Information and Project Risk Assessment Undertake information risk and project risk assessments sufficient that the agency can be assured all reasonable validations have been undertaken to ensure information contained in systems to be provided as a service is appropriately classified and labelled, and risk mitigation has been appropriately considered. Knowledge of NSW Government Procurement Requirements Suppliers of services must possess appropriate and current knowledge of NSW Government procurement requirements as a minimum relating to cloud service provisions. Wider knowledge should be considered an advantage. Cost Benefit Analysis Provision of cost benefit analysis services taking into account both the short and long term costs and benefits of moving to GovDC and/or consuming cloud based as a service offerings. Information and Security Management Suppliers of services must be able demonstrate current knowledge of NSW Government information management and information security requirements and be able to assist agencies in ensuring potential cloud and/or data centre service providers are compliant. All NSW Government departments, statutory bodies and shared service providers must adhere to the NSW Government Digital Information Security Policy. Contract Management Service providers must be able to demonstrate understanding of current NSW Government contract management requirements together with current knowledge of transition in and transition out requirements for third party service providers. Evaluation Service providers must be able to demonstrate current knowledge of NSW Government evaluation process and practices to ensure agency compliance. Service Level Management Agencies will retain ultimate responsibility for service level management in any solutions engagement, which would ordinarily be covered by a service level agreement (SLA). Agencies, service-brokers and solution providers need to agree all SLA reporting and other related activities as part of any transition-in process. Multi-service Broker Provision Any solution provider must work within the confines of a multi-service provider environment where either the agency or nominated provider will perform broker service provision. This will be defined as one provider being made accountable for the provision of all associated services, whether these are provided by the provider itself, or other third-party providers. DOCUMENT CONTROL Document history Status: Final Version: 1.1 Approved by: Procurement and Technical Standards Working Group
Information and Project Risk Assessment Undertake information risk and project risk assessments sufficient that the agency can be assured all reasonable validations have been undertaken to ensure information contained in systems to be provided as a service is appropriately classified and labelled, and risk mitigation has been appropriately considered. Knowledge of NSW Government Procurement Requirements Suppliers of services must possess appropriate and current knowledge of NSW Government procurement requirements as a minimum relating to cloud service provisions. Wider knowledge should be considered an advantage. Cost Benefit Analysis Provision of cost benefit analysis services taking into account both the short and long term costs and benefits of moving to GovDC and/or consuming cloud based as a service offerings. Information and Security Management Suppliers of services must be able demonstrate current knowledge of NSW Government information management and information security requirements and be able to assist agencies in ensuring potential cloud and/or data centre service providers are compliant. All NSW Government departments, statutory bodies and shared service providers must adhere to the NSW Government Digital Information Security Policy. Contract Management Service providers must be able to demonstrate understanding of current NSW Government contract management requirements together with current knowledge of transition in and transition out requirements for third party service providers. Evaluation Service providers must be able to demonstrate current knowledge of NSW Government evaluation process and practices to ensure agency compliance. Service Level Management Agencies will retain ultimate responsibility for service level management in any solutions engagement, which would ordinarily be covered by a service level agreement (SLA). Agencies, service-brokers and solution providers need to agree all SLA reporting and other related activities as part of any transition-in process. Multi-service Broker Provision Any solution provider must work within the confines of a multi-service provider environment where either the agency or nominated provider will perform broker service provision. This will be defined as one provider being made accountable for the provision of all associated services, whether these are provided by the provider itself, or other third-party providers. DOCUMENT CONTROL Document history Status: Final Version: 1.1 Approved by: Procurement and Technical Standards Working Group
ict-procurement-standard-migration-services-and-cloud-readiness.docx