Key information
Decision type: GLRO
Reference code: GLRO21-08
Date signed:
Date published:
Decision by: Mary Harpley, Chief Officer of the GLA
Executive summary
The GLRO’s approval is sought for further funding to support the electronic vote-counting process (e-count), outside of the requirements of the main contract with the e-count supplier CGI which was agreed by GLRO Decision 20-05, and subsequently modified by GLRO Decision 21-01 to accommodate the election postponement.
Additional internet connectivity is required (£25,000). The count sites and City Hall must be able to connect and communicate with each other. Two dedicated lines which were initially provisioned for by GLRO Decision 20-11 must be renewed in light of postponement of the election. Also, each count centre shall be enhanced with a 4G connection, to supplement the primary connections and enhance resilience. The additional 4G connections shall be provided though CGI, after a change control agreement.
Supplementary technical assurance and testing is required (£25,000). Expert independent technical assurance is to review the e-count infrastructure tests, which shall be provided by a third-party (not the current e-count provider) with whom the GLA currently has a call-off contract. The exact scope of work will be determined by the company’s initial feedback.
Accordingly, £50,000 is requested and this form seeks the GLRO’s approval for these activities. The requisite funds have been budgeted for.
Decision
That the Greater London Returning Officer (GLRO):
Approves further expenditure of up to £50,000 to cover the extra costs needed for the extension and provision of resilient connectivity between sites, and technical assurance to the e-count.
Part 1: Non-confidential facts and advice
GLRO 20-05 approved the award of the contract to CGI IT UK in partnership with Smartmatic for the supply of an electronic ballot paper counting system, and other electoral materials and services. While the e-Count hardware is largely provided for by CGI, peripheral infrastructure is required from the GLA.
The decision of Government last year to postpone the election resulted in an extension of the contract with CGI.
As per GLRO 20-11, signed on 12 November 2019, dedicated Internet connections were installed at City Hall to allow the technical infrastructure of the e-count system to securely and reliably connect with the three count centres. The initial GLRO decision only covered connectivity for the original election date, and so must be extended.
The technical setup in City Hall was contracted with a 4G backup connection. The three Count Sites were not originally envisaged to have this backup. In order to improve the resilience of the Count Sites these should now be provisioned.
CGI are already required to conduct penetration testing, to the National Cyber Security Council (NCSC)’s CHECK standards. To enhance the ability of the GLA to review this testing and review performance, ensure compliance with the required remediations, and to provide additional confidence in the performance of the system, additional resources via third-party testing are required.
The services detailed within shall be procured through existing call-off contracts and agreements, as they are extensions of existing work, and further, this will reduce risk and increase timeliness. In line with this, the contract awarded through GLRO 20-05 shall be amended to facilitate the additional 4G connections, through the approved change control process.
The e-count central site, hosted in City Hall, and count venues, will be reliably connected with internet connectivity.
Increased confidence in the correct performance and integrity of the system.
There are no specific impacts on those with protected characteristics arising out of this decision, as per the public sector equality duty.
Key risks and issues
Reliance: The e-count is a key part of the electoral process, and is required to run in a manner which is reliable. Accordingly, a variety of contingency measures are being considered. Amongst them, is the need to have two internet lines, to provide for a fall back.
Security: The security of the e-counting system is of paramount importance to the election. Accordingly, rigorous oversight is required.
GLRO approval is being sought for further expenditure of up to £50,000 to cover the extra costs for extending the internet lines and enhancing resilience at the venues (up to £25,000) and for technical testing assurance purposes (up to £25,000). These costs are outlined in section 1 above.
This brings the total budget and expenditure approval for internet connections to £67,000 (original budget approved was to up £17,000 via GLRO-20-11 plus this new budget of £50,000).
The total cost of up to up to £50,000 will be funded from the Elections budget.
The proposals are consistent with and support the activities of the GLRO in the 2021 GLA elections.
Signed decision document
GLRO21-08 Additional Technology Provision and Assurance - SIGNED