G-Cloud Services G-Cloud Giii Independent Project Oversight and Assurance Services 14 March 2013 14 March 2013 Government Procurement Service Rosebery Court St Andrews Business Park Norwich NR7 0HS Tel: 0345 410 2222 Email: info@gps.gsi.gov.uk; and Response to G-Cloud Services – G-Cloud Giii To whom it may concern, PCG Advisory Services Ltd is the UK subsidiary of Public Consulting Group (PCG). PCG is a privately held consulting firm with 26 years of consulting services experience that includes more than 16 years of Information Technology (IT) experience gained. We have worked on some of the world’s largest IT projects across a range of departments including Health, Education, Transport, Work & Pensions, Prison Service and Public Safety, and Treasury. PCG, with offices in London, Poland and across North America, dedicates itself to the unique and challenging environment of the public sector, including central and local government, which in turn allows for a more insightful and complex consulting services approach to our clients. PCG has carefully developed this expertise over time and often calls upon work completed from its plethora of contracts over the years to strengthen both its project understanding and the development of final products. PCG believes that the collective experience of its management staff is the key to its capabilities and ultimate achievements. Many PCG consultants have worked within government and draw from personal know-how to develop and implement solutions for the IT challenges that government faces today. In particular, this strength comes to the fore in our Independent Project Oversight and Assurance Services engagements. PCG is comprised of five divisions: Technology Consulting, Health Services, Human Services, Education, and Public Partnerships. This structure allows our organization to address a broad range of public sector needs. It also allows the firm to assemble multidisciplinary teams when required, taking advantage of the specialized expertise and experience of each practice area, to address the multi-dimensional objectives of public sector agencies. Today, with over 1,200 professionals we offer a wide range of management and information technology consulting services to help public sector clients achieve their performance goals and better serve populations in need. We endorse the use of information technology standards and best practices and are active members of standard-setting organisations. The standards we currently apply include the Institute of Electrical and Electronics Engineers (IEEE) Software Engineering standards, the Project Management Institutes’ (PMI) Project Management Body of Knowledge (PMBOK), PRINCE2, the Software Engineering Institute’s (SEI) Capability Maturity Model (CMM), Information Technology Infrastructure Library (ITIL) and the International Organization for Standardization (ISO) standards. Our consultants' understanding and experience in applying best practices and choosing the appropriate standards based on the customer's business need are essential elements in the delivery of a quality product and project success. We thank you for the opportunity to submit this tender to participate with you and this important initiative. We believe we can put together an exceptional team with the knowledge, skills, PCG Advisory Services, LTD., Aldwych House, 71-91 Aldwych London, United Kingdom WC2B 4HN Phone: 0844 415 6000 experience, qualifications, and methodologies necessary to help in response to growing concerns by the National Audit Office (NAO) and Major Projects Authority (MPA). Should questions arise, or if additional information is needed on the Independent Project Oversight and Assurance Services or any one of our available services, please do not hesitate to contact PCG Advisory Services Limited at 0844 415 6000 or by email at JPescod@pcgeu.com. Sincerely, Jennifer Pescod Associate Country Manager PCG Advisory Services, LTD. PCG Advisory Services, LTD., Aldwych House, 71-91 Aldwych London, United Kingdom WC2B 4HN Phone: 0844 415 6000 G-Cloud Services G-Cloud Giii 14 March 2013 Table of Contents 1) SERVICE DEFINITION ............................................................................................ 1 a) Service Overview......................................................................................................... 1 b) Information Assurance ................................................................................................. 2 c) Backup/Restore & Disaster Recovery .......................................................................... 2 d) On-boarding/Off-boarding ............................................................................................ 2 e) Pricing ......................................................................................................................... 3 f) Service Management ................................................................................................... 3 g) Service Constraints ..................................................................................................... 3 h) Service Levels ............................................................................................................. 4 i) Financial Recompense Model...................................................................................... 4 j) Training ....................................................................................................................... 4 k) Ordering/Invoicing Process .......................................................................................... 4 l) Termination Terms ...................................................................................................... 4 m) Data restoration / service migration ............................................................................. 5 n) Consumer Responsibilities .......................................................................................... 