Identity Assurance Tender for the Post Office
Post Office Ltd intends to provide identity assurance services across online, telephony and face-to-face channels, throughout its branch network, and under the Post Office brand. Post Office Ltd therefore requires key services that will support that delivery.
UK-London: IT services: consulting, software development, Internet and support
2012/S 39-063450
Contract notice
Services
Directive 2004/18/EC
Section I: Contracting authority
I.1)Name, addresses and contact point(s)
Post Office Ltd
148 Old Street
For the attention of: Carol Ayres & Elinor Fentem
EC1V 9HQ London
UNITED KINGDOM
Telephone: +44 7889075923 / 7748701323
E-mail: elinor.fentem@postoffice.co.uk
Internet address(es):
General address of the contracting authority: http://www.postoffice.co.uk/
Electronic access to information: http://rmg.frictionless.com/fsguestvendor/vendordesktop/register?
Electronic submission of tenders and requests to participate: http://rmg.frictionless.com/fsguestvendor/
Further information can be obtained from: The above mentioned contact point(s)
Specifications and additional documents (including documents for competitive dialogue and a dynamic purchasing system) can be obtained from: The above mentioned contact point(s)
Tenders or requests to participate must be sent to: The above mentioned contact point(s)
I.2)Type of the contracting authority
Other: Postal Authority
I.3)Main activity
Other: UK Postal Administration
I.4)Contract award on behalf of other contracting authorities
The contracting authority is purchasing on behalf of other contracting authorities: no
Section II: Object of the contract
II.1)Description
II.1.1)Title attributed to the contract by the contracting authority:
Identity Assurance.
II.1.2)Type of contract and location of works, place of delivery or of performance
Services
Service category No 7: Computer and related services
Main site or location of works, place of delivery or of performance: UK nationwide.
NUTS code
Service category No 7: Computer and related services
Main site or location of works, place of delivery or of performance: UK nationwide.
NUTS code
II.1.3)Information about a public contract, a framework agreement or a dynamic purchasing system (DPS)
The notice involves a public contract
II.1.4)Information on framework agreement
II.1.5)Short description of the contract or purchase(s)
Post Office Ltd intends to provide identity assurance services across online, telephony and face-to-face channels, throughout its branch network, and under the Post Office brand. Post Office Ltd therefore requires key services that will support that delivery.
The delivered services will include:
— identity verification: providing online, telephony and face-to-face channels that permit the matching of a claimed identity to a claimant to prove ownership to an agreed level of assurance yet to be defined,
— Credential management: the provision of secure management of the credential (e.g. user name, password, hard or soft tokens, biometrics) lifecycle including enrolment, provisioning,, retention of digital identities, customer support, renewal and replacement, revocation,
— Identity Correction Services: Identifying, managing and resolving errors in credentials, identities and attribute data, and revoking identities as required,
— identity authentication: the provision of authentication mechanisms for registered individuals to mutually authenticate with Post Office Ltd across online, telephone (voice) or face-to-face channels. In the web channel the mechanisms will be required to interface with the government infrastructure and Post Office Ltd systems using interfaces to be specified by Post Office Ltd,
— data attributes: the provision of data attributes which may be required to verify claimed identities and validate claims against those identities and their existence. These may include, but not necessarily be limited to, names, gender, and date of birth, address and the history of these items. Provision of addition attribute data such as financial status, electoral roll and other relevant records where available, including verification of that data where appropriate. Services should cover as full a demographic as possible,
— business identity: the provision of key information about companies registered or trading in the UK, including registration, ownership, responsible officers, financial history, credit status,
— certified service: the assurance regime and operational capability of the service provider will be required to comply with Post Office Ltd standards and government requirements for certification of the service. This will include provision of suitable cyber-security controls to, ISO27001 standards as a minimum,
— direct channel support: services invited under this framework should support access over multiple channels including online (web browser and mobile), telephone (voice) and face-to-face,
— geographic reach: services will be required at Post Office’s branches across the UK, including Northern Ireland,
— privacy and consent: services must comply with data protection legislation, and incorporate effective mechanisms to manage user consent and revocation. Services should, where appropriate, demonstrate best practice in management of all aspects of privacy and consent,
— Management Information: Provision of management information services, and interfaces that can be integrated into Post Office’s billing, Electronic Point of Sale (EPoS) and other systems as required,
— innovative delivery: application of innovative processes and technologies to enhance service quality and reduce cost of delivery where appropriate,
— third-party interface: Post Office may wish to offer common interfaces through the identity systems to enable third party identity providers to access Post Office Ltd’s face-to-face services within or outside of the Identity Assurance scheme. Post Office Ltd may wish to assign other services to the contracted provider for delivery through their interfaces,
— other identity management: Post Office Ltd may from time to time require other identity management services, for internal or external use, and would prefer to align these with the architecture delivered under this framework. The contracted provider may be asked to deliver these services.
