Signalling a shift in the procurement strategy for cyber vulnerability investigations (CVIs) for the armed forces by the Ministry of Defence (MOD) , the Information Systems & Services has started looking for CVIs as a service (CVIaaS) with separate procurement notices for the Air Force, Army and Navy.
CVIs, which analyse digital systems and platforms to understand where they may be vulnerable, have been run for the armed forces since 2014 based on a Defence Science and Technology Laboratory (Dstl) methodology.
In 2017, a CVI Ops Cell was established within the MOD to deliver a 10-year programme of the investigations.
So far, CVIs have been purchased individually or in packages, known as a tranche-based approach. However, the individual procurement notices published recently on the Digital Marketplace said that this has limited the forces’ agility in responding to changing demands around operations and threats.
The MOD is now looking to establish an ‘as a service’ approach under which suppliers can be called to deliver the work for the CVI Ops Cell.
The business has been valued at up to £9m over a year for each of the three domains.
The ministry has also said that it is planning a further procurement for a service for CVIs that cover all three domains.
The CVI programme services include domain cyber vulnerability and risk analysis; programme management; target of investigation (ToI) scoping; CVI delivery; specialist CVI activities which may include technical testing, concept demonstrators, code analysis; and cross-domain information sharing, CVI good practice and lessons learned.
In Stage 2, shortlisted suppliers will be asked to provide a proposal for a ToI representative of this domain.
Applications will be accepted until 27 February 2019 and work under the contract will commence on 6 May 2019.
The procurement notices said that there is no existing team that delivers this requirement and the supplier chosen will deliver this work for and on behalf of the MOD CVI Ops Cell.
The user community is distributed across Defence with the core delivery leads based in Corsham, London and RAF Wyton, it said.