiationType": "tender",
"parties": [
{
"id": "org-5",
"name": "Scottish Government",
"identifier": {
"legalName": "Scottish Government"
},
"address": {
"streetAddress": "Victoria Quay, Leith",
"locality": "Edinburgh",
"region": "UKM",
"postalCode": "EH6 6QQ"
},
"contactPoint": {
"email": "ian.whitelaw@gov.scot",
"telephone": "+44 1312445522",
"url": "http://"
},
"roles": [
"buyer",
"centralPurchasingBody"
],
"details": {
"classifications": [
{
"id": "Ministry or any other national or federal authority, including their regional or local subdivisions",
"scheme": "TED_CA_TYPE"
},
{
"id": "01",
"description": "General public services",
"scheme": "COFOG"
}
],
"url": "http://www.scotland.gov.uk"
}
}
],
"buyer": {
"name": "Scottish Government",
"id": "org-5"
},
"planning": {
"documents": [
{
"id": "JUN358038",
"documentType": "plannedProcurementNotice",
"title": "Request for Information - Content thread removal service",
"description": "As part of our Digital Services provision, the SSS requires to build and support a technology platform which can detect and remove malicious content from digital content for the following use cases: (1) Upload of content by citizens or third parties during the benefit applications process (2) Transfer of data between SSS and third-parties or government departments. This Content Threat Removal Service will contribute to the design of supporting systems to facilitate The Scottish Government in delivering valued services safely. This is a Request for Information and is to attain indicative costs and learning options only, this is document does not create, obligate or guarantee a contract or framework agreement.",
"url": "https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=JUN358038",
"format": "text/html"
}
]
},
"tender": {
"id": "ocds-r6ebe6-0000588473",
"title": "Request for Information - Content thread removal service",
"description": "As part of our Digital Services provision, the SSS requires to build and support a technology platform which can detect and remove malicious content from digital content for the following use cases: (1) Upload of content by citizens or third parties during the benefit applications process (2) Transfer of data between SSS and third-parties or government departments. This Content Threat Removal Service will contribute to the design of supporting systems to facilitate The Scottish Government in delivering valued services safely. This is a Request for Information and is to attain indicative costs and learning options only, this is document does not create, obligate or guarantee a contract or framework agreement.",
"status": "planned",
"items": [
{
"id": "1",
"additionalClassifications": [
{
"id": "72267100",
"scheme": "CPV"
}
],
"deliveryLocation": {
"description": "Glasgow"
},
"deliveryAddresses": [
{
"region": "UKM"
}
],
"relatedLot": "1"
}
],
"value": {
"amount": 1,
"currency": "GBP"
},
"mainProcurementCategory": "services",
"documents": [
{
"id": "JUN358038-1",
"title": "Request for information - Content threat removal services",
"url": "https://www.publiccontractsscotland.gov.uk/NoticeDownload/DownloadDocument.aspx?id=JUN358038&idx=1",
"datePublished": "2019-06-21T14:29:49Z",
"dateModified": "2019-06-21T14:29:49Z",
"format": "application/vnd.openxmlformats-officedocument.wordprocessingml.document"
}
],
"lots": [
{
"id": "1",
"description": "Following devolvement of powers over a range of disability benefits to the Scottish Parliament under the Scotland Act 2016, the Scottish Government is looking to provide support to the development of Scotland's Social Security Agency. As part of our Digital Services provision, the SSS requires to build and support a technology platform which can detect and remove malicious content from digital content for the following use cases: (1) Upload of content by citizens or third parties during the benefit applications process (2) Transfer of data between SSS and third-parties or government departments. This Content Threat Removal Service will contribute to the design of supporting systems to facilitate The Scottish Government in delivering valued services safely. It is anticipated that contracts for the Content Threat Removal Service will commence in Summer 2019 and run continuously for a minimum of 1 year, with the possibility of a contract extension for a further year. (This is only indicative, Scottish Government reserves the right to change or amend the term). This is a Request for Information and is to attain indicative costs and learning options only, this is document does not create, obligate or guarantee a contract or framework agreement. Social Security Scotland (SSS) is currently reviewing options to provide a technology platform which will scan and prevent files containing malicious content from being imported to SSS Digital Platforms over various channels including public-facing web portals, file transfer traffic, web services traffic, and email. Proposed technical controls should include: 1. Enforcement of uni-directional flow control to ensure data only flows one way through our channels. 2. Enforcement of a protocol break which terminates the network connection and application protocol, with the connection being re-built at a later stage to prevent protocol based attacks. 3. Transformation engine which processes an object with a complex data format (e.g. Microsoft Office document) into a simple format, removes unwanted content such as active code (e.g. macros or scripts), rendering the malicious code ineffective, and then re-builds the object back into its original format for onward transfer to the destination. 4. Syntactic verification of content to ensure the structure and syntax of an object are correct (e.g. content is valid XML or JSON which conforms to a specified schema). Verification components should ensure all potentially active content has been removed. Digital content in scope include but are not limited to: Productivity documents (e.g. Microsoft Office or Adobe PDF documents) Image files - multiple formats Audio files - multiple formats Video files - multiple formats XML/JSON files",
"status": "planned"
}
],
"communication": {
"futureNoticeDate": "2019-08-30T00:00:00Z"
},
"coveredBy": [
"GPA"
],
"classification": {
"id": "72222300",
"scheme": "CPV"
}
},
"language": "EN",
"description": "NOTE: To register your interest in this notice and obtain any additional information please visit the Public Contracts Scotland Web Site at https://www.publiccontractsscotland.gov.uk/Search/Search_Switch.aspx?ID=588473. (SC Ref:588473)",
"links": [
{
"rel": "canonical",
"href": "https://api.publiccontractsscotland.gov.uk/v1/Notice?id=ocds-r6ebe6-0000588473"
}
],
"noticetype": "PCS Notice - Website Prior Information Notice"
}