Cyber Resilience - Training for Public Sector Boards

{
    "tag": [
        "compiled"
    ],
    "id": "ocds-r6ebe6-0000736113-2023-10-04T00:00:00Z",
    "date": "2023-10-04T00:00:00Z",
    "ocid": "ocds-r6ebe6-0000736113",
    "initiationType": "tender",
    "parties": [
        {
            "id": "org-35",
            "name": "Scottish Government",
            "identifier": {
                "legalName": "Scottish Government"
            },
            "address": {
                "streetAddress": "4 Atlantic Quay, 70 York St",
                "locality": "Glasgow",
                "region": "UKM",
                "postalCode": "G2 8JX"
            },
            "contactPoint": {
                "name": "Stuart Riach",
                "email": "stuart.riach2@gov.scot",
                "url": "http://www.publictendersscotland.publiccontractsscotland.gov.uk"
            },
            "roles": [
                "buyer",
                "centralPurchasingBody",
                "mediationBody",
                "reviewContactPoint"
            ],
            "details": {
                "classifications": [
                    {
                        "id": "Ministry or any other national or federal authority, including their regional or local subdivisions",
                        "scheme": "TED_CA_TYPE"
                    },
                    {
                        "id": "01",
                        "description": "General public services",
                        "scheme": "COFOG"
                    }
                ],
                "url": "http://www.scotland.gov.uk"
            }
        },
        {
            "id": "org-49",
            "name": "Edinburgh Sheriff Court and Justice of the Peace Court",
            "identifier": {
                "legalName": "Edinburgh Sheriff Court and Justice of the Peace Court"
            },
            "address": {
                "streetAddress": "27 Chambers Street",
                "locality": "Edinburgh",
                "postalCode": "EH1 1LB"
            },
            "contactPoint": {
                "url": "http://www.scotcourts.gov.uk/the-courts/court-locations/edinburgh-sheriff-court-and-justice-of-the-peace-court"
            },
            "roles": [
                "reviewBody"
            ]
        },
        {
            "id": "org-38",
            "name": "Scottish Government",
            "identifier": {
                "legalName": "Scottish Government"
            },
            "address": {
                "streetAddress": "4 Atlantic Quay, 70 York St",
                "locality": "Glasgow",
                "region": "UKM",
                "postalCode": "G2 8EA"
            },
            "contactPoint": {
                "name": "Caroline Little",
                "email": "caroline.little@gov.scot",
                "telephone": "+44 1412420133",
                "url": "http://"
            },
            "roles": [
                "buyer",
                "centralPurchasingBody",
                "mediationBody",
                "reviewContactPoint"
            ],
            "details": {
                "classifications": [
                    {
                        "id": "Body governed by public law",
                        "scheme": "TED_CA_TYPE"
                    },
                    {
                        "id": "01",
                        "description": "General public services",
                        "scheme": "COFOG"
                    },
                    {
                        "id": "Ministry or any other national or federal authority, including their regional or local subdivisions",
                        "scheme": "TED_CA_TYPE"
                    }
                ],
                "url": "http://www.scotland.gov.uk"
            }
        },
        {
            "id": "org-360",
            "name": "Frank Rankin",
            "identifier": {
                "legalName": "Frank Rankin"
            },
            "address": {
                "streetAddress": "11 Viaduct Road, Clarkston",
                "locality": "Clarkston",
                "region": "UKM83",
                "postalCode": "G76 8BN"
            },
            "contactPoint": {
                "telephone": "+44 7958482882"
            },
            "roles": [
                "supplier"
            ],
            "details": {
                "scale": "sme",
                "url": "http://"
            }
        },
        {
            "id": "org-18",
            "name": "Edinburgh Sheriff Court and Justice of the Peace Court",
            "identifier": {
                "legalName": "Edinburgh Sheriff Court and Justice of the Peace Court"
            },
            "address": {
                "streetAddress": "Sheriff Court House, 27 Chambers Street",
                "locality": "Edinburgh"
            },
            "contactPoint": {
                "url": "http://"
            },
            "roles": [
                "reviewBody"
            ]
        }
    ],
    "buyer": {
        "name": "Scottish Government",
        "id": "org-38"
    },
    "tender": {
        "id": "614465",
        "title": "Cyber Resilience - Training for Public Sector Boards",
        "description": "Globally organisations and individuals have become reliant on digital technology. Effective cyber security and resilience protect the processes and services we depend on, ensuring we can take advantage of the benefits that technology can bring. An organisation's ability to prevent, respond to and recover from a cyber attack is central to resilience. Cyber resilience is therefore a key risk and consideration for any Board. The Scottish Government's Strategic Framework for a Cyber Resilient Scotland ('the Strategic Framework'), published in February 2021, sets out what we all need to do to make Scotland a digitally secure and resilient nation. Four outcomes underpin this vision, and four action plans set out the detail of how we will achieve these. Responsibility for the implementation of the Strategic Framework lies with the Scottish Government's Cyber Resilience Unit (CRU). The Public Sector Action Plan annexed to the Framework is a priority for the CRU and overarching aim 5 seeks to embed cyber resilience into the governance, policies