Regulatory Compliance System

A full requirements specification has been produced detailing ECL stakeholders requirements. Due to a strict word limit a very brief extract is reproduced here: Users: 850 named users Duration: Minimum two year contract initially Location: All venues that ECL provides services from

Non-functional requirements • Suppliers should have an understanding of and compliance with; regulations, guidance and legislation relevant to ECL • Suppliers should be certified against the Cyber Essentials Plus scheme • Suppliers should be certified against ISO27001. The certification body must be recognised by UKAS or be an international body recognised by UKAS • Suppliers must be proactively developing the system to ensure it stays current in the future. • Suppliers must be able to prove financial stability • Suppliers must be able to provide at least two reference sites that can be visited by key members of ECL’s team • Suppliers must be able to provide appropriate professional services and on-going support • Suppliers must be able to provide appropriate 1st, 2nd and 3rd line support either directly or in conjunction with Essex County Council • Suppliers must enter into a Data Processing Agreement with ECL or relevant clauses must be in the Terms and Conditions • Mobile devices can only be Samsung Android Knox or Windows Phone 8.1 / Windows 8.1

Functional requirements Split into 14 sub sections. MoSCoW prioritisation is used to indicate the level of importance stakeholders attach to each aspect of the specification. Sub section headings are reproduced here: • Security • Electronic forms • Workflow • Learning and development • HR • Document control • Policies and procedures • Incident reporting and customer engagement (comments, compliments and complaints) • Risk register • Audits • Asset management • Integration • Technical infrastructure • Service continuity / business continuity

Additional information: Suppliers will have to register on ECL's procurement portal: https://eoecph.bravosolution.co.uk/web/login.shtml

Once the supplier's details have been uploaded on the procurement portal, the supplier will need to send an email to [email protected] so ECL can validate the registration and then supplier can have access to the portal.

Bids should be uploaded in a ".pdf" format into the "commercial response" area of the procurement portal. Bidders should write their bids in the same order as the order published in page 9 of the "instruction to bidders":

1- Functional requirements 1a Security 1b Electronic Forms 1c Workflow 1d Learning and development 1e HR 1f Document control 1g Policies and procedures 1h Incident reporting 1i Customer engagement 1j Risk register 1k Audits 1l Integration 1m Asset Management 1n Technical infrastructure 1o Recruitment 2 Service Continuity