The delivered services will include:
— identity verification: providing online, telephony and face-to-face channels that permit the matching of a claimed identity to a claimant to prove ownership to an agreed level of assurance yet to be defined,
— Credential management: the provision of secure management of the credential (e.g. user name, password, hard or soft tokens, biometrics) lifecycle including enrolment, provisioning,, retention of digital identities, customer support, renewal and replacement, revocation,
— Identity Correction Services: Identifying, managing and resolving errors in credentials, identities and attribute data, and revoking identities as required,
— identity authentication: the provision of authentication mechanisms for registered individuals to mutually authenticate with Post Office Ltd across online, telephone (voice) or face-to-face channels. In the web channel the mechanisms will be required to interface with the government infrastructure and Post Office Ltd systems using interfaces to be specified by Post Office Ltd,
— data attributes: the provision of data attributes which may be required to verify claimed identities and validate claims against those identities and their existence. These may include, but not necessarily be limited to, names, gender, and date of birth, address and the history of these items. Provision of addition attribute data such as financial status, electoral roll and other relevant records where available, including verification of that data where appropriate. Services should cover as full a demographic as possible,
— business identity: the provision of key information about companies registered or trading in the UK, including registration, ownership, responsible officers, financial history, credit status,
— certified service: the assurance regime and operational capability of the service provider will be required to comply with Post Office Ltd standards and government requirements for certification of the service. This will include provision of suitable cyber-security controls to, ISO27001 standards as a minimum,
— direct channel support: services invited under this framework should support access over multiple channels including online (web browser and mobile), telephone (voice) and face-to-face,
— geographic reach: services will be required at Post Office’s branches across the UK, including Northern Ireland,
— privacy and consent: services must comply with data protection legislation, and incorporate effective mechanisms to manage user consent and revocation. Services should, where appropriate, demonstrate best practice in management of all aspects of privacy and consent,
— Management Information: Provision of management information services, and interfaces that can be integrated into Post Office’s billing, Electronic Point of Sale (EPoS) and other systems as required,
— innovative delivery: application of innovative processes and technologies to enhance service quality and reduce cost of delivery where appropriate,
— third-party interface: Post Office may wish to offer common interfaces through the identity systems to enable third party identity providers to access Post Office Ltd’s face-to-face services within or outside of the Identity Assurance scheme. Post Office Ltd may wish to assign other services to the contracted provider for delivery through their interfaces,
— other identity management: Post Office Ltd may from time to time require other identity management services, for internal or external use, and would prefer to align these with the architecture delivered under this framework. The contracted provider may be asked to deliver these services.
II.1.6)Common procurement vocabulary (CPV)
72000000, 72300000, 72310000
II.1.7)Information about Government Procurement Agreement (GPA)
The contract is covered by the Government Procurement Agreement (GPA): yes
II.1.8)Lots
This contract is divided into lots: yes
Tenders may be submitted for all lots
Tenders may be submitted for all lots
II.1.9)Information about variants
Variants will be accepted: no
II.2)Quantity or scope of the contract
II.2.1)Total quantity or scope:
As per the lot descriptions.
Estimated value excluding VAT: 9 000 000,00 GBP
Estimated value excluding VAT: 9 000 000,00 GBP
II.2.2)Information about options
II.2.3)Information about renewals
II.3)Duration of the contract or time limit for completion
Duration in months: 12 (from the award of the contract)
Information about lots
Lot No: 1 Lot title: Consumer Data Services
1)Short description
Consumer Data Services: Information about customers including, but not limited to, name, date of birth, address, gender, date of death, identifying document numbers (e.g. passport, driving licence), financial history, electoral roll status, telephone numbers and history of the above, as well as other relevant and legally permissible data that may be used with the consumer’s consent to facilitate the identification process. Post Office Ltd may require the ability to store and process information on subsets of customers, to modify or augment that data, and to assert rights over its future use by the provider.
2)Common procurement vocabulary (CPV)
72000000, 72300000, 72310000
3)Quantity or scope
Estimated value excluding VAT: 2 500 000,00 GBP
4)Indication about different date for duration of contract or starting/completion
5)Additional information about lots
Lot No: 2 Lot title: Identity Management Services
1)Short description
Identity Management Services: Provision either of managed services hosted by the provider, or Commercial Off The Shelf services which can be easily integrated into Post Office Ltd’s service offerings, covering:
— identity management systems and software supporting SAML2 tokens and able to deliver Single Sign On into Post Office Ltd systems if so required,
— credentials including NFC tokens, consumer NFC reader devices (e.g. USB interfaces), soft and hard one-time password generators, biometric capabilities, consumer EMV card readers and other relevant devices. Integration into prepaid card services would be desirable,
— mobile telephony service integration to facilitate use of mobile devices for authentication and transaction delivery,
— customer relationship management and support services including customer self-service capabilities for online and voice channels with mutual authentication capabilities integrated into the voice channel,
— management interfaces to aid integration of the ID services into POL’s existing systems to ensure alignment with billing and management reporting requirements. Providing suitable interfaces to facilitate the onboarding and management of third-party commercial clients who wish to use POL ID services.