and processes of public sector bodies. The CRU works in partnership with a wide range of organisations including the UK Government's National Cyber Security Centre (NCSC). The NCSC supports all areas of society to understand cyber risk from our critical national infrastructure organisations to the general public. More specifically, the NCSC distils its deep knowledge and expertise into practical guidance including a Board Toolkit designed to encourage cyber security discussions between an organisation's Board and its technical experts. In spring 2023, the Scottish Government contracted a short pilot project to adapt the NCSC's Board Toolkit and pilot its delivery with a group of public sector board members drawn from organisations across Scotland. The pilot was successful and feedback was positive. It is on the foundation of this pilot that we are now contracting a scaled-up roll-out of the training programme. We will work with the successful Service Provider to make any further tweaks to the training pack that are recommended in the evaluation report of the training pilot.",
        "status": "complete",
        "items": [
            {
                "id": "1",
                "additionalClassifications": [
                    {
                        "id": "80500000",
                        "scheme": "CPV"
                    },
                    {
                        "id": "80522000",
                        "scheme": "CPV"
                    },
                    {
                        "id": "80531000",
                        "scheme": "CPV"
                    },
                    {
                        "id": "80531200",
                        "scheme": "CPV"
                    },
                    {
                        "id": "80521000",
                        "scheme": "CPV"
                    },
                    {
                        "id": "80533100",
                        "scheme": "CPV"
                    },
                    {
                        "id": "80600000",
                        "scheme": "CPV"
                    }
                ],
                "deliveryAddresses": [
                    {
                        "region": "UKM"
                    },
                    {
                        "region": "UKM"
                    }
                ],
                "relatedLot": "1"
            }
        ],
        "value": {
            "amount": 125000,
            "currency": "GBP"
        },
        "procurementMethod": "open",
        "procurementMethodDetails": "Open procedure",
        "mainProcurementCategory": "services",
        "submissionMethod": [
            "electronicSubmission"
        ],
        "submissionMethodDetails": "https://www.publictendersscotland.publiccontractsscotland.gov.uk/web/login.html",
        "tenderPeriod": {
            "endDate": "2023-08-01T12:00:00Z"
        },
        "awardPeriod": {
            "startDate": "2023-08-01T12:00:00Z"
        },
        "documents": [
            {
                "id": "JUN481814",
                "documentType": "contractNotice",
                "title": "Cyber Resilience - Training for Public Sector Boards",
                "description": "Globally organisations and individuals have become reliant on digital technology. Effective cyber security and resilience protect the processes and services we depend on, ensuring we can take advantage of the benefits that technology can bring. An organisation's ability to prevent, respond to and recover from a cyber attack is central to resilience. Cyber resilience is therefore a key risk and consideration for any Board. The Scottish Government's Strategic Framework for a Cyber Resilient Scotland ('the Strategic Framework'), published in February 2021, sets out what we all need to do to make Scotland a digitally secure and resilient nation. Four outcomes underpin this vision, and four action plans set out the detail of how we will achieve these. Responsibility for the implementation of the Strategic Framework lies with the Scottish Government's Cyber Resilience Unit (CRU). The Public Sector Action Plan annexed to the Framework is a priority for the CRU and overarching aim 5 seeks to embed cyber resilience into the governance, policies and processes of public sector bodies. The CRU works in partnership with a wide range of organisations including the UK Government's National Cyber Security Centre (NCSC). The NCSC supports all areas of society to understand cyber risk from our critical national infrastructure organisations to the general public. More specifically, the NCSC distils its deep knowledge and expertise into practical guidance including a Board Toolkit designed to encourage cyber security discussions between an organisation's Board and its technical experts. In spring 2023, the Scottish Government contracted a short pilot project to adapt the NCSC's Board Toolkit and pilot its delivery with a group of public sector board members drawn from organisations across Scotland. The pilot was successful and feedback was positive. It is on the foundation of this pilot that we are now contracting a scaled-up roll-out of the training programme. We will work with the successful Service Provider to make any further tweaks to the training pack that are recommended in the evaluation report of the training pilot.",
                "url": "https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=JUN481814",
                "format": "text/html"
            },
            {
                "id": "OCT489754",
                "documentType": "awardNotice",
                "title": "Cyber Resilience - Training for Public Sector Boards",
