Guide to Public Sector CMS Procurement

Guide to Public Sector CMS Procurement

featureArticle.chapters

featureArticle.introduction

Choosing the right content management system (CMS) is a critical decision for public sector organizations. A great CMS can streamline communication, improve user experience, and ensure that the organization complies with legal requirements for accessibility and security.

This guide aims to assist decision-makers in public sector organizations in navigating the procurement process for a new CMS. The guide covers laws, regulations, and practical considerations such as planning and requirements specifications primarily for the Norwegian market.

The guide does not cover the implementation of a new website or content management system. See The Ultimate Guide to Digital Projects or one of our other guides for more information on this topic.

Morten EriksenauthorBox.about

Morten Eriksen

Morten is the CEO and co-founder of Enonic. He has extensive experience as an entrepreneur focusing on areas like business development, product management, sales, and marketing. He started a digital agency in 1995 and built his first CMS in 1997, then founded Enonic in 2000 where his mission is to accelerate digital projects using innovative technology.

What Is a CMS?

Two women sitting by a laptop.

A content management system (CMS) is software used to create, manage, and publish digital content on websites and applications.

The CMS serves as the backbone of an organizationā€™s digital presence, enabling users without a technical background to manage content on websites and apps efficiently.

The Importance of Choosing the Right CMS

Choosing the right CMS for your organization is crucial at a time when user behavior is becoming increasingly digital, and the internet is the primary platform for researching and using services.

To keep up with the rapid pace of digital transformation and avoid falling behind competitors, public sector organizations need to invest in a flexible and scalable CMS. This enhances profitability and efficiency while providing users with personalized and seamless digital experiences.

Read more: How to Choose the Right CMS Ā»

A future-proof CMS can:

  • Improve efficiency by streamlining editorsā€™ workflows.
  • Ensure compliance with laws and regulations such as GDPR and universal design.
  • Adapt to future needs through scalability and technological flexibility.
  • Reduce costs by minimizing the need for customization and maintenance.

First Preparations

Man fishing in the ocean.

Now that your organization and team understand the importance of having a future-proof CMS, itā€™s time to plan how to acquire a new solution.

In addition to standard practical, technical, and cost considerations, public sector organizations in Norway are required to conduct a competitive tendering process according to specific regulations.

Identifying Needs and Internal Resources

We start by getting an overview of the big picture: what problem is your organization trying to solve? What is the current practice, and how can a CMS help?

Here are the actions you should take at this stage:

Website Analysis

A thorough analysis of the existing website or application is an important first step in preparing to acquire a new CMS. The website is often the core of the organizationā€™s digital presence and may be the primary driver for the need for a new content management system.

The website is where users often interact with the public sector organization. A well-functioning website can enhance user experience, increase the accessibility of information, and strengthen the organizationā€™s reputation.

Define target audiences and top tasks, and begin by identifying who uses the website. This could include residents, businesses, employees in other public agencies, and the media. Also, determine what tasks users most often want to accomplish on the website. This might include finding contact information, applying for services, or getting updated information on projects and decisions.

Then evaluate what works and what doesnā€™t for users. Collect data on how they interact with the website through analytics tools, user surveys, and feedback.

Plan for rebranding and new integrations. Consider whether the organization will undertake a visual update or change its communication strategy. A new CMS can support this by offering more flexible design templates and easier content management. Then identify any need to integrate the website with other systems, such as eID for secure login, case processing systems, or CRM.

CMS Analysis

What works and what doesnā€™t with the existing system? Before starting the process of acquiring a new CMS, itā€™s important to evaluate the current solution thoroughly in light of the website or app mentioned above. This involves identifying what works well and which areas need improvement.

The existing CMS might be stable and reliable for simple content editing, but may be lacking modern features. These could include responsive design for mobile devices, support for multiple languages, or integrations with essential third-party services such as records, databases, or CRMs.

Define Requirements and Desires

Once the analysis of the current system is complete, you should create a detailed requirements specification. Distinguish between essential features and those that are ā€œnice to haveā€ to ensure that basic needs are met first, while leaving room for future improvements without making the initial implementation overly complex.

Start by listing the necessary features critical to the organization. This could include support for universal design, the ability to integrate with existing IT systems, high security with regular updates, and a user-friendly interface that allows content editors to publish without technical assistance.

Then, identify features that are desirable but not critical from the start. For example, these could include advanced analytics tools to measure user engagement, the ability to personalize content based on user data, a chatbot to strengthen dialogue with residents, or support for future technologies such as voice search and artificial intelligence.

Evaluate Internal Resources

Do you have technical expertise internally, or will you need external assistance? An early assessment of this enables you to plan for necessary training, budget for external assistance, and avoid unforeseen challenges that could delay the project or increase costs.

If you have a strong IT team with experience in CMS implementation, much of the work can be handled internally. This can reduce costs and provide better control over the process. However, if the organization lacks this expertise, it may be necessary to seek external help.

