Catalogue Publication

Marketplace has four channels: Public Cloud Services (SaaS), Consultancy and Professional Services, Managed Services and Enterprise Software.

What are channels, catalogues and services?

Suppliers' offerings on Marketplace are structured in three tiers:

Channels — top tier: The channels are high-level groups of service or product types, like public cloud (SaaS) services, and consultancy and professional services.
Catalogues — main categories: Each channel contains a number of what we call ‘catalogues’. Catalogues are the main categories in which supplier offerings are organised on Marketplace. Examples are infrastructure managed services, Construction Consultancy Services and ICT professional services.
Services: Each catalogue is divided into specific service or product types, such as database management and administration, and cloud transition services.

Here is an example:

Channel: Managed Services
- Catalogue: Cloud brokerage
  - Service: Cloud service management

When a new channel or catalogue is opened for business on Marketplace, an open Notice of Procurement is published on the New Zealand Government Electronic Tenders Service (GETS) website (gets.govt.nz).

Use the above field to help find a specific service

SaaS

Digital Personalisation Software provide a platform whereby services can be delivered in a way that gives the user a choice of options and control over how and when they are delivered. Services can include:
- Customer Segmentation, which allows agencies to identify personas and group customers into distinct segment to develop content that is relevant for that group;
- Multi-channel Support, which allows customers to interact with government regardless of channel, for example call centre or mobile application, and still receive a personalised experience where they do not have to provide the same information multiple times;
- Identity and Access Management Integration Services, which provides processes and capabilities to facilitate the management of identity, ultimately reducing the amount of repetitive information sharing required across government;
- Personalisation Tools, which allow content or digital services to be personalised for customers, to provide them with content that is relevant to their needs;
- Natural Language Processing, which allow agencies to utilise technologies that can interact with and understand human speech, for example sentiment analysis and language translation.
Administration Fee
The Administration Fee for these services has been waived.
Digital Insights Software provide the user the data to understand the experience of their customers when interacting with the user’s digital service. Services can include:
- UX Analytical Tools, which provide agencies the data and analysis on how their customers are interacting with their digital services;
- Customer and Predictive Analytics, which gather meaningful data on customers’ digital behaviour, and allow agencies to use existing data sets to determine patterns and predict trends of customers;
- Performance Analytics, which measure the performance and efficiency of digital services over time and facilitate continual improvement.
Administration Fee
The Administration Fee for these services has been waived.

Consultancy and Professional Services

Analytics and search engine optimisation involves techniques to:
- increase the amount of visitors to a website.
- make sure people get the information they’re looking for.
- improve the user experience.
- show improvements and website performance with proactive reporting.
This is done through the analysis of search engine performance and web analytics.
Web accessibility services are used to:
- review and advise on web content, design, and development plans and outputs with respect to the New Zealand Government Web Accessibility Standard for making web content accessible to people with disabilities;
- review and determine how well specific web pages meet the New Zealand Government Web Accessibility Standard.