— identity management systems and software supporting SAML2 tokens and able to deliver Single Sign On into Post Office Ltd systems if so required,
— credentials including NFC tokens, consumer NFC reader devices (e.g. USB interfaces), soft and hard one-time password generators, biometric capabilities, consumer EMV card readers and other relevant devices. Integration into prepaid card services would be desirable,
— mobile telephony service integration to facilitate use of mobile devices for authentication and transaction delivery,
— customer relationship management and support services including customer self-service capabilities for online and voice channels with mutual authentication capabilities integrated into the voice channel,
— management interfaces to aid integration of the ID services into POL’s existing systems to ensure alignment with billing and management reporting requirements. Providing suitable interfaces to facilitate the onboarding and management of third-party commercial clients who wish to use POL ID services.
2)Common procurement vocabulary (CPV)
72300000, 72310000, 72000000
3)Quantity or scope
Estimated value excluding VAT: 6 500 000,00 GBP
4)Indication about different date for duration of contract or starting/completion
5)Additional information about lots
Lot No: 3 Lot title: Consumer Data Services and Identity Management Services
1)Short description
Consumer Data Services: Information about customers including, but not limited to, name, date of birth, address, gender, date of death, identifying document numbers (e.g. passport, driving licence), financial history, electoral roll status, telephone numbers and history of the above, as well as other relevant and legally permissible data that may be used with the consumer’s consent to facilitate the identification process. Post Office Ltd may require the ability to store and process information on subsets of customers, to modify or augment that data, and to assert rights over its future use by the provider.
Identity Management Services: Provision either of managed services hosted by the provider, or Commercial Off The Shelf services which can be easily integrated into Post Office Ltd’s service offerings, covering:
— Identity management systems and software supporting SAML2 tokens and able to deliver Single Sign On into Post Office Ltd systems if so required,
— credentials including NFC tokens, consumer NFC reader devices (e.g. USB interfaces), soft and hard one-time password generators, biometric capabilities, consumer EMV card readers and other relevant devices. Integration into prepaid card services would be desirable,
— mobile telephony service integration to facilitate use of mobile devices for authentication and transaction delivery,
— customer relationship management and support services including customer self-service capabilities for online and voice channels with mutual authentication capabilities integrated into the voice channel,
— management interfaces to aid integration of the ID services into POL’s existing systems to ensure alignment with billing and management reporting requirements. Providing suitable interfaces to facilitate the onboarding and management of third-party commercial clients who wish to use POL ID services.
Identity Management Services: Provision either of managed services hosted by the provider, or Commercial Off The Shelf services which can be easily integrated into Post Office Ltd’s service offerings, covering:
— Identity management systems and software supporting SAML2 tokens and able to deliver Single Sign On into Post Office Ltd systems if so required,
— credentials including NFC tokens, consumer NFC reader devices (e.g. USB interfaces), soft and hard one-time password generators, biometric capabilities, consumer EMV card readers and other relevant devices. Integration into prepaid card services would be desirable,
— mobile telephony service integration to facilitate use of mobile devices for authentication and transaction delivery,
— customer relationship management and support services including customer self-service capabilities for online and voice channels with mutual authentication capabilities integrated into the voice channel,
— management interfaces to aid integration of the ID services into POL’s existing systems to ensure alignment with billing and management reporting requirements. Providing suitable interfaces to facilitate the onboarding and management of third-party commercial clients who wish to use POL ID services.
2)Common procurement vocabulary (CPV)
72000000, 72300000, 72310000
3)Quantity or scope
Estimated value excluding VAT: 9 000 000,00 GBP
4)Indication about different date for duration of contract or starting/completion
5)Additional information about lots
Section III: Legal, economic, financial and technical information
III.1)Conditions relating to the contract
III.1.1)Deposits and guarantees required:
A parent company guarantee, performance bond or other security may be requested by the contracting authority.
III.1.2)Main financing conditions and payment arrangements and/or reference to the relevant provisions governing them:
The same to be detailed in the contract documentation.
III.1.3)Legal form to be taken by the group of economic operators to whom the contract is to be awarded:
The contracting authority may require a single consortium member to take primary liability or for each member of a consortium to take joint and several liability.
III.1.4)Other particular conditions
The performance of the contract is subject to particular conditions: yes
Description of particular conditions: The award of this contract is conditional upon POL delivering identity assurance services, and particular conditions such as Service Levels may apply.