For example, a public institution with limited IT staff might choose to engage external consultants or an agency specializing in digital solutions for the public sector. These external experts can assist with everything from needs analysis and requirements specification to implementation and employee training.

How to Engage Stakeholders

A successful acquisition of a new CMS depends on the involvement of all relevant people within the organization. This ensures that the chosen solution meets needs across departments and functions.

Involve Different Departments

It is essential to include representatives from IT, marketing, communications, legal, and other relevant departments. Each department has unique perspectives and requirements that should be considered.

The IT department, for example, can provide insights into technical requirements and integration with existing systems. The marketing department may focus on the need for tools that support campaigns and analytics, while the legal department can ensure that the solution complies with privacy laws and other regulations.

Use Workshops and Meetings

Organize workshops and meetings to gather requirements and ensure a shared understanding of the project goals. This facilitates collaboration and gives all stakeholders a chance to express their needs and concerns.

A public agency, for instance, might arrange a kick-off workshop where representatives from all departments participate. Here, they can discuss expectations, identify critical features like access control and universal design, and uncover potential challenges.

Communicate Clearly

Clear and regular communication is key to keeping everyone informed about progress and decisions. This helps prevent misunderstandings and ensures that everyone is on the same page throughout the process.

The project manager could send out weekly updates via email, Slack, or internal channels like the intranet. These updates could include information on milestones achieved, upcoming activities, and any changes to the timeline.

Requirement Specifications

Wooden spoon with berries.

A carefully prepared requirements specification ensures that the new CMS meets the organizationā€™s needs. It should cover technical criteria, security aspects, support requirements, and financial considerations.

Technical Criteria

Scalability and Performance: Can the System Handle Increased Traffic and Content?

Itā€™s important that the CMS can grow with the organization. If you anticipate increased traffic during public announcements or campaigns, the system must be able to handle this without performance issues.

For example: A municipality experiences a significant increase in website traffic during a crisis. They therefore need a CMS that can quickly scale up to inform residents effectively.

Integration Capabilities: APIs and Support for Third-party Solutions.

The CMS should be able to integrate with other systems like CRM, ERP, DAM, or external databases.

For example, a public agency may want to link the website to an internal case management system to automate updates. Check if the CMS has open APIs and supports necessary integrations.

Security

Certifications: Check If the Provider Has Relevant Security Certifications.

Providers with certifications such as ISO 27001 or SOC 2 have documented security practices and work continuously to improve procedures and reduce risk. For instance, a healthcare organization may require the provider to be ISO 27001 certified to ensure that patient data is handled securely.

Data Management: How Is Data Stored and Protected?

Itā€™s important to know where the data is stored and what protection measures are in place. For example, data should be encrypted during transmission. A financial institution might require that all data is stored on servers domestically or within the EU/EEA to comply with local laws.

Regulatory Compliance: GDPR, Privacy, and Other Relevant Laws.

The CMS should help you comply with laws like GDPR. For example, the system should have features or integrations to manage consent, allow users access to their data, and delete it upon request. A case registry might need to ensure that user data is processed in line with privacy regulations.

Support and Maintenance

SLA Requirements: Define the Level of Support and Response Times for Issues.

A clear SLA (service-level agreement) ensures that you get the necessary support when needed. For instance, a medical center might require 24/7 support with a maximum response time of one hour for critical issues affecting access to clinical information related to patient care.

Update Cycles: How Often Is the System Updated, and How Does This Impact You?

Frequent updates can improve security and functionality, but may also disrupt operations. For example, the government should avoid scheduling updates and downtime for the website when launching the new state budget.

Documentation and Training: Availability of User Guides and Training Materials.

Good documentation helps employees use the CMS effectively. A school, for instance, could benefit from video training and guides that make it easy for teachers to publish educational materials without technical support.

Vendor Reliability

References (Customer Stories and Relevant Experience)

Review the vendorā€™s customer references and past experience to ensure they can deliver a solution that meets your needs. Request case studies from similar projects, and contact existing clients to gain insight into the vendorā€™s reliability and expertise.

Credit Rating: Check the Vendorā€™s Financial Stability.

A stable vendor reduces the risk of service interruptions. For example, a public agency might check the vendorā€™s credit rating and financial reports to ensure they are not at risk of going bankrupt.

Total Cost of Ownership: Evaluate All Costs Over the Systemā€™s Lifetime.

Look beyond the initial costs and consider maintenance, upgrades, and any licensing fees in the long term. For instance, a low-cost CMS might incur high customization and support costs, while a more expensive solution could be more cost-effective over time due to included services and fewer issues.

Pre-Tender Market Dialogue

Man fishing along a riverbank.

Engaging in dialogue with the market before the procurement process can provide valuable insights and contribute to a better-designed requirements specification.

Overview of Recognized Vendors

Start by identifying potential vendors and their solutions. This can be done by:

  • Reviewing industry reports and analyses