Information security risk management is the process of managing risks associated with the use of information technology. It involves identifying, assessing, and treating risks to the confidentiality, integrity, and availability of an organization's assets. The aim is not to eliminate all risks, but rather to identify and achieve an acceptable level of risk for the organization.
Information security risk management and assessment includes:
- business-focused information security and privacy risk and impact assessments;
- threat modelling processes;
- risk management training and education;
- advice and guidance on the effective deployment of recognised risk management frameworks;
- the development and implementation of appropriate risk management plans with supporting remediation tracking and reporting activities.
Information security governance and strategy is the process to identify an organisation’s information assets and then implement policies and procedures to protect those information assets.
Information security governance and strategy includes:
- developing information security programmes, which may include security strategy, policy, standards, procedures and guidelines;
- providing advice on the design and implementation of architectures;
- providing advice on the selection of technologies and the secure adoption of architectural patterns (including common capabilities);
- providing guidance on how the agency can transition to a future architectural state;
- providing strategy and direction by assigning a virtual Chief Information Security Officer (VCISO) to work in an agency’s in-house team.
Information security assurance involves managing risks related to the use, storage and transmission of data and information to ensure the confidentiality, integrity and availability of an organisation’s information.
Information security assurance includes:
- New Zealand Government PSR framework;
- NZ Information Security Manual (NZISM) to achieve Certification of Government Systems;
- national or international standards such as ISO 27000 series, and/or industry standards such as the Payment Card Industry Data Security Standard;
- agency specific policies, standards and frameworks.
Source code, application review and technical testing is the quality assurance process which involves the manual or automated review of an applications’ source code in an attempt to identify security related weaknesses in the code.
Source code, application review and technical testing includes:
- software source code, application and configuration review to establish that security requirements have been met;
- identification and quantification of security vulnerabilities in an application, system, network, or infrastructure component;
- evaluation of security by simulating an attack by a malicious user (by Internet-based or internal network penetration testing, social engineering, etc);
- advice, assessment and training on the system development process, Secure Coding Practices and the Secure Software Development Lifecycle ensure security and privacy requirements are designed, built and implemented into new or changed application systems.
Security incident response is an organized approach to addressing and managing the aftermath of a security breach, cyberattack, or security incident. The goal is to handle the situation in a way that limits damage and reduces recovery time and costs.
ICT forensics is the performance of a structured investigation on a computing device to find out either what happened or who was responsible for what happened, while at the same time maintaining a properly documented chain of evidence in a formal report.
ICT Security Incident Response, Investigation and Forensics includes:
- providing advice, training and/or support with security incident response;
- the provision of expert witness services relating to electronic evidence;
- forensic preservation of electronic evidence; investigation and electronic evidence gathering; and cyber-crime investigations.

Managed Services

Server Management and Administration Services provide for the:
- Provision / de-provision,
- configuration,
- monitoring and management
- patching, security and lifecycle management,
- support and maintenance
of the Participating Agency’s on or off premise server infrastructure (physical, virtual, cloud or IaaS) to service levels and outcomes and provides recommendations for improvements and optimisation.
Administration Fee
The Administration fee for this service is 1.75%. For Managed Services suppliers collect this fee on behalf of the relevant Lead Agency by invoicing the Purchasing Agency.
The method of calculation is Administration Fee x invoice amount, exclusive of GST.

Cloud Service Management administers and operates the systems and applications that facilitate an on-demand service delivery model across single or multiple cloud environments. Activities and tasks undertaken provide the ongoing planning, designing, delivery and operation of cloud services on behalf of agencies using appropriate tools, processes and capabilities to manage, monitor and support cloud environments.
Services can include:
- Cloud service integration
  - synchronises data and applications across cloud platforms in a standard manner
  - connects, leverages and optimises cloud technologies and data to facilitate management and resolution of incidents and fulfilment requests (including integration with existing Service Management platforms).
  - provides continuous improvement of service management between all cloud participants, while maintaining compliance and producing auditable results.
  - provides standardised policy enforcement and permissions oversight across multiple cloud providers.
- Cloud service orchestration
  - brings together tasks for deploying and provisioning of workloads across cloud platforms to reduce service delivery times and achieve costs reduction through automation.
- Cloud service aggregation
  - provides a single view of services by bringing together and consolidating agencies’ cloud computing services and environments.
provides the ability to deploy services over multiple computing services into one or more standardised composite cloud services; such as single sign-on, customer support, consistent management view, unified billing and SLA management.
Administration Fee
The Administration fee for this service is 1.75%. For Managed Services suppliers collect this fee on behalf of the relevant Lead Agency by invoicing the Purchasing Agency.
The method of calculation is Administration Fee x invoice amount, exclusive of GST.