Description of particular conditions: The award of this contract is conditional upon POL delivering identity assurance services, and particular conditions such as Service Levels may apply.
III.2)Conditions for participation
III.2.1)Personal situation of economic operators, including requirements relating to enrolment on professional or trade registers
III.2.2)Economic and financial ability
Information and formalities necessary for evaluating if the requirements are met: Minimum standards are particularised in the PQQ.
III.2.3)Technical capacity
Information and formalities necessary for evaluating if the requirements are met:
Minimum standards are particularised in the PQQ.
Minimum standards are particularised in the PQQ.
III.2.4)Information about reserved contracts
III.3)Conditions specific to services contracts
III.3.1)Information about a particular profession
Execution of the service is reserved to a particular profession: no
III.3.2)Staff responsible for the execution of the service
Legal persons should indicate the names and professional qualifications of the staff responsible for the execution of the service: no
Section IV: Procedure
IV.1)Type of procedure
IV.1.1)Type of procedure
Accelerated restricted
Justification for the choice of accelerated procedure: Post Office needs to select a 3rd party provider for identity assurance services to enable it to submit comprehensive bids to government agencies and private companies for these services.
Justification for the choice of accelerated procedure: Post Office needs to select a 3rd party provider for identity assurance services to enable it to submit comprehensive bids to government agencies and private companies for these services.
IV.1.2)Limitations on the number of operators who will be invited to tender or to participate
Envisaged minimum number 5: and maximum number 7
Objective criteria for choosing the limited number of candidates: Please refer to the PQQ. The minimum and maximum relate to the number of operators who will be invited to participate in the ITT stage. To ensure that a number of supplier who appear to be able to offer the best fit solution and the most economically advantageous tender is taken forward.
Objective criteria for choosing the limited number of candidates: Please refer to the PQQ. The minimum and maximum relate to the number of operators who will be invited to participate in the ITT stage. To ensure that a number of supplier who appear to be able to offer the best fit solution and the most economically advantageous tender is taken forward.
IV.1.3)Reduction of the number of operators during the negotiation or dialogue
IV.2)Award criteria
IV.2.1)Award criteria
The most economically advantageous tender in terms of the criteria stated in the specifications, in the invitation to tender or to negotiate or in the descriptive document
IV.2.2)Information about electronic auction
An electronic auction will be used: no
IV.3)Administrative information
IV.3.1)File reference number attributed by the contracting authority:
IV.3.2)Previous publication(s) concerning the same contract
no
IV.3.3)Conditions for obtaining specifications and additional documents or descriptive document
Payable documents: no
IV.3.4)Time limit for receipt of tenders or requests to participate
12.3.2012 – 12:00
IV.3.5)Date of dispatch of invitations to tender or to participate to selected candidates
IV.3.6)Language(s) in which tenders or requests to participate may be drawn up
English.
IV.3.7)Minimum time frame during which the tenderer must maintain the tender
IV.3.8)Conditions for opening tenders
Section VI: Complementary information
VI.1)Information about recurrence
This is a recurrent procurement: no
VI.2)Information about European Union funds
The contract is related to a project and/or programme financed by European Union funds: no
VI.3)Additional information
To access the PQQ documents you must first register to obtain access to the Royal Mail Group eSourcing platform. To do this, please use the following url, https://rmg.frictionless.com/fsguestvendor/vendordesktop/ register?ui=ui2 to access the registration form. You will receive your login details via email within two working days, which will be followed shortly by a second automated email inviting you to participate in the PQQ process and providing you with online access to the PQQ documentation.
Requests to participate must be made by supplying all of the information set out in section III.2 (above). This information must be supplied by the date and time listed in section IV.3.4 (above) allowing sufficient time for the registration process to be completed.
The Contracting Authority may require suppliers to supplement or clarify the information submitted under III.2. (above) and may also undertake it’s own audit of the suppliers to verify the information provided.
Tenders and all supporting documentation for the contract must be priced in sterling and written in English. Any agreement entered into will be considered a contract made in England according to English law and will be subject to the exclusive jurisdiction of the English courts.
Post Office are not liable for any costs incurred by those expressing an interest in tendering for the contract opportunity. Post Office reserve the right to terminate the procurement process at any time, or to procure the contract by alternative means if it appears that the contract can be more advantageously procured by alternative means. The most economically advantageous or any tender will not be automatically accepted.
VI.4)Procedures for appeal
VI.4.1)Body responsible for appeal procedures
As per section 1
VI.4.2)Lodging of appeals
Precise information on deadline(s) for lodging appeals: As per section 1.
VI.4.3)Service from which information about the lodging of appeals may be obtained
As per section 1
VI.5)Date of dispatch of this notice:23.2.2012