Forensics Services - LabNet Operational Data Storage

This Business Justification concerns the operational requirement for additional storage on Forensics’ Services internal computer network and infrastructure i.e. LabNet.

LabNet is used by both the Forensic Services and front line policing to extract and review digital data obtained from various sources e.g. mobile telephones, PC hard drives. The spend will be funded from agreed existing MPS budgets.

The Deputy Mayor for Policing and Crime is recommended to:

(1) Approve the award of a 3 year contract from May 2019 with CDW for storage to be provided by NetAPP at a cost of £994,433 which is split into purchase (£959,789) and service & support (£40,971).

(2) Note that the purchase of 1PB of storage for LabNet from NetAPP will be a capital purchase and the £959,789 will be converted from revenue to capital and added to the MPS capital plan.

1. Introduction and background

1.1. Forensics Services are seizing the opportunities of data and digital technology - building on its ability to use data and information effectively and efficiently; for public safety through more timely investigation of digital evidence.

1.2. Information will be available in real time providing the ability to search, transmit and store information - assisting with reducing crime and improving outcomes. This will support all crime work including violence, of which 75% of Forensics Services digital casework relates to violent crime.

1.3. This additional storage is required to maintain the effectiveness of LabNet as an investigative tool.

2. Issues for consideration

2.1. This storage will be provided by NetAPP (who are an existing supplier of such storage to MPS) and will be purchased through CDW who are the ‘Value Added Reseller (VAR)’ to the MPS and were appointed in April 2019.

2.2. The current LabNet infrastructure is built on a NetAPP data storage solution; this is compatible with the planned strategic direction of moving data on to different types of storage depending on usage and aging of the data.

2.3. This will be a stepping stone towards the wider Forensics Data Storage Strategy (FDSS) and fits with the planned model.

2.4. The additional NetAPP storage will provide immediate extra capacity on LabNet and will continue to provide easy to access fast storage once the FDSS is implemented. The FDSS intends to reuse the NetAPP storage solution to provide the first step in the FDSS approach.

2.5. Based on current usage and predictions, 1PB of storage will provide sufficient storage for approximately 9-12 months elapse; this will provide sufficient ‘head room’ until the FDSS is implemented.

3. Financial Comments

3.1. This procurement will require £959,789 to be added to the MPS capital plan.

3.2. The ongoing costs of 40,971will be funded from existing MPS revenue budgets.

4. Legal Comments

4.1. The Mayor’s Officer for Policing Crime is a contracting authority as defined in the Public Contracts Regulations 2015 (“the Regulations”). All awards of public contracts for goods and/or services valued at £181,302 or above must be procured in accordance with the Regulations.

4.2. The governance regime for procurements via the Value Added Reseller Contract with CDW is determined by whether the Met sets the requirement or accepts market offering. In this instance, the Met has prescribed requirement as the DR facility has to be an exact replica of the live version at Lambeth. To minimise the risk of challenge the route to market is a direct award to CDW. This complies with PCR 2015, section 32, technological compatibility. Classifying requirements. This is within the scope of the VAR Contract with CDW and therefore complies with EU Regulations.

4.3. Paragraph 4.13 of the MOPAC Scheme of Delegation and Consent provides that the Deputy Mayor for Policing and Crime (DMPC) has delegated authority to approve all contract exemptions for £100,000 or above.

5. Commercial Issues

5.1. Following a competitive tender exercise, MOPAC approved the award of a value added reseller (VAR) Contract to CDW from Lot 2 of the Tech Products Crown Commercial Services Framework (CCS) in April 2019. The justification for the request to approve award to CDW is that this storage will be provided by NetAPP (who are an existing supplier of such storage to MPS) and will be purchased through CDW who are the ‘Value Added Reseller (VAR)’ to the MPS and were appointed in April 2019.

5.2. NetApp is already used, so is the only option to ensure compatibility with the existing system. Progressing this is a best value option as moving to another system would have the potential to increase cost.

5.3. This requirement is in scope of this contract and allows the MPS to raise purchase works orders, in compliance with public procurement regulations. This complies with PCR 2015, section 32, technological compatibility.

6. GDPR and Data Privacy

6.1. The MPS is subject to the requirements and conditions placed on it as a 'State' body to comply with the European Convention of Human Rights and the Data Protection Act (DPA) 2018. Both legislative requirements place an obligation on the MPS to process personal data fairly and lawfully in order to safeguard the rights and freedoms of individuals.

6.2. Under Article 35 of the General Data Protection Regulation (GDPR) and Section 57 of the DPA 2018, Data Protection Impact Assessments (DPIA) become mandatory for organisations with technologies and processes that are likely to result in a high risk to the rights of the data subjects.

6.3. The Information Assurance and Information Rights units within MPS will be consulted at all stages to ensure the project meets its compliance requirements.

6.4. Lab Net has previously had a Privacy Impact Assessment (PIA) undertaken in February 2018 by Nigel Strutt, a CLAS security consultant.

7. Equality Comments

7.1. This business case has undergone initial equality screening. Due regard has been taken to the Equality Act’s Public Sector Equality Duty. Real consideration has been taken to assess equality impact caused by the proposed business changes.

7.2. As a result no positive or negative impact has been identified to any individual and/or group safeguarded by a protected characteristic and those who are not”.

8. Background/supporting papers

8.1. Report