5 o) Technical Requirements .............................................................................................. 5 p) Trial Service Details ..................................................................................................... 5 G-Cloud Giii – Independent Project Oversight and Assurance Services Page i G-Cloud Services G-Cloud Giii 14 March 2013 1) Service Definition a) Service Overview An overview of the G-Cloud Service (functional, non functional) Independent Project Oversight and Assurance Services PCG Advisory Services Limited is the UK subsidiary of Public Consulting Group (PCG). PCG is a leader in providing Independent Project Oversight and Assurance services throughout the United States. The role of Independent Project Oversight and Assurance is to provide information to those that sponsor, govern and manage a project to help them make better informed decisions which reduce the causes of project failure, promote the conditions for success and deliver improved outcomes. Many public sector high risk projects are frequently large scale, innovative and reliant on complex relationships between diverse stakeholders. PCG will evaluate and assess a project's adherence to project objectives and baselines providing oversight of project activities around scope, cost, and schedule and evaluating the current status of where a project was in relationship to planned and actual performance targets. These services can help organizations reduce the time, cost, and risk to their business. We use industry standards and best practices, including: IEEE 1490-1998 (Adoption of PMI Standard), PMI Project Management Body of Knowledge (PMBOK), IEEE 12202005 (Standard for Application and Management of the Systems Engineering Process), IEEE 1058-1998 (Software Project Management Plan), Projects In a Controlled Environment (PRINCE2), IEEE 12207-2008 (Information Technology – Software life cycle processes), IEEE 1063-2001 (Standard for Software User Documentation), IEEE 1471-2000 (Recommended Practice for Architectural Description of Software Intensive Systems), IEEE 2001-1999 (Recommended Practice for Intranet Practices – Web Page Engineering – Intranet/Extranet Applications), PMI Practice Standard for Work Breakdown Structure (WBS), IEEE 16085-2006 (Risk Management), IEEE 830-1998 (Recommended Practice for Software Requirements Specification), IEEE 1233-1998 (Guide for Developing System Requirements Specifications), IEEE Std 828-2005 (Software Configuration Management), Information Technical Infrastructure Library (ITIL), IEEE 730-2002 (Quality Assurance Plan), IEEE 1012-2004 (Software Verification and Validation), IEEE 1028-2008 (Standard for Software Reviews and Audits), IEEE 1061-1998 (Quality Metrics Methodology), IEEE 1059 (Software Verification & Validation Guide), Capability Maturity Model Implementation (CMMI) for Development, IEEE 829-1998 (Standard for Test Documentation), IEEE 1008-1987 (Software Unit Testing), IEEE Std 14764-2006 (Software Engineering — Software Life Cycle Processes — Maintenance). We use these standards to develop customized templates, checklists, and reports to document risks and issues, evaluate the project management processes, assess project performance in terms of schedule, cost, scope, and human resources. G-Cloud Giii – Independent Project Oversight and Assurance Services Page 1 G-Cloud Services G-Cloud Giii 14 March 2013 b) Information Assurance Information assurance – Impact Level (IL) at which the G-Cloud Service is accredited to hold and process information PCG has extensive experience complying with data protection laws and regulations in the US and Poland. As part of fulfilling requirements in other service areas, PCG Advisory Services is currently registered with Registration Number Z3558069 under the Data Protection Act of 1998. c) Backup/Restore & Disaster Recovery Details of the level of backup/restore and disaster recovery that will be provided This feature is not applicable to the Independent Project Oversight and Assurance Services being offered. However, our services do provide an independent view of the processes and timescales required for Disaster Recovery, providing a check on the optimism bias often present in incumbent providers. d) On-boarding/Off-boarding On-boarding and Off-boarding processes/scope etc. PCG uses a five step process to ensure our clients receive the most value from our services. The on-boarding and off-boarding process includes: 1. Project Kick-off Meeting – In this introductory meeting, PCG facilitates a collaborative discussion to better understand the buyer’s expectations, assumptions, and constraints so that we deliver exactly what is expected. 2. Discovery – Following the Kick-Off Meeting, PCG begins the discovery process whereby data is collected from many different sources based on information provided by the organization’s subject matter experts. We collect that data through using a combination of the following data gathering techniques: a. Questionnaires – Written questions to be filled out by key personnel b. Interviews – We will conduct multiple interviews with key players and business staff that can best provide the needed information c. Documentation – We will collect all pertinent documentation including legislative requirements, especially where they would be different between the US and UK for analysis and review 3. Analysis and Clarification – Once all pertinent information is gathered, we then thoroughly analyze based on the scope of the effort to ensure we completely understand the problem(s) facing an organization. PCG prides our reputation on looking at problems and issues through the eyes of our clients, so that we can identify, recommend, and implement the most appropriate solutions. G-Cloud Giii – Independent Project Oversight and Assurance Services Page 2 G-Cloud Services G-Cloud Giii 14 March 2013 4. Delivery and Implementation – Based on the expectations agreed upon in the scope of work and clarified from the Kick-Off Meeting, PCG uses the data and information gathered, analyzed, and clarified to implement and deliver solutions to meet our client’s needs. 