Office of National Assessments

FOUO CMS website

Important dates

Opportunity ID
Deadline for asking questions
Tuesday 15 May 2018 at 6PM (in Canberra)
Closing date for applications
Tuesday 22 May 2018 at 6PM (in Canberra)
Tuesday 8 May 2018


Write a summary of your brief

ONA is seeking a contractor to develop, host and support a CMS website. The site is to be hosted on infrastructure certified to be suitable for at least For-Official-Use-Only level information.

What is the latest start date?
How long is the contract?

Development: Fixed price.

Support: 3 years ongoing support.

Where can the work take place?
Australian Capital Territory
Who will the specialist work for?
Office of National Assessments
Budget range

About the work

Why is the work being done?

ONA is seeking a contractor to develop, host and support a CMS website. The site is to be hosted on infrastructure certified to be suitable for at least For-Official-Use-Only level information. This work is to replace a website that will be decommissioned at the end of July 2018.

What's the key problem you need to solve?

Basic CMS access to government reports for authenticated users.

Describe the users and their needs

Project Services Delivered:

• Project Implementation Plan

o MVP release + subsequent V1 release

• Full analysis of project implementation requirements

• Full solution design (as-built documentation)

• Full solution development including

o Ingest of content (XML format) and multimedia attachments from third-party managed Amazon Web Services S3 bucket

o Publicly available CMS website, hosted on cloud infrastructure

o Website user authentication and management

• Deployment

o Installation on cloud infrastructure certified to at least For-Official-Use-Only classification (FOUO) by the Australian Signal Directorate. A PROTECTED certified environment would be treated most favourably where this can be achieved at minimal additional cost.

• Ongoing infrastructure, platform support and maintenance (initial 3 year agreement)

Solution Components

• Cloud infrastructure

• Ingest of XML content

• Authenticated user accessible CMS website

What work has already been done?

Who will the work be done with?

ONA staff.

Any additional relevant information?

Summary of Solution Requirements

 FOUO or higher rated cloud infrastructure Cloud infrastructure

o Permanent data store for ingested XML content

 1500 items per day. Average item size of 1MB (variable as may include videos)

 Minimum of 3 years content maintained

 Infrastructure can scale to meet greatly increased content volume

o Also hosts publically available CMS website for search and subscription-based email distribution of ingested XML content

o Document store/CMS database as website backend

o SMTP Server

 Ingest of XML content

 Regular, scheduled ingest (hourly + on demand) of XML content batches matching specific item attributes from Amazon Web Services S3 bucket into a permanent data store (XML structured)

 Content from permanent data store is then ingested into document datastore/CMS database

 Maximum latency of 30 minutes for ingest of new content in S3 bucket into permanent data store

 CMS website

o Publically available URL, however only login authenticated users can view content

o < 1 response time on all page/search requests

o Simple and advanced search

 Complex boolean, facet based searching

 Fuzzy matching

 Sort results by publishing date, relevance, title

 Results returned as human-readable rich text

o User management

 Admin – create, approve, lock, delete users

 User – register, forgot password, change password, update details

o Facet driven navigation

 Navigation through facets of content (country, region, topic, more)

o View content item (text + embedded images/videos, file attachments)

o User can "Save" searches for reuse

o User can subscribe to "Saved" search results can via email and RSS as new content matching search is ingested

o User can organise saved content items into folder structure

o Website mainly accessed on desktops, however basic functionality – search, view content should be possible mobile devices.

Ongoing Support

Ongoing application and infrastructure support for 3 years is required under a service level agreement (SLA). The SLA should include at a minimum:

o Break/fix unlimited support.

o Security vulnerability patching and other functionality critical updates

o 24/7 security event monitoring



The Solution Provider will provide complete system architecture documentation for the proposed solution, down to the individual component level.


The Solution Provider will provide documentation outlining the technical support services that would be made available to accompany this infrastructure, including agreed response times and service expectations.

What phase is the work in?

Work setup

Where will the work take place?

2 National Circuit Barton

What are the working arrangements?

During development: On site once a week for project update.

During support phase: Quarterly on site meetings

Is security clearance required?

Yes. Active NV1 clearance recognized by AGSVA.

Additional information

Additional terms and conditions

Skills and experience

Buyers will use the essential and nice-to-have skills and experience to help them evaluate sellers’ technical competence.

Essential skills and experience
  • Extensive CMS development experience
  • Extensive experience securing public facing cloud infrastructure
Nice-to-have skills and experience

How sellers will be evaluated

How many shortlisted sellers will you evaluate?
Proposal criteria
  • Technical solution
  • Approach and methodology
  • How the approach or solution meets user needs
  • How the approach or solution meets your organisation’s policy or goal
  • Estimated timeframes for the work
  • How they’ve identified risks and dependencies and offered approaches to manage them
  • Team structure
  • Value for money
Cultural fit criteria
  • Commitment to transparency
  • Commitment to project delivery
  • Understanding of security environment
Payment approach
Fixed price
Assessment methods
  • Written proposal
  • Case study
  • Work history
  • Reference
Evaluation weighting

Technical competence

Cultural fit


Seller questions

Seller questions
Seller question Buyer answer
1. Please advise how you would like to receive a written proposal for this requirement as the system is only allowing 2x 150 word max response boxes and no document upload options. 5 shortlisted sellers will be contacted to provide a complete written proposal.
2. What CMS is in the current website and has a preference or choice been made on a particular CMS to be used for the future? The current website is hosted by another agency. CMS is unknown. There is no requirement to migrate content from the current website to the new website. Winning seller will be able to view current website to better understand functionality requirements of new website. No preference for a particular CMS for the new website. Proposed CMS will be evaluated on suitability to solution requirements and price.
3. If the seller does not have an Active NV1 security clearance recognized by AGSVA, are they precluded from responding? This procurement is time critical. ONA cannot meet its objective without engaging cleared personnel.

Interested in this opportunity?

Before you can apply for this opportunity, you need to:

  1. Register to join the Marketplace.
  2. Submit a case study and pricing and check your documents are up-to-date.
  3. Request an assessment of your chosen case study.