D-G5-L4-285 IT Disputes and Forensic Technology Support Deloitte LLP Service for G-Cloud V

Transcription

1 D-G5-L4-285 IT Disputes and Forensic Technology Support Deloitte LLP Service for G-Cloud V April 2014

2 Contents 1 Service Overview 1 2 Detailed Service Description 2 3 Commercials 6 4 Our G-Cloud Services 8 5 About Deloitte 9

3 1 Service Overview 1.1 Service Summary In a nutshell, what is it that Deloitte will do for you? This contract dispute service uses Deloitte's cutting edge technology and a proven track record to provide forensic technology services to meet your requirements, where you may be involved in a dispute or have concerns regarding your IT systems (including cloud services) or electronic data. The service is designed to be flexible around the needs of your organisation, to provide support ranging from assisting you to identifying the key issues and collating the relevant documentation, through to providing you with formal dispute advisory and independent expert witness services. Deloitte s Forensic Technology specialists have a suite of tools to enable them to collect, process, filter and review (or support your review) of vast amounts of electronic data in an efficient, yet secure manner. Our contract advice service would enable you to rationalise otherwise unmanageable volumes of data and focus in on the key issues and identify key documentation in relation to an issue. These issues and documentation can then be reviewed by a team of experienced dispute advisory specialists who would use their skills to succinctly set out the arguments in support of your dispute to assist in negotiations and any legal proceedings against a third party, typically a supplier of major outsourced IT services. The contract finance advisory advice service will be designed and priced using the rate card that accompanies this service description in order to flex with the scale and complexity of the investigation. The financial advice will be delivered by a specialist team of experts, with deep, relevant experience and a thorough knowledge of public sector organisations. 1.2 Business Context What situations is this service designed to be used in? This service is designed for a public sector organisation of any size that is involved in a dispute with its IT supplier and has concerns that require interrogation of its IT systems and data. Examples where we can assist you include: You are involved in a dispute with an outsourced service provider. This may include issues regarding invoicing and payment; You have concerns regarding your accounts payable or other control accounts e.g. duplicate or fraudulent invoicing or overpayments; You have an accounting black hole; or You have received a complex Freedom of Information request and are unsure how to prepare the data in order to respond in order to comply with the relevant legislation. The flexible service can be tailored to either assist an authority with its internal enquiries, or to provide support in formal legal disputes, including senior members of our team acting as independent financial or IT experts for the purposes of Court proceedings. Regardless of the service, our methodologies are performed to a rigorous standard that enable, if required, a client to meet the disclosure demands of a court process. D-G5-L4-285 IT Disputes and Forensic Technology Support Deloitte LLP Service for G-Cloud V 1

4 2 Detailed Service Description 2.1 Our Approach We would use state-of-the-art forensic technology to support your internal investigations or IT disputes. Deloitte s Forensic Technology team comprises professionals dedicated to the forensic management of electronic evidence. They are located in London, regionally across the UK and overseas, and are sufficiently flexible, including responding at short notice, to attend your business locations wherever they may be based. The size and capability of the team mean that they can react quickly and efficiently to your needs, whether you have concerns regarding your electronic data or are involved in an IT dispute. In particular our advisory role will: Inform management s decision making prior to and during supplier engagement; Manage confidentiality issues to mitigate untimely scrutiny and data controls; and Process high volumes of data to generate emerging findings to inform management s understanding of the scale of cost associated with a potential supplier issue. The service is designed to flex with the scale and complexity of your project so we have proposed a rate card that would be the basis for agreeing price. We have outlined the available activities below and we would expect to agree the length of our involvement based on required activities and outputs as part of each Service Order at the beginning of each project. Confirm the issues Assess the systems and data Understanding your Systems Data Capture, Recovery and Security Map data sources Identify data collection requirements Plan data mining Document review Document Management and Review Data Analytics and Corruption Analytics Unusual transactions Risk ranking Create a dashboard Court witness Expert Witness Services The detail of these key activities in our approach is described briefly here: Phase Activity Detail Understanding your Systems Confirm the issues Confirm the issues at the outset of the project with the authority s key stakeholders and technology experts to understand your issues and agree a plan of action. Assess the systems and data Establish a deep understanding of the authority s systems and data so that we can efficiently and effectively target the key data sources that will enable you to get to the heart of your problem. We can also leverage our large pool of IT experts to advise you on the more unusual or older, legacy IT systems. D-G5-L4-285 IT Disputes and Forensic Technology Support Deloitte LLP Service for G-Cloud V 2