5. Lessons Learned – Upon conclusion of any major phase as well as the conclusion of the engagement, PCG will conduct a Lessons Learned workshop with key buyer personnel to identify what went well and what could be done better for future endeavors. We provide a comprehensive report to the client, which can be used to better manage services provided in the future regardless of the provider selected. e) Pricing Pricing (including unit prices, volume discounts (if any), data extraction etc.) The pricing for the Requirements, Design, and Testing Support Services include: Unit: Day Currency: GBP Range: £400 - £1,600 Average for core service component: £1,200 f) Service Management Service management details PCG can support service management in providing project oversight for the client to define and ensure that quality services are being provided that meet the needs of the business. In this, we would ensure that a process is in place that follows a framework that will bring together the technical objectives and activities with the business objectives and activities. To do this we conduct an overall assessment of the process and procedures being used to determine the current health of the project and/or organization. This would include a determination of how much government best practices (e.g., PRINCE2, PMBOK, IEEE, ITIL, and CMMI) are being followed on the project and/or by the organization. The next step would be determined in coordination with the client and the results of the initial assessment as well as the current health of the project and/or organization. It may require further concentrated review of a specific core area (such as information security, testing, change control, and configuration management) and how that specific area could be improved. PCG can also support the implementation of a quality framework that is in line with government best practices, including PRINCE2, PMBOK, IEEE, ITIL, and CMMI. The specific service management support needed will be determined in coordination with the client and the project and/or organization. g) Service Constraints Service constraints (e.g. maintenance windows, level of customisation permitted, G-Cloud Giii – Independent Project Oversight and Assurance Services Page 3 G-Cloud Services G-Cloud Giii 14 March 2013 schedule for deprecation of functionality/features etc.) As the Independent Project Oversight and Assurance Services being offered is a consulting rather than operation service, there are no major constraints to the level of service we can provide. As a firm with largely US-based employees, we draw heavily on consulting services from our US practice areas, and use this to build UK-based expertise as required. h) Service Levels Service Levels (e.g. performance, availability, support hours, severity definitions etc.) This feature is not applicable to the Independent Project Oversight and Assurance Services being offered. i) Financial Recompense Model Financial recompense model for not meeting service levels This feature is not applicable to the Independent Project Oversight and Assurance Services being offered. j) Training Training PCG will ensure that all knowledge and understanding gained by any of the Requirements, Design, and Testing Support Services provided are turned over to the client. PCG would work with the client to define a knowledge transfer and training plan that includes, as applicable: Proposed knowledge transfer/training delivery methods o Classroom training o Job shadowing o Computer based training Specific course curriculums and descriptions, as applicable Strategy for knowledge transfer to business and technical staff Proposed technical training and knowledge transfer schedule Roles and responsibilities of contractor and client staff k) Ordering/Invoicing Process Ordering and invoicing process We expect services to be paid for in full within 30 days of invoicing. l) Termination Terms Termination terms: (i.) By consumers (i.e. consumption) G-Cloud Giii – Independent Project Oversight and Assurance Services Page 4 G-Cloud Services G-Cloud Giii 14 March 2013 (ii.) By the Supplier (removal of the G-Cloud Service) As the Independent Project Oversight and Assurance Services being offered are a consulting rather than operational service, our terms for termination of the contract with a consumer would be subject to the usual notice periods, to be agreed with the client at the start of a project. m) Data restoration / service migration The Independent Project Oversight and Assurance Services being offered do not involve the restoration of data or service migration. n) Consumer Responsibilities Consumer responsibilities Reference should be made to the standard framework agreement as well as the PCG specific terms and conditions. o) Technical Requirements Technical requirements (service dependencies and detailed technical interfaces, e.g. client side requirements, bandwidth/latency requirements etc.) The Independent Project Oversight and Assurance Services being offered can be provided irrespective of existing client service dependencies, technical interfaces, and infrastructure. p) Trial Service Details Details of any trial service available The Independent Project Oversight and Assurance Services being offered, due to their consultancy nature, do not lend themselves to a trial offering that would be accessible by any potential client. However, we would be willing to consider trial projects with clients who were interested in considering using an Independent Project Oversight and Assurance Service more widely. G-Cloud Giii – Independent Project Oversight and Assurance Services Page 5