Service Take-on for Corporate WLAN

This decision concerns completion of Network Tower Agreement (NTA) take-on of Corporate Wireless Local Area Network (WLAN) service obligations. Corporate WLAN comprises:

• Production (Corporate) Wi-Fi provides end-user access to the MPS Enterprise Wide Area Network (WAN).

• Guest (Gov.Wifi) complies with the requirements of the UK Government Gov.Wifi template to provide a technical framework to secure and authenticate Guest user internet access.

• Pre-Production Wi-Fi deployed in a limited number of sites. It provides end-user access to the Pre-Production firewalled domain within specific Data Centres only.

This project will deliver the following, which are prerequisite to take-on of full service obligations: a) all hardware vendor-supported, b) all software vendor-supported and up to date, c) a fit-for-purpose technical solution, d) 24/7 service monitoring in place with appropriate support tools and resources.

The Deputy Mayor for Policing and Crime is recommended to approve £709,000 (being £638,000 in 2020/21 and £71,000 in 2021/22) of Capital from the MOPAC Approved Digital Policing Capital Budget and increased revenue cost of £169,000 per annum from Q3 21/22 onwards which will be met from the MOPAC approved Digital Policing revenue budget to fund completion of Network Tower Agreement take-on of agreed corporate Wireless Local Area Network service obligations.

1. Introduction and background

1.1. MOPAC has recently invested in the Network Tower Agreement (NTA). The NTA defines service obligations, key performance indicators and provides a comprehensive commercial and service environment. However, the Corporate WLAN service predates NTA. This project is to bring the Corporate WLAN service within the scope of the NTA by:

• Upgrading the Wireless Local Area Network Controllers with the latest Cisco software.

• Migrating Production Wi-Fi hardware over to the BT Shared Services Platform, to improve service support

• Independent IT Health Check (Penetration) Testing

• Define within NTA: Service Obligations, Service Level Agreements (SLAs) and Key Performance Indicators (KPIs) applicable to Corporate WLAN service.

1.2. This aligns to ‘The Met’s Direction: Our Strategy 2018-2025’ by:

• Ensuring continued availability of wireless network services, supporting officers and staff in 121 MPS buildings across Greater London.

1.3. The expected life of the replacement solution is four years

2. Issues for consideration

2.1. An IT Health check is not required, as all components of the proposal solution already hold Authority to Operate (AtO) approval.

3. Financial Comments

3.1. The project aims to deliver completion of Network Tower take-on of corporate WLAN service obligations at a capital expenditure cost of £709k (being £638k in 2020/21 and £71k in 2021/22), which will be met from the MOPAC approved DP Capital budget.

3.2. There is an increased revenue cost of £169k per annum from Q3 21/22 onwards that will be met from the MOPAC approved Digital Policing revenue budget. A number of Network Optimisation and Telecoms Expenses Management programmes are underway with suppliers across the estate which is bringing down costs on the Network Tower budget due to better network utilisation, improved topology, retiring and migration to new services. The consequent reduction in costs in this area therefore enables this additional cost to be accommodated.

4. Legal Comments

4.1. The Mayor’s Office for Policing and Crime (MOPAC) is a contracting authority as defined in the Public Contracts Regulations 2015 (the Regulations). All awards of public contracts for goods and/or services in excess of £189,330 shall be procured in accordance with the Regulations.

4.2. Paragraph 4.8 of the MOPAC Scheme of Delegation and Consent provides the Deputy Mayor for Policing and Crime (DMPC) reserves the right to approve business cases for revenue or capital expenditure of £500,000 and above.

4.3. The proposed works orders with BT and Keysource are to be procured through the MOPAC’s Networks and Service Integration and Application Management ‘Tower’ contracts respectively. The technical and financial scope of the proposed orders are within the respective ‘Tower’ contracts.

5. Commercial Issues

5.1. The services required to deliver completion of Network Tower take-on of corporate WLAN service obligations will be procured via the Network Tower supplier under the existing framework between them and the MPS.

5.2. Commercial Principles

• The completion of Network Tower take-on of corporate WLAN service obligations will be ordered under the Network Tower Agreement with BT.

• MPS confirm that the proposed works order to BT is within the technical and financial scope of Network Tower Agreement and Service Integration and Application Management Agreement respectively.

• The NTA terms & conditions includes all the key contractual clauses & payment mechanisms and allows for changes/projects to the contract through a prescribed change process.

• The MOPAC has approved a total contract value of £200m for the Network Tower (PCD 151 dated 02/03/17. This paper does not have an impact on the total contract value.

• The technical and financial scope of this BJP is within the scope of the original NTA contract as approved by MOPAC. The initial proposal was reviewed by the Core Infrastructure team and architecture who are recommending that this paper progresses.

• There is no impact on the workforce as this request is about an existing service i.e. there are no TUPE implications or staff changes.

6. GDPR and Data Privacy

6.1. The MPS is subject to the requirements and conditions placed on it as a 'State' body to comply with the European Convention of Human Rights and the Data Protection Act (DPA) 2018. Both legislative requirements place an obligation on the MPS to process personal data fairly and lawfully in order to safeguard the rights and freedoms of individuals.

6.2. Under Article 35 of the General Data Protection Regulation (GDPR) and Section 57 of the DPA 2018, Data Protection Impact Assessments (DPIA) become mandatory for organisations with technologies and processes that are likely to result in a high risk to the rights of the data subjects.

6.3. The Information Assurance and Information Rights units within MPS will be consulted at all stages to ensure the project meets its compliance requirements.

6.4. The project does not use personally identifiable data of members of the public, so there are no GDPR issues to be considered.

7. Equality Comments

7.1. This project will not impact Equality and Diversity. All work will be let through two existing MOPAC contracts: the Network Tower Agreement and the Service Integration and Application Management Agreement. These two existing MOPAC contracts are fully compliant with legal requirements, including Equality Law, and MPS legal advisors confirmed this during contract review prior to contract award.

8. Background/supporting papers

8.1. None.