5 Phase Activity Detail Data Capture, Recovery and Security Document Management and Review Data Analytics and Corruption Analytics Expert witness services Map data sources Identify data collection requirements Plan data mining Document review Unusual transactions Risk ranking Create a dashboard Court witness Draw on Deloitte s e-discovery expertise and unrivalled knowledge of specialist software and technologies to assist you in understanding and mapping your data sources. Identify what data needs to be collected and how best to collect it as efficiently and effectively as possible considering all data forms such as audio data as well as normal electronic files. Plan data mining using data mining, analytics and collection methodologies that have been accepted by the Courts and proven in the most complex and challenging situations. Where specifically required, plan the data mining activities required to assist you in responding to the more complex FOI requests in an efficient and cost effective manner. Use the latest tools and technologies to allow document review exercises to be carried out in a cost-effective and efficient manner including assisted review technologies that greatly reduce the overall volume of documents that need to be reviewed manually. Our Relativity platform also allows powerful conceptual searching, clustering and categorisation, and provides functionality to allow review teams to more quickly obtain a far better understanding of the key documents, themes and issues in the dataset. Identify suspicious/unusual transactions quickly and efficiently using our significant experience in forensic analysis and dealing with large sets of data. Apply our corruption analytics tool which is a technology based process which has been developed and has evolved through our own experience of fraud investigation, identifying fraud red flags and fraud risk profiling. Implement a powerful search engine to interrogate large amounts of standing and transactional data and compare it to external data in order to identify potential issues worthy of further investigation. Rank the results according to risk. Create an interactive, visual dashboard that is easy to interrogate and manipulate to summarise the results in a way that is readily understood. Use an analytics tools to significantly reduce the amount of data sampling and develop a rapid focus on the core issues. Supply personnel who have extensive experience of giving evidence in Court in relation to a range of matters that may be affecting you including claims for loss of profits, quantification of losses arising from a poorly performing contract or from a technical breach or giving evidence in relation to document capture and electronic disclosure. 2.2 Inputs During the course of an IT dispute engagement, we may require you to provide certain inputs to facilitate our provision of the service, examples of which we have listed here. We will discuss any such requirements with you at the outset, based on our initial understanding of your situation. However, if you are not in a position to provide such information, it is likely we can reach agreement to alter our approach to accommodate your requirements. Full access to financial accounting data, such as accounts payable; general ledger; or accounts receivable; Full access to / electronic document archive or backup data; Full access to supplier contract terms and all financial models; and Full access to employee hardware, such as desktops, laptops and company phones. D-G5-L4-285 IT Disputes and Forensic Technology Support Deloitte LLP Service for G-Cloud V 3

6 2.3 Your Contribution Our services are designed to be delivered with you rather than to you. We have assumed that you will be able to make the following contribution to the work. If you are not in a position to take on these responsibilities then please get in touch to discuss options, as it is likely we can reach agreement to alter our approach to accommodate your situation. Making available the time of senior stakeholders, decision-makers and IT technical staff, to attend planning and progress update meetings for this project, to enable us to feedback our opinions/findings and agree next steps with you in advance of moving to the next stage in the process. We will endeavour to be as accommodating as possible in arranging meetings with the relevant people; Providing access to the relevant data sources and computer hardware, identified by our forensic technology experts as being relevant to the engagement; Providing dedicated part-time resource to our joint working team, depending on the nature of the service required. Examples might include one or more FTEs to undertake structured reviews of any captured data, such as s relating to the key issues; and In the majority of cases where you might require the assistance of forensic technology and independent experts we would expect you to have engaged a firm of external legal advisers with whom we would liaise and work closely. Engaging directly with your external legal advisers will assist in establishing and maintaining legal privilege over our outputs. 2.4 Outputs What will you get in terms of deliverables, outputs and outcomes from this service? The outputs and deliverables will need to be agreed at the beginning of each assignment and will be determined by the length of our engagement, the activities required from those described and the scale and complexity outlined in paragraph 2.5. They could include: A forensic technology expert s written review of your IT systems to identify the key data sources relevant to your requirements; A forensically secure data capture/imaging service, including processing (e.g. de-duplication) and filtering, as required. Our standard methods ensure all captured data evidence is admissible if there is a need to present our findings in a court of law; A secure web-based review tool that enables you to perform your own searches across your data. A dedicated technical support team can be made available to assist you with this process, as necessary. Deloitte can also perform the searches on your behalf, using an experienced review team. We can also assist with this review process, using an experienced team of document reviewers; and If required, an expert witness report, written by an experienced expert who has been selected based on the specific requirements of the dispute. D-G5-L4-285 IT Disputes and Forensic Technology Support Deloitte LLP Service for G-Cloud V 4

