IT Penetration Testing for BBC

London: computer-related services

IT Penetration Testing for BBC (4 Lots).

Contract notice

Services

Directive 2004/18/EC

Section I: Contracting authority

I.1)Name, addresses and contact point(s)

The British Broadcasting Corporation (BBC)
Broadcasting House, Portland Place
For the attention of: Paul Hurley
W1A 1AA London
UNITED KINGDOM
Telephone: +44 2080082615
E-mail: paul.hurley@bbc.co.uk

Internet address(es):

General address of the contracting authority: www.bbc.co.uk/supplying/livetenders.shtml

Further information can be obtained from: The above mentioned contact point(s)

Specifications and additional documents (including documents for competitive dialogue and a dynamic purchasing system) can be obtained from: The above mentioned contact point(s)

Tenders or requests to participate must be sent to: The above mentioned contact point(s)

I.2)Type of the contracting authority

Body governed by public law

I.3)Main activity

Other: Broadcasting

I.4)Contract award on behalf of other contracting authorities

The contracting authority is purchasing on behalf of other contracting authorities: no

Section II: Object of the contract

II.1)Description
II.1.1)Title attributed to the contract by the contracting authority:

IT Penetration Testing.

II.1.2)Type of contract and location of works, place of delivery or of performance

Services
Service category No 7: Computer and related services
Main site or location of works, place of delivery or of performance: BBC sites across the United Kingdom – please refer to the full list of sites contained within the PQQ Information Pack attached to the PQQ.
NUTS code UK

II.1.3)Information about a public contract, a framework agreement or a dynamic purchasing system (DPS)

The notice involves the establishment of a framework agreement

II.1.4)Information on framework agreement

Framework agreement with several operators
maximum number of participants to the framework agreement envisaged: 12
Duration of the framework agreement

Duration in years: 3
Estimated total value of purchases for the entire duration of the framework agreement

Estimated value excluding VAT:
Range: between 300 000 and 400 000 GBP

II.1.5)Short description of the contract or purchase(s)

The BBC is seeking to establish a Framework Agreement for IT Penetration Testing Services within the BBC.
The requirement is to obtain a Framework Agreement with a maximum of 3 Suppliers awarded against each of the 4 individual lots:
Lot 1 – Web Application and Infrastructure Penetration Testing.
Lot 2 – Mobile Device Penetration Testing.
Lot 3 – Social Engineering.
Lot 4 – Secure Code Testing.

II.1.6)Common procurement vocabulary (CPV)

72500000, 72820000

II.1.7)Information about Government Procurement Agreement (GPA)

The contract is covered by the Government Procurement Agreement (GPA): yes

II.1.8)Lots

This contract is divided into lots: yes
Tenders may be submitted for one or more lots

II.1.9)Information about variants

Variants will be accepted: no

II.2)Quantity or scope of the contract
II.2.1)Total quantity or scope:
II.2.2)Information about options

Options: yes
Description of these options: The Framework maybe extended twice at the BBC’s discretion by up to 12 months on each occasion.

II.2.3)Information about renewals
II.3)Duration of the contract or time limit for completion

Information about lots

Lot No: 1 Lot title: Web Application and Infrastructure Penetration Testing

1)Short description

Reviewing Web Applications and the operating system, database and web server stack that they sit on, for security vulnerabilities and providing advice on how to fix the issues identified.

2)Common procurement vocabulary (CPV)

72820000

3)Quantity or scope

Estimated value excluding VAT: 190 000 GBP

4)Indication about different date for duration of contract or starting/completion

Duration in months: 36 (from the award of the contract)

5)Additional information about lots

In the case of technology requirements, the BBC may involve its technology partner (Atos IT Solutions and Services Limited) to assist in the scoping and drafting of invitations to tender and/or the evaluation of tenders.However, the final decision as to which is the most economically advantageous (by reference to the award criteria) will be made by the BBC. The awarding authority reserves the right not to award a contract and to annul the procurement process at any stage. Tenders and all supporting documents must be priced in sterling and all payments will be made in sterling. The contract shall be subject to English law. The awarding authority does not bind itself to accept the lowest, or any tender and reserves the right to accept part of a tender unless the tenderer expressly stipulates otherwise in the tender document. To prevent BBC eTendering portal email alerts from being quarantined by your organisation’s fire wall or spam filter, you are advised to instruct your IT team to accept all emails with a .BravoSolution.co.uk extension (our portal provider) or from help@bravosolution.co.uk. If Section II.1.9 shows ‘Yes’, variants will be accepted provided they meet the core requirements of the project.

Lot No: 2 Lot title: Mobile Device Penetration Testing

1)Short description

Testing mobile device platforms and applications for security vulnerabilities.

