Digital and Data Capabilities Framework

Our current thinking is that this lot encompasses all competences and skills required to achieve NGESO's objectives under its business plan, digitalisation strategy, and digital first ambitions, as well as supporting NGESO as a full end to end business, and expanding these same capabilities to cover NGESO's new roles and ambitions. Working under multiple digital delivery methods (from Waterfall to Agile) and different types of technology, from ideation and design stages to implementation, configuration, and support as well as maintenance, these services will span software, hardware, infrastructure, and network solutions. Our current technology estate encompasses combinations of in-house built solutions, PaaS, SaaS; hosted either on-prem, data centres, public cloud, private Cloud; and classified between CNI and non-CNI. The successful tenderer(s) for this lot will be responsible for providing end to end capabilities to enable partnership delivery of turnkey types of agreement. This Lot will be used for call off which span two or more capabilities in the other Lots, with the expectation of full end to end management of the relevant call off. As such, capabilities for this Lot should be considered as the capabilities referred to in all other Lots, being the sum of Lots 2, 3, 4 and 5 as well as the ability to deliver these in a coordinated way under the call off. Indicative examples of required capabilities are as follows:  Data architecture and engineering  Data science and analytics  Information assurance  Threat intelligence  Security operations  Vulnerability assessment and management  Data security  Incident response  Security awareness and training  Security consultancy and expert advice  Software and application security engineering  Security architecture  Engineering and maintenance of security services  Risk assessment  Architecture  Systems and software development  Quality engineering  Infrastructure and network support  User experience delivery  DevSecOps  Agile development  Project management office  Solution delivery management  Demand management  Continuity management  IT governance  End-to-end learning solutions  Consultancy and expert advice  Data management  Business analysis  Product management  maintenance and support  Design thinking  Business analysis  Product management  Release management  End-to-end digital customer experience (cx) management UVDB Codes to be registered on Achilles: 2.1.2.0 Software Development Services 2.1.3.0 Software Support Services 2.1.10.0 Data Collection & Handling Services 2.2.3.0 IT Consultancy 2.2.10.0 Security Consultancy

Our current thinking is that this lot will provide NGESO with specialist data capabilities including management, processing, storage, and analysis of data to inform and support data-led strategic decision-making, system related innovation, and operational efficiency. We will look to it for application of Artificial Intelligence (AI), be it in current legacy systems, new transformational platforms, or standalone solutions. Call off for this Lot will require the successful tenderer to deliver an outcome and/or resource augmentation. Indicative examples of required capabilities are as follows:  Data architecture and engineering  Data science and analytics UVDB Codes to be registered on Achilles: 2.1.2.0 Software Development Services 2.1.10.0 Data Collection & Handling Services 2.2.3.0 IT Consultancy

Our current thinking is that this lot will enable NGESO to cover both physical and digital specific security needs. This would range from internal to external threats and encompass work from policy creation to incident response. Call off for this Lot will require the successful tenderer to deliver an outcome and/or resource augmentation. Indicative examples of required capabilities are as follows: • Threat intelligence • Security operations • Vulnerability assessment and management • Incident response • Security consultancy and expert advice • Software and application security engineering • Security architecture • Data security • Security awareness and training • Risk assessment UVDB Codes to be registered on Achilles: 2.2.3.0 IT Consultancy 2.2.10.0 Security Consultancy 2.2.22.0 Risk Management Consultancy

Our current thinking is that this lot encompasses the application of principles and practices involved in the development and maintenance of digital solutions and platforms which make up NGESO's digital landscape, including but not limited to software development, platform architecture, Agile DevSecOps, cloud computing. It also includes the application of architecture standards in line with NGESO defined solution strategy and modernisation practices. Call off for this Lot will require the successful tenderer to deliver an outcome and/or resource augmentation. Indicative examples of required capabilities are as follows:  Architecture  Systems and software development  Quality engineering  Infrastructure and network support  User experience delivery  DevSecOps  Agile development UVDB Codes to be registered on Achilles: 2.1.2.0 Software Development Services 2.2.3.1 Infrastructure/Hardware 2.2.3.3 Software Implementation

Our current thinking is that this Lot will enable NGESO to cover its portfolio supporting needs. This will range from ideation type of engagements, creation of policies and procedures, and thought leadership papers to manage digital deliverables, as well as supporting maintenance services. Call off for this Lot will require the successful tenderer to deliver an outcome and/or resource augmentation. . Indicative examples of required capabilities are as follows:  Project management office  Solution delivery management  Demand management  Continuity management  IT governance  End-to-end learning solutions  Consultancy and expert advice  Data management  Business analysis  Product management  maintenance and support  Design thinking  Business analysis  Product management  Release management  End-to-end digital customer experience (CX) management UVDB Codes to be registered on Achilles: 2.6.41.0 Business Project Management 2.2.3.0 IT Consultancy