                "description": "Globally organisations and individuals have become reliant on digital technology. Effective cyber security and resilience protect the processes and services we depend on, ensuring we can take advantage of the benefits that technology can bring. An organisation's ability to prevent, respond to and recover from a cyber attack is central to resilience. Cyber resilience is therefore a key risk and consideration for any Board. The Scottish Government's Strategic Framework for a Cyber Resilient Scotland ('the Strategic Framework'), published in February 2021, sets out what we all need to do to make Scotland a digitally secure and resilient nation. Four outcomes underpin this vision, and four action plans set out the detail of how we will achieve these. Responsibility for the implementation of the Strategic Framework lies with the Scottish Government's Cyber Resilience Unit (CRU). The Public Sector Action Plan annexed to the Framework is a priority for the CRU and overarching aim 5 seeks to embed cyber resilience into the governance, policies and processes of public sector bodies. The CRU works in partnership with a wide range of organisations including the UK Government's National Cyber Security Centre (NCSC). The NCSC supports all areas of society to understand cyber risk from our critical national infrastructure organisations to the general public. More specifically, the NCSC distils its deep knowledge and expertise into practical guidance including a Board Toolkit designed to encourage cyber security discussions between an organisation's Board and its technical experts. In spring 2023, the Scottish Government contracted a short pilot project to adapt the NCSC's Board Toolkit and pilot its delivery with a group of public sector board members drawn from organisations across Scotland. The pilot was successful and feedback was positive. It is on the foundation of this pilot that we are now contracting a scaled-up roll-out of the training programme. We will work with the successful Service Provider to make any further tweaks to the training pack that are recommended in the evaluation report of the training pilot.",
                "url": "https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=OCT489754",
                "format": "text/html"
            }
        ],
        "lots": [
            {
                "id": "1",
                "description": "The programme aims to grow the capacity of Scotland's public boards to take a leadership role in ensuring the cyber resilience of their organisations. Strategically, it supports Outcome 2 of the Strategic Framework, which is that: Businesses and organisations recognise the cyber risks and are well prepared to manage them. The programme aims to develop the knowledge and skills of board members from across Scotland's c. 190 public boards, with the outcome that boards will have at least one member who has a good understanding of cyber risk, can take on a cyber risk assurance role on the board, and can motivate their board colleagues to take cyber risk seriously at a senior leadership level. It also aims to provide broad awareness raising for any and all board members who wish to gain a basic understanding of the cyber threat landscape and the importance of taking action. These aims will be achieved through two strands of activity, by March 2024: A. Delivery of up to 20 x half-day online training sessions for up to 12 public sector board members at a time (drawn from different boards), that will deliver learning around cyber risk, cyber assurance and pragmatic steps boards can take to further ensure the resilience of their organisations. This delivery to be evaluated at the end of the each delivery session (to implement improvement into the next session) as well as at the end of the programme period. This will include promotion, recruitment of participants, delivery, provision of electronic resources/slides, and evaluation of the session on the day. B. Delivery of 6 x one-hour webinars for any and all board members who are interested to gain broad awareness of cyber resilience. These webinars to be evaluated. This should include promotion, recruitment, delivery and immediate evaluation.",
                "status": "complete",
                "value": {
                    "amount": 125000,
                    "currency": "GBP"
                },
                "awardCriteria": {
                    "criteria": [
                        {
                            "type": "quality",
                            "name": "Technical Quality",
                            "description": "70"
                        },
                        {
                            "type": "price",
                            "description": "30"
                        }
                    ]
                },
                "hasOptions": false,
                "submissionTerms": {
                    "variantPolicy": "notAllowed"
                },
                "contractPeriod": {
                    "durationInDays": 210
                },
                "hasRenewal": true,
                "renewal": {
                    "description": "An option extension of up to 12 months. The 7 month contract term will have a budget of up to 75000 GBP. The option extension period will have a budget of up to 50000 GBP."
                }
            }
        ],
        "bidOpening": {
            "date": "2023-08-01T12:00:00Z"
        },
        "contractTerms": {
            "hasElectronicPayment": true,
            "hasElectronicOrdering": true,
            "electronicInvoicingPolicy": "allowed"
        },
        "coveredBy": [
            "GPA"
        ],
        "otherRequirements": {
            "requiresStaffNamesAndQualifications": true
        },
        "selectionCriteria": {
            "criteria": [
                {
                    "type": "economic",
                    "description": "SPD Bidders must demonstrate a Current Ratio of no less than 1 in each of the last two financial years. Current Ratio will be calculated as follows: Total current assets divided by Total current liabilities. There must be no qualification or contra-indication from any evidence provided in support of the bidders economic and financial standing.",
                    "minimum": "The bidder confirms they already have or can commit to obtain, prior to the commencement of the contract, the levels of insurance cover indicated below: Professional Risk Indemnity: in the sum of not less than 1 Million GBP. Employer's (Compulsory) Liability: in accordance with any legal obligation for the time being in force. Public Liability: in the sum of not less than 1 Million GBP. Such insurance must be maintained for the duration of the Contract and for a minimum of 5 years following the expiry or termination of the Contract."