7 2.5 Scale and Complexity The effort involved in delivering our service is driven partly by what we will do (which we have described in section 2.1 above) and what you will do before we arrive and alongside us whilst we work (which we have described in sections 2.2 and 0 above respectively). It is also driven by the scale and complexity of your business situation. This section describes the scale and complexity that we have designed this service to address. If your business situation is bigger or smaller than this then please get in touch to discuss options, as it is likely we can reach agreement to alter our approach to accommodate your situation. Our approach can be flexed to meet your specific needs. We have the team capability, technical skills and resource to react quickly to your situation, whatever the scale and complexity. The length of our engagement will vary depending on the nature and number of systems involved and the volume of data to be analysed. However, the technology available to our specialists and the tried and tested processes we employ mean that any size and complexity of data can be processed into a more manageable library of information that enables you to focus in on the key issues and documents. We have therefore proposed using a rate card in order to reflect the scale and complexity of your IT environment, supplier issues and specific activities required. D-G5-L4-285 IT Disputes and Forensic Technology Support Deloitte LLP Service for G-Cloud V 5

8 3 Commercials 3.1 Cost This service is offered on a rate card plus variable data processing charges. The rates are published in separate pricing documents available to download separately. The service is subject to the assumptions regarding scale and complexity or exclusions as listed in this service description. Our normal practice in these situations is to conduct detailed planning meetings with you and then scope out the work required. This allows us to provide you with a reasonable estimate of our costs and we would then update you on progress against this estimate on a regular basis. The level of detail of the reports and deliverables will be agreed with you at the start of the engagement so as to provide the maximum amount of value within the constraints of the price, resources and length of engagement. 3.2 Location The proposed services can be delivered from a combination of the customer's own premises and our own offices where we can store data to an appropriately secure standard. We will endeavour to resource projects with staff who work locally to the customer, but this may not be possible and there may be additional charges for travel and accommodation expenses incurred in such cases. These will be agreed in the Service Order. 3.3 Ordering and Invoicing Process There are two ordering routes available: 1. Visit our G-Cloud service homepage at which contains information about the service and also has an online form for ordering. 2. Send an to g-cloud@deloitte.co.uk with the following information: a. Your organisation s name b. The name of this service, which is D-G5-L4-285 IT Disputes and Forensic Technology Support c. Your name and contact details d. A brief description of your business situation e. Your preferred timescales for starting the work D-G5-L4-285 IT Disputes and Forensic Technology Support Deloitte LLP Service for G-Cloud V 6

9 3.4 Exclusions Our service description in section 2 above defines the scope of what we will deliver. For the avoidance of doubt, we have listed below any activities that (in our experience) are sometimes expected to be in our scope but which are not included within this service. Consideration of options for contract change; Opinion of whether the contract offers value for money or not; Negotiation strategy for generating value for money; Exhaustive list of negotiation levers; Financial modelling of restructuring options; Financial modelling of the impact on budgets; Provision of accounting opinions; Provision of tax advice; Provision of legal advice; Verification or checking of information provided to us, unless specifically agreed; Leading supplier negotiations as the principal; Reprocurement planning and advice; and Review or assessment of the authority s technology landscape or strategy. D-G5-L4-285 IT Disputes and Forensic Technology Support Deloitte LLP Service for G-Cloud V 7

