Public procurement notice: Contract Award Notice
Published: 2022-04-12
Buyer: Scottish Police Authority
Country: UK
Contract type: Services
Procedure: Open procedure
CPV classification: 48000000 | 72222300: Information technology services | 72267100: Maintenance of information technology software
Award criteria: The most economic tender

Technical requirements: The Scottish Police Authority (known as “the Authority”) has a requirement for a Data Discovery Capability to provide a foundation for compliance to GDPR and other key legislation. The Authority is required to tender for this opportunity to appoint a suitably experienced and competent Contractor.
The Scottish Police Authority (known as “the Authority”) has a requirement for a Meta Data Management solution. The Authority is required to tender for this opportunity to appoint a suitably experienced and competent Contractor.
The Scottish Police Authority (known as “the Authority”) has a requirement for a Force Wide Analytics Data Virtualisation solution. The Authority is required to tender for this opportunity to appoint a suitably experienced and competent Contractor.
Since reform, Police Scotland now delivers all of the functions of a national force and ICT systems integration continues to implement and improve ICT services to support that delivery.  One of these services is the collection, management and use of data to support operational policing and reporting.  Police Scotland employs data analysts, scientists and statisticians in a teams across its estate tasked with using the available data to deliver analysis, dashboards and reports to Police Scotland and its external stakeholders, including the Scottish Government.  Currently the data is available from a variety of sources, including a traditional data warehouse, functional reporting data sets and directly from operational systems. Access rights and software tools vary, by data source, by individual and by team.
Police Scotland intends to improve analytical capabilities to, in turn, improve operational policing and is developing an initiative to deliver:
The preferred approach is to implement a virtual data warehouse and a data lake (repository of raw data) to facilitate:
3.	The application of quality controls and governance to import data from the data lake into the data warehouse.
We are seeking to procure the implementation of a suitable data virtualisation software solution into the Police Scotland in-house ICT environment to allow a single view of all available data to all authorised users on the following basis:
-	Software licence(s) for a Data Virtualisation solution with annual support and maintenance services. Licences will be scalable but will be used by 200 users initially.
-	Services to support the initial installation, configuration and integration of solution with Force Wide operational systems.
-	Discretionary transition to cloud model during contract term. The solution shall be deployed, initially, on premise, but deployable, in part or in whole, on a private or public hosted cloud environment at a later date.
-	Costs are expected to be provided within the commercial response for any licence transition and associated support and services for a potential move to a cloud based model within the contract term. This would not be expected as a complete re-licence exercise, more a transition.
SPA have immediate licence requirements which have been provided as part of the tender document. This does not limit the requirements to what is noted in the tender document and SPA may require additional licences through the life of the agreement.
The Authority will also reserve the right to procure further licencing, Support & Maintenance and Professional services (over and above the initial purchase requirements) in relation to the proposed solution and any additional licensing for the duration of the contract. Any such additional spend will be limited to a maximum of 50% of the overall contract value.
Data is key to all digital transformation and to driving insight within Police Scotland, so therefore is compliance of that data as well as its security and privacy. The ability to classify information i.e. give context to data and therefore evaluate its sensitivity is key to identifying and driving the necessary compliance and security activities. Across Police Scotland it is estimated that 100TB of Unstructured data exists alongside a further 60TB of Structured data. Therefore there is a need to implement and operationalize data classification policies to help understand the data security and compliance risk position of Police Scotland and allow that risk to be appropriately assessed and mitigated; for example identify and delete over retained personal data, remediate security vulnerabilities and service DSAR requests. These are just some of the Use Cases that a foundational classification capability will help address alongside further capability to address and remediate compliance and security requirements themselves.