PCD 1637 IT Platform Upgrade

PCD 1637 IT Platform Upgrade

This project concerns maintenance and upgrades to the MPS's Secret IT Platform, known as Pyxis. The upgrades replace obsolete IT solutions and deliver operational efficiencies for Covert and Professionalism Command users. Technical details are highly sensitive. 

Funding is from the MOPAC-approved Digital Data & Technology (DDAT) Capital Plan 24-25, with procurement via existing reseller frameworks. 

The Deputy Mayor for Policing and Crime is recommended to:

1. Approve project capital of £1.98m from the MOPAC-approved Digital, Data and Technology (DDaT) Capital Budget.  

2. Approve additional BAU revenue spend of £225k per annum from FY 2027/28, managed in the MTFP.  

3. Approve direct awards via Value Added Resellers with total contract values totaling up to £1.63m and contract terms ofmup to five years including extension options. 

PART I - NON-CONFIDENTIAL FACTS AND ADVICE TO THE DMPC 

1. Introduction and background 

1. This business case concerns maintenance and upgrades to the MPS Secret IT Platform. This IT platform is used by officers and staff in specialist commands for the most sensitive investigations and operations. All data on the platform is classified as Secret under the Government Marking Scheme. 

2. Issues for consideration 

1. The MPS IT Secret Platform must be maintained with up to date functional and cyber security capabilities. At the same time, users in Covert and Professionalism Commands require greater flexibility and more streamlined processes to meet increased demands on their workloads. 

2. The upgrades in this business case will reduce pressure on 'secure' areas and enable users to work more flexibly, whilst also maintaining high levels of information security. 

3. This business case primarily support the Mayor's priority of Increasing Trust and Confidence. Professionalism Command is tasked with investigating allegations of misconduct against officers and staff, and helping to remove those found guilty of gross misconduct. The IT solutions contained in this business case are used by Professionalism Command. 

4. The MPS Secret Platform is also the only accredited IT platform for sensitive major inquiries, such as historic Anti-Corruption Inquiry and the Undercover Policing Inquiry. The new technology will support those investigations to work more efficiently. 

3. Financial Comments  

1. Capital spend of £1.98m funded from within the MOPAC-approved DDAT capital budget. No additional funding is requested. The project will complete in 2024/25 FY. 

2. Revenue costs from 2027/28 increase by E225k pa. This cost will be managed by DDAT in the MTFP. 

4. Legal Comments 

1. There are no legal issues arising from this business case outside of those pertaining to the commercial route to market. 

5. Commercial Issues  

1. The MPS will achieve value-for-money by competitively tendering via the Health Trust Europe framework using the existing Value Added Resellers, SoftCat and Computacenter. The contract includes up to five years' support, maintenance, licencing and/or subscription services for some items including all extension options. 

2. Due to the nature of this business case, upgrading key IT processes at Secret level, there is no direct contribution to the London Anchor Institutions' Charter. 

6. GDPR and Data Privacy  

1. The MPS is subject to the requirements and conditions placed on it as a 'State' body to comply with the European Convention of Human Rights and the Data Protection Act (DPA) 2018. Both legislative requirements place an obligation on the MPS to process personal data fairly and lawfully in order to safeguard the rights and freedoms of individuals. 

2. Under Article 35 of the General Data Protection Regulation (GDPR) and Section 57 of the DPA 2018, Data Protection Impact Assessments (DPIA) become mandatory for organisations with technologies and processes that are likely to result in a high risk to the rights of the data subjects. 

3. The Information Assurance and Information Rights units within MPS will be consulted at all stages to ensure the project meets its compliance requirements. 

4. The screening questions have been completed and a DPIA is not required because the project does not use personally identifiable data of members of the public, so there are no GDPR issues to be considered. 

7. Equality Comments   

1. MOPAC is required to comply with the public sector equality duty set out in section 149(1) of the Equality Act 2010. This requires MOPAC to have due regard to the need to eliminate discrimination, advance equality of opportunity and foster good relations by reference to people with protected characteristics. The protected characteristics are: age, disability, gender reassignment, marriage and civil partnership, pregnancy and maternity, race, religion or belief, sex and sexual orientation. 

2. No negative impact has been identified to any individual and/or group safeguarded by a protected characteristic and to those who are not, thereby negating the requirement to document any mitigation. As this is an upgrade of an existing service this work does not change any aspects relating to equality or diversity. 

8. Background/supporting papers 

None.