Education and Awareness Consultancy

Bromford is a housing association; we exist to provide affordable homes for people who cannot access market housing. We are committed to providing safe, secure and warm homes, but also care about the people who live in our homes. Since being formed in 1963, the housing association has grown, organically and through partnerships and mergers, to own or manage 44,000 homes across the Midlands and south west.

Bromford's Security & Resilience team are seeking a partner(s) to assist in supporting the change of behaviours and culture within Bromford in relation to cyber security and business continuity awareness. We are looking for a partner to guide us on potential solutions for this and we anticipate this being achieved by designing a multi-stage process to achieve the successful implementation of an Education & Awareness programme.

We require a provider to enable this outcome to be achieved by designing an Education & Awareness programme that can be successfully implemented and measured within the organisation that adapts to a variety of different learning styles of our colleagues.

We expect the overall solution to be delivered via two contracts: • consultancy services to provide discovery, design, and content creation (this contract); • technology services to deliver the e-learning solution, which will be separately procured in tandem with this process.

The overall solution must be accessible to all colleagues including those not based in an office location i.e. field, roaming or home based. The proposal should be efficient to manage with our limited internal resources and make efficient use of colleague's time.

The solution is to be delivered in three stages:

Stage 1 (target duration 6 to 8 weeks from award) • Discovery - to understand what we have currently and previous initiatives. • Design with internal stakeholders and organisational sign-off Stage 2 (target duration 6 to 8 weeks from completion of stage 1) • Content creation to support the behavioural and cultural change towards security across our colleagues Stage 3 (target duration 4 to 6 weeks from completion of stage 2 and go-live of the technology) • Measurement and report on the behavioural change resulting from the implementation of the technology