2)Common procurement vocabulary (CPV)

72820000

3)Quantity or scope

Estimated value excluding VAT: 40 000 GBP

4)Indication about different date for duration of contract or starting/completion

Duration in months: 36 (from the award of the contract)

5)Additional information about lots

In the case of technology requirements, the BBC may involve its technology partner (Atos IT Solutions and Services Limited) to assist in the scoping and drafting of invitations to tender and/or the evaluation of tenders.However, the final decision as to which is the most economically advantageous (by reference to the award criteria) will be made by the BBC. The awarding authority reserves the right not to award a contract and to annul the procurement process at any stage. Tenders and all supporting documents must be priced in sterling and all payments will be made in sterling. The contract shall be subject to English law. The awarding authority does not bind itself to accept the lowest, or any tender and reserves the right to accept part of a tender unless the tenderer expressly stipulates otherwise in the tender document. To prevent BBC eTendering portal email alerts from being quarantined by your organisation’s fire wall or spam filter, you are advised to instruct your IT team to accept all emails with a .BravoSolution.co.uk extension (our portal provider) or from help@bravosolution.co.uk. If Section II.1.9 shows ‘Yes’, variants will be accepted provided they meet the core requirements of the project.

Lot No: 3 Lot title: Social Engineering

1)Short description

Testing Employee awareness of good security practice, by attempting to gain unauthorised access to systems and networks via misrepresentation.

2)Common procurement vocabulary (CPV)

72820000

3)Quantity or scope

Estimated value excluding VAT: 40 000 GBP

4)Indication about different date for duration of contract or starting/completion
5)Additional information about lots

In the case of technology requirements, the BBC may involve its technology partner (Atos IT Solutions and Services Limited) to assist in the scoping and drafting of invitations to tender and/or the evaluation of tenders.However, the final decision as to which is the most economically advantageous (by reference to the award criteria) will be made by the BBC. The awarding authority reserves the right not to award a contract and to annul the procurement process at any stage. Tenders and all supporting documents must be priced in sterling and all payments will be made in sterling. The contract shall be subject to English law. The awarding authority does not bind itself to accept the lowest, or any tender and reserves the right to accept part of a tender unless the tenderer expressly stipulates otherwise in the tender document. To prevent BBC eTendering portal email alerts from being quarantined by your organisation’s fire wall or spam filter, you are advised to instruct your IT team to accept all emails with a .BravoSolution.co.uk extension (our portal provider) or from help@bravosolution.co.uk. If Section II.1.9 shows ‘Yes’, variants will be accepted provided they meet the core requirements of the project.

Lot No: 4 Lot title: Secure Code Testing

1)Short description

Reviewing web application source code for coding errors that may introduce a security weakness.

2)Common procurement vocabulary (CPV)

72820000

3)Quantity or scope

Estimated value excluding VAT: 30 000 GBP

4)Indication about different date for duration of contract or starting/completion

Duration in months: 36 (from the award of the contract)

5)Additional information about lots

In the case of technology requirements, the BBC may involve its technology partner (Atos IT Solutions and Services Limited) to assist in the scoping and drafting of invitations to tender and/or the evaluation of tenders.However, the final decision as to which is the most economically advantageous (by reference to the award criteria) will be made by the BBC. The awarding authority reserves the right not to award a contract and to annul the procurement process at any stage. Tenders and all supporting documents must be priced in sterling and all payments will be made in sterling. The contract shall be subject to English law. The awarding authority does not bind itself to accept the lowest, or any tender and reserves the right to accept part of a tender unless the tenderer expressly stipulates otherwise in the tender document. To prevent BBC eTendering portal email alerts from being quarantined by your organisation’s fire wall or spam filter, you are advised to instruct your IT team to accept all emails with a .BravoSolution.co.uk extension (our portal provider) or from help@bravosolution.co.uk. If Section II.1.9 shows ‘Yes’, variants will be accepted provided they meet the core requirements of the project.

Section III: Legal, economic, financial and technical information

III.1)Conditions relating to the contract
III.1.1)Deposits and guarantees required:

Guarantees may be required.

III.1.2)Main financing conditions and payment arrangements and/or reference to the relevant provisions governing them:
III.1.3)Legal form to be taken by the group of economic operators to whom the contract is to be awarded:

Where there is more than one economic operator, the BBC reserves the right to require a grouping of economic operators to take a particular legal form or to require a single economic operator to take primary liability or to require that each party undertakes joint and several liability.

III.1.4)Other particular conditions
III.2)Conditions for participation
III.2.1)Personal situation of economic operators, including requirements relating to enrolment on professional or trade registers

Information and formalities necessary for evaluating if the requirements are met: Suppliers Instructions How to Express Interest in this Tender:
1. Register your company on the eSourcing portal (this is only required once) – You should first go to www.bbc.co.uk/supplying/livetenders.shtml and follow the link to the BravoSolution eSourcing portal: (https://bbc.bravosolution.co.uk) and click the purple button to register – Accept the terms and conditions and click continue – Enter your correct business and user details – Note the username you chose and click Save when complete – You will shortly receive an email with your unique password (please keep this secure).