Payroll related services comprising both software functionality and a range of associated services, provided and managed “as-a-service” by a supplier. Typically referred to as outsourced and/or bureau services. The functionalities of a payroll solution must include the payroll component of the taxonomy and may also some or all of time & attendance, award interpretation, rostering, human resources (HR), workforce management, self-service and data management.
Associated Services replace functions the agency might otherwise perform, including but not limited to:
- Payroll Administration - general payroll operation to ensure correct and control of payments of agency staff.
- Configuration Consultation - guidance on the optimal configuration, reports and rules required to make the system function as required for agencies.
- Payroll Service Performance Management - provision of information showing the usage and performance of payroll system and processes, including run times, response times, down time, update outages, problem resolution and queries/area.
- Payroll Metrics (cost to serve, movement, pays vs rework) - provision of payroll information to agencies outlining payroll process activity and performance.
- Advice and Guidance (Support Hours/levels of guidance) - agency support provided and related aspects such as hours of operation and service levels such as resolution times.
- Process Optimisation - assisting agencies to optimise all aspects of their system and processes to support end to end outcomes.
- 3^rdParty Disbursements - the payover of schedules and monies to employees banking institutions, deduction companies, Superannuation providers and other statutory agencies.
- Disaster Recovery and Business Continuity - a service that backs up the customer's own systems/processes in the event of a disaster or some unavoidable disruption to the customer's business environment.
- Payroll Audits - provision of payroll audit processes to ensure the control aspect of their payroll including independent review and examination of configuration, records and activities to assess the adequacy of system controls, to ensure compliance with established policies and operational procedures.
Security Advice
If your services consist of several components that may be consumed independently, please consider whether separate applications should be submitted instead of a bundle. A single application will be treated as ONE for security reviews including for Tier 1 certification. If appropriate security assurance cannot be provided for one specific component, the whole application may be declined. The Marketplace team can help you decide on the best approach for your application, please ask them.
Administration Fee
The Administration fee for this service is 1.75%. Managed Services suppliers will collect this fee on behalf of the relevant Lead Agency by invoicing the Purchasing Agency.
The method of calculation is Administration Fee x invoice amount, exclusive of GST.

Catalogue Publication

What are channels, catalogues and services?

SaaS

Collaborative Working

Blogging

Booking, Scheduling and Diary Management

Enterprise Social Networking

File Sending and File Sharing

Idea Management

Project Collaboration

Task Management

Webinars

Analytics and Business Intelligence

Business Intelligence

Data Mining, Analysis Tools and Analytics

Data Visualisation

Reporting and Dashboard's

Creative, Design and Publishing

Blogging

Diagram and wireframe

Digital Publishing

Online Forums

Social Networking

Photography and Multimedia

Marketing

Advertising

Affliate Marketing

Behavioural Marketing

Brand Management

Campaign Management

Community Management

Contextual Marketing

Display Advertising

Email Marketing

Forms and Surveys

Marketing Analytics

Marketing Automation

Marketing Data

Mobile Marketing

Online Display Advertising

Personalisation and Behavioural Targeting

Public Relations

Search Marketing

Social Marketing

Social Media Marketing

Social Media Monitoring

Webinars

Project Management and Planning

Agile Project Management and Issue Tracking

Professional Services Automation (PSA)

Project Management

Project Portfolio Management (PPM)

Content Services Software - Tier 2

Process Automation Software

Content Digitisation Software

Content Services Software

Digital Experience Software - Tier 2

Digital Personalisation Software

Digital Insights Software

Data Integration Software

No / Low Code Development Software

Digital Experience Software

Content Services Software - Tier 3

Collaboration Software

Content Analytics & Cognitive Software

Smart Search Software

Digital Experience Software - Tier 3

Smart Search Software

Search Engine Optimisation Software

Channel Accessibility Improvement Software

UX Testing Software

Consultancy and Professional Services

ICT Professional Services

Infrastructure Support Services

Cloud Transition Services

MBIE: Construction Consultancy

Architecture and Design

Building Services/ Mechanical/ Hydraulic/ Electrical Engineering

Civil/ Structural/ Geo-technical Engineering

Environmental Services