                },
                {
                    "type": "technical",
                    "description": "SPD - Bidders are required to confirm whether they intend to subcontract and, if so, for what proportion of the contract."
                }
            ]
        },
        "submissionTerms": {
            "languages": [
                "en"
            ],
            "bidValidityPeriod": {
                "durationInDays": 180
            }
        },
        "classification": {
            "id": "80511000",
            "scheme": "CPV"
        },
        "hasRecurrence": false,
        "legalBasis": {
            "id": "32014L0024",
            "scheme": "CELEX"
        }
    },
    "language": "EN",
    "description": "The buyer is using PCS-Tender to conduct this ITT exercise. The Project code is 24542. For more information see: http://www.publiccontractsscotland.gov.uk/info/InfoCentre.aspx?ID=2343 Question Scoring Methodology for Award Criteria outlined in invitation to tender: 0 -- Unacceptable. Nil or inadequate response. Fails to demonstrate an ability to meet the requirement. 1 -- Poor. Response is partially relevant but generally poor. The response addresses some elements of the requirement but contains insufficient/limited detail or explanation to demonstrate how the requirement will be fulfilled. 2 -- Acceptable. Response is relevant and acceptable. The response addresses a broad understanding of the requirement but may lack details on how the requirement will be fulfilled in certain areas. 3 -- Good. Response is relevant and good. The response is sufficiently detailed to demonstrate a good understanding and provides details on how the requirements will be fulfilled. 4 -- Excellent. Response is completely relevant and excellent overall. Bidders must complete the SPD (Scotland) to demonstrate adherence to the Exclusion and Selection Criteria for this procurement. If there are named subcontractors/technicians upon which the bidder will rely to meet the selection criteria, these named parties must complete and reattach the SPD Supplier Response Form attached to SPD questions 2C.1.1 (Technicians) and 2D.1.2 (Subcontractors) on PCS-T. These parties must complete the first three sections of the SPD form, as well as any part of the section 4 selection criteria that the main bidder will rely upon the parties to fulfil. If parties have not yet been identified, this information may be required at a later date. Scottish Government reserves the right to request this information from relevant parties upon whom the main bidder will not rely to fulfil selection criteria. 4C.10 Bidders will be required to confirm whether they intend to sub-contract and if so, for what proportion of the contract. (SC Ref:746621)",
    "links": [
        {
            "rel": "canonical",
            "href": "https://api.publiccontractsscotland.gov.uk/v1/Notice?id=ocds-r6ebe6-0000736113"
        },
        {
            "rel": "canonical",
            "href": "https://api.publiccontractsscotland.gov.uk/v1/Notice?id=ocds-r6ebe6-0000736113"
        }
    ],
    "noticetype": "OJEU - F3 - Contract Award Notice",
    "awards": [
        {
            "id": "614465",
            "suppliers": [
                {
                    "id": "org-360",
                    "name": "Frank Rankin"
                }
            ],
            "relatedLots": [
                "1"
            ]
        }
    ],
    "contracts": [
        {
            "id": "614465",
            "awardID": "614465",
            "status": "active",
            "value": {
                "amount": 86200,
                "currency": "GBP"
            },
            "dateSigned": "2023-09-29T00:00:00Z"
        }
    ],
    "relatedProcesses": [
        {
            "id": "1",
            "relationship": [
                "planning"
            ],
            "scheme": "EU-OJ",
            "identifier": "2023/S 000-017822"
        }
    ],
    "bids": {
        "statistics": [
            {
                "id": "729",
                "measure": "bids",
                "value": 18,
                "relatedLot": "1"
            },
            {
                "id": "730",
                "measure": "smeBids",
                "value": 13,
                "relatedLot": "1"
            },
            {
                "id": "731",
                "measure": "foreignBidsFromEU",
                "value": 0,
                "relatedLot": "1"
            },
            {
                "id": "732",
                "measure": "foreignBidsFromNonEU",
                "value": 18,
                "relatedLot": "1"
            },
            {
                "id": "733",
                "measure": "electronicBids",
                "value": 18,
                "relatedLot": "1"
            }
        ]
    }
}