2. Express an Interest in the tender – Login to the portal with the username/password – Click the PQQs / ITTs Open To All Suppliers link. (These are Pre-Qualification Questionnaires or Invitations to Tender open to any registered supplier) – Click on the relevant PQQ/ ITT to access the content. – Click the Express Interest button in the Actions box on the left-hand side of the page. – This will move the PQQ /ITT into your My PQQs/ My ITTs page. (This is a secure area reserved for your projects only) -You can now access any attachments by clicking the Settings and Buyer Attachments in the Actions box.
3. Responding to the tender – You can now choose to Reply or Decline to Respond (please give a reason if rejecting) – You can now use the Messages function to communicate with the buyer and seek any clarification – Note the deadline for completion, then follow the onscreen instructions to complete the PQQ/ ITT – There may be a mixture of online and offline actions for you to perform (there is detailed online help available) You must then submit your reply using the ‘Submit Response’ button in the Actions box on the left-hand side of the page. If you require any further assistance please consult the online help, or contact the eTendering help desk(contact details can be found at https://bbc.bravosolution.co.uk).

III.2.2)Economic and financial ability

Information and formalities necessary for evaluating if the requirements are met: The BBC will evaluate technical ability/financial standing of the bidders in accordance with Articles 45 to 52 of Directive 2004/18/EC and Regulations 23 to 25 of the Public Contracts Regulations 2006, and a detailed explanation of the evaluation methodology and minimum criteria to be satisfied are set out in the Pre-Qualification Questionnaire.
Minimum level(s) of standards possibly required: Please refer to Section B3 in the PQQ Information pack.

III.2.3)Technical capacity

Information and formalities necessary for evaluating if the requirements are met:
The BBC will evaluate technical ability/financial standing of the bidders in accordance with Articles 45 to 52 of Directive 2004/18/EC and Regulations 23 to 25 of the Public Contracts Regulations 2006, and a detailed explanation of the evaluation methodology and minimum criteria to be satisfied are set out in the Pre-Qualification Questionnaire.
Minimum level(s) of standards possibly required:
Please refer to Section B3 in the PQQ Information pack.

III.2.4)Information about reserved contracts
III.3)Conditions specific to services contracts
III.3.1)Information about a particular profession
III.3.2)Staff responsible for the execution of the service

Section IV: Procedure

IV.1)Type of procedure
IV.1.1)Type of procedure

Restricted

IV.1.2)Limitations on the number of operators who will be invited to tender or to participate

Envisaged minimum number 5
Objective criteria for choosing the limited number of candidates: The BBC will evaluate technical ability/financial standing of the bidders in accordance with Articles 45 to 52 of Directive 2004/18/EC and Regulations 23 to 25 of the Public Contracts Regulations 2006, and a detailed explanation of the evaluation methodology and minimum criteria to be satisfied are set out in the Pre-Qualification Questionnaire.

IV.1.3)Reduction of the number of operators during the negotiation or dialogue
IV.2)Award criteria
IV.2.1)Award criteria

The most economically advantageous tender in terms of the criteria stated in the specifications, in the invitation to tender or to negotiate or in the descriptive document

IV.2.2)Information about electronic auction

An electronic auction will be used: yes
Additional information about electronic auction: The BBC may carry out an electronic reverse auction if appropriate, and where applicable, tenderers will be informed in due course.

IV.3)Administrative information
IV.3.1)File reference number attributed by the contracting authority:

PROC 2011 60 PH

IV.3.2)Previous publication(s) concerning the same contract

no

IV.3.3)Conditions for obtaining specifications and additional documents or descriptive document
IV.3.4)Time limit for receipt of tenders or requests to participate

23.1.2012 – 12:00

IV.3.5)Date of dispatch of invitations to tender or to participate to selected candidates
IV.3.6)Language(s) in which tenders or requests to participate may be drawn up

English.

IV.3.7)Minimum time frame during which the tenderer must maintain the tender
IV.3.8)Conditions for opening tenders

Persons authorised to be present at the opening of tenders: no

Section VI: Complementary information

VI.1)Information about recurrence

This is a recurrent procurement: no

VI.2)Information about European Union funds

The contract is related to a project and/or programme financed by European Union funds: no

VI.3)Additional information

In the case of technology requirements, the BBC may involve its technology partner (Atos IT Services Limited) to assist in the scoping and drafting of invitations to tender and/or the evaluation of tenders.However, the final decision as to which is the most economically advantageous (by reference to the award criteria) will be made by the BBC. The awarding authority reserves the right not to award a contract and to annul the procurement process at any stage. Tenders and all supporting documents must be priced in sterling and all payments will be made in sterling. The contract shall be subject to English law. The awarding authority does not bind itself to accept the lowest, or any tender and reserves the right to accept part of a tender unless the tenderer expressly stipulates otherwise in the tender document. To prevent BBC eTendering portal email alerts from being quarantined by your organisation’s fire wall or spam filter, you are advised to instruct your IT team to accept all emails with a .BravoSolution.co.uk extension (our portal provider) or from help@bravosolution.co.uk. If Section II.1.9 shows ‘Yes’, variants will be accepted provided they meet the core requirements of the project.

VI.4)Procedures for appeal
VI.4.1)Body responsible for appeal procedures
VI.4.2)Lodging of appeals
VI.4.3)Service from which information about the lodging of appeals may be obtained

VI.5)Date of dispatch of this notice:9.12.2011