The Provision of Improved Understanding of Third Party Integration Systems (U3S) 16A04 for the Department for Transport

The Department for Transport is seeking a supplier to provide the following:

The requirement is to provide a better understanding of how third party systems affect the security capabilities of X-ray screening equipment and whether any security vulnerabilities are created or increased by this integration.

The project shall provide:

• A description of how the various third party integration systems parse information between the X-ray machine and third party equipment and how it is manipulated.

• A description of what data the integration systems use – for example, directly using X-ray data or simply screen duplication – and how their treatment of the data differs from that performed natively by the X-ray system.

• A description of the features and functions performed by each part of the integration systems.

• An understanding of any detrimental security effects to the capabilities of the X-ray equipment caused by the integration systems.

• Where applicable, an understanding of how TIP management systems are affected by the various non-OEM systems and a description of any functional differences from the X-ray system alone.

• A recommendation as to whether combined systems including the X-ray systems and integration systems need to be re-tested and certified.

• A defined configuration management process to ensure any changes to the system configuration are recorded and assessed as critical (requiring approval) or non-critical (not requiring additional approval).

Further details can be found within the full documentation attached to this notice.