ICT Statement of Requirements

Full provision of ICT support for staff and commissioners on a 24/7 basis including emergency response., The Scottish Land Commission was established under the Land Reform (Scotland) Act 2016 on 1st April 2017. Our purpose is to provide direction, leadership and strategic thought to land reform in Scotland. In doing so we will support and enable the realisation of the Scottish Government's vision of a Scotland where the ownership, management and use of land and buildings contributes to the collective benefit of everybody.

The Commission has five Land Commissioners and a Tenant Farming Commissioner and is supported by a team of 18 staff based in Inverness. The Commission is a non-departmental public body (NDPB) and is fully funded by the Scottish Government with a budget of GBP1.55m for 2023-24.

The Commission requires a fully outsourced ICT managed service (supply, installation, maintenance and support) including 24/7 Helpdesk support, Incident management, management of Hardware, operating software, licences and Cyber security; and all associated ICT services to ensure it has effective operating systems, processes and facilities in place so that it can fulfil its duties as a public sector organisation.

The commission currently receives these services through an ICT managed service contract, the duration of which has come to an end and therefore we are now seeking to appoint an appropriately qualified and experienced provider to meet the requirements of a small dynamic

organisation that utilises the flexibility and functionality of cloud based solutions whilst also being robust and resilient in terms of cyber security.

1.1 Requirements

-Full provision of ICT support for staff and commissioners on a 24/7 basis including emergency response.

-Provide a call logging system that records and tracks help desk activities.

-Provide regular reporting and analysis of help desk activities.

-Implementation and management of effective Administration and multi factor authentication controls across ICT equipment including mobile phones.

-Management of cloud based services including Microsoft server administration.

-Hosting of Finance system server and access control.

-Email management including set up and management of a suitable quarantine service.

-Procurement and administration of licences including Adobe, Microsoft office, Dynamics 365 customer service and SharePoint (Costs considered separately of this agreement).

-Purchasing and configuration of new equipment and disposal of decommissioned equipment in an environmentally responsible manor (Costs considered separately of this agreement).

-Management of antivirus and other cyber security provisions.

-Management of regular phishing campaigns (Costs considered separately of this agreement).

-Deliver training on cyber security.

-Take a proactive approach to cyber security and ensure all potential threats are considered.

-On an annual basis ensure the commission is ready for Cyber Essentials Plus certification assessment and arrange for this to be undertaken by an accredited body. (Costs considered separately of this agreement).

-Take a major part in the CIRT.

-Suggest improvements to systems and processes das technology advances including areas such as antivirus, MFA and device management.

-Provide support for the development or review of the commissions overall digital and ICT processes and strategies, including the development or review of business and technical options to best meet our needs.

-Working with internal and external auditors as appropriate for a public sector organisation.