10 4 Our G-Cloud Services 4.1 Our G-Cloud Strategy Deloitte offers a range of services on the G-Cloud Store. Our strategy is to provide commoditised services for the public sector, which are suitable for public bodies addressing the changes required of them in a digital world. Our services cover the breadth of Specialist Cloud Services from business analysis to design and development; transition management to project specification and selection. We also offer some software-as-a-service options on the store, and intend to expand our service provision in response to customer demand in the future. 4.2 Further Information For more information about our G-Cloud strategy and services, please visit D-G5-L4-285 IT Disputes and Forensic Technology Support Deloitte LLP Service for G-Cloud V 8

11 5 About Deloitte 5.1 Our Business Deloitte LLP ( Deloitte ) is a leading professional services firm, employing over 13,000 staff across 20 locations in the UK. Our Public Sector practice includes over 1,000 experienced specialists in central civil government, health, transport, defence and local and regional government, some of whom have previously worked at senior level. In addition, we have over 1,000 staff who can work in both the public and private sectors, enabling transfer of experience and methods. As a Big Four professional services firm, we are well positioned to draw upon skills across a wide range of service offerings to deliver Cloud-based services. We work across the public sector as a trusted advisor and as a supplier of leading edge technology services. This includes an extensive portfolio of Specialist Cloud Services available as commoditised services in the G-Cloud catalogue. Our public sector team plays an active role in the development of methodologies, value propositions and points of view to assist our public sector clients. We conduct research in areas that are of current and emerging interest to our clients, identifying best practice and new developments in the UK and internationally. In the Kennedy Forensics and Dispute Advisory Services report, 2013 Deloitte was ranked number one globally based on revenue in the forensics and dispute advisory (F&DA) services sector. In addition, Deloitte was named a Vanguard leader in both forensic and investigative services and dispute advisory and analysis services for its depth and breadth of capabilities. The report also praised Deloitte for strength across capabilities in both forensic investigation and dispute advisory and analysis and found it was most often identified as world-class by clients. In this section we outline some of the elements which differentiate us in the marketplace. 5.2 Professional Standards As a leading supplier, Deloitte operates to high standards of professionalism: We recruit highly capable staff and maintain effectiveness through training, performance management and continuous professional development Quality on every engagement is managed through a Quality Management Plan and partner sign off of deliverables on all engagements. Technology Consulting services are accredited to ISO9001, the international quality standard, which includes acting on customer feedback and continuous improvement plans As members of the Chartered Institute for IT (BCS), our Technology practice and individual members are bound to its Code of Practice and Code of Conduct which defines good practice for ICT and technology consultancy. We are also registered with the TickIT scheme We are a Green classified CESG approved company and have a number of CHECK Team Leaders Our project management methodology, which is aligned with PRINCE 2, provides mechanisms for managing all aspects of engagements, including project risks and issues. We have over 300 staff with PRINCE2 or similar PIM qualifications D-G5-L4-285 IT Disputes and Forensic Technology Support Deloitte LLP Service for G-Cloud V 9

12 Our Focus on delivery includes regular contact with client management and frequent progress updates when issues can be identified at an early stage to enable easier risk mitigation and help avoid escalation Deloitte is reliable to work with and sets out to deliver the services needed. Our high reputation in the market is based on our commitment to deliver even in difficult circumstances, while building trusted relationships with our clients We actively promote sustainability within our supply chain and have a strong commitment to equality, diversity and corporate responsibility. Our firm is accredited to ISO14001, the international environmental management standard, and CAESAR (Corporate Assessment of Environmental, Social and Economic Responsibility). Deloitte is accredited to ISO27001, the international security management standard. We operate robust processes for safeguarding customer data and for confidentiality of information. We are registered under the Data Protection Act and have safeguards in place to protect the data of our own personnel or any personal data with which we are entrusted by clients We have processes in place to preserve the integrity and independence of the services we provide. For example, bids are subject to conflict checks to avoid conflicts of interest, all Deloitte staff are required to complete Anti-Bribery and Anti-Money Laundering training, partners and staff are subject to independence checks and there are frequent internal audits and compliance checks 5.3 Security The majority of our public sector team are vetted to Baseline Personnel Security Standard or cleared to National Security Vetting SC level. In total, this is over 1,000 people with some form of security vetting. Deloitte is a List X company. We employ a full time Security Controller and Security Team to manage security clearances, advise on development of Security Management Plans and manage compliance with security processes. We have comprehensive Business Continuity Plans in place in all locations. Staff are equipped to work remotely if client sites or Deloitte sites are inaccessible. 5.4 Responsible Business At Deloitte Responsible Business is not just a strap line. We appreciate that our everyday business activities affect wider society through our actions and through the actions of those with whom we do business. Our approach to Corporate Responsibility is fully integrated with our business strategy; as such we are fully committed to addressing requirements from the Social Value Act. In the last year we launched our inaugural Impact Report ( replacing our traditional annual report and providing the platform through which we will measure our impact and contribution to society into the longer term. 5.5 Geographical Coverage Deloitte has 20 office locations throughout the UK, plus offices in Guernsey, Jersey and the Isle of Man. We also have a National Solutions Centre which is based in Belfast and provides software engineering capabilities for our clients. 5.6 Innovation and Continuous Improvement Deloitte understands the importance of innovation to public sector clients in their endeavours to reduce costs and ensure better outcomes. Deloitte approaches public sector engagements from the standpoint of delivering tangible or measureable outcomes and effective use of resources. Cloud provides a major opportunity to challenge existing provision of IT in the organisation, and improve working practices, service levels and reduce operating costs. D-G5-L4-285 IT Disputes and Forensic Technology Support Deloitte LLP Service for G-Cloud V 10

13 We are willing to challenge current ways of working in the public sector and to harness technology and lean thinking to produce satisfactory outcomes that deliver the client s objectives at lower cost. We seek to ensure that our people, methods, infrastructure and working practices deliver high quality services to our clients and an environment where our staff can work effectively. We recognise that this is only possible if our working procedures, methods and tools, staff skills and training continue to improve. We undertake a number of activities to set objectives for key processes, measure performance against these objectives and assess and adjust our operational and engagement procedures to sustain improvement. 5.7 Capability Transfer Deloitte prefers to provide capability, knowledge or skills transfer on most projects. We can also work in such a way that capability transfer is at the heart of the engagement. Examples include: Training client staff for team roles at the outset of an engagement to reduce costs and provide for continuity of skills after we exit from the client Providing only those services which a client cannot provide for themselves and avoid practices such as staff substitution as much as possible Delivering comprehensive capability transfer so that client staff are able to take over fully the operation or extension of a service or continue to manage a change programme from their own resources. We also have a programme of secondments both to and from the public sector, which enhances our industry insight while strengthening our relationship with public sector. 5.8 Our Business Structure Deloitte LLP comprises a number of business units. Our G-Cloud services are provided from across our business, bringing in the skills and experience we need. Because our business structure is set up as a group, some of our business units are constituted as wholly owned subsidiaries of Deloitte LLP. For the purposes of our G-Cloud services, the Deloitte MCS Limited (company registration number ) is a sub-contractor that we may rely upon to deliver service. D-G5-L4-285 IT Disputes and Forensic Technology Support Deloitte LLP Service for G-Cloud V 11

14 Important notice This document is not an offer and cannot be accepted. Should you wish to obtain our services, please contact us using the Ordering Process described in section 3.3 to discuss your requirements and how we may meet them. Following these discussions and our internal acceptance procedures, we would then enter into a direct order with you in accordance with these Framework terms to confirm our appointment. The information contained in this document has been compiled by Deloitte LLP and includes material which may have been obtained from information provided by various sources and discussions with management but has not been verified or audited. This document also contains confidential material proprietary to Deloitte LLP. Except in the general context of evaluating our capabilities, no reliance may be placed for any purposes whatsoever on the contents of this document or on its completeness. No representation or warranty, express or implied, is given and no responsibility or liability is or will be accepted by or on behalf of Deloitte LLP or by any of its partners, members, employees, agents or any other person as to the accuracy, completeness or correctness of the information contained in this document or any other oral information made available and any such liability is expressly disclaimed. In this document references to Deloitte are references to Deloitte LLP. Deloitte LLP is the United Kingdom member firm of Deloitte Touche Tohmatsu Limited ( DTTL ), a UK private company limited by guarantee, whose member firms are legally separate and independent entities. Please see for a detailed description of the legal structure of DTTL and its member firms Deloitte LLP. All rights reserved. Deloitte LLP is a limited liability partnership registered in England and Wales with registered number OC and its registered office at 2 New Street Square, London EC4A 3BZ, United Kingdom