Secure Service Design

The Services to be provided by the Supplier under the above

Lot are listed in Framework Section 2 and outlined below:

• Maintenance and enhancement of existing Secure Service Design Products.
• Secure Service Design Requirements
• Secure Service Design Architecture

Brief

• UMA Design
• UMA Profile
• Secure Service Design Privacy Model
• Secure Service Design Risk and Trust Profile
• Secure Integration
• Architectural Briefs for data/dashboard

providers

• Provide technical expertise to support pre-procurement engagement followed by the procurement activity that is anticipated to commence in April 2021. This will include, responding to supplier

questions, reviewing documentation & ongoing

support throughout the procurement process.

• Service elements: Provide advice, training

and support to the team on the following:

• Review and analysis of the end to

end service (review)

• Assess risk & trust needs of your service

(risks, standards, design)

• Define identity and authentication

needs, and their management over time (architecture, standards, design)

• Define trust and risk profile of service

and its transactions (risk and trust framework, design)

• Set identity and trust architecture, securing and authenticating transactions not

just user identity (architecture, risk and trust

framework, standards)

• Establish trusted attribute / verified attribute service design (design)

6

• Define privacy principles, privacy model,

consent management and privacy capabilities, prepare for DPIA (privacy framework,

architecture, design)

• Apply standards for identity, authentication, authorisation and trust eco-system design (profile standards, design)
• Define data and meta-data model for integrity and reuse (defining meta-data standards, design)
• Ensuring end to end coherent and configurable authorisation capability across: person, browser/device, organisation, system, API, service (architecture, standards, design)
• Provide support to the appointed supplier in understanding the secure service design through their discovery and alpha delivery stages.
• Training - Mentoring and Support of PDP technology team, ITT team in use of existing and enhanced Secure Service Definition Products. It is expected that the bulk of the service delivered under this contract will be to provide mentoring and support services to PDP covering the service elements listed above.
• Further deliverables may be defined, related to

the design, specification of requirements and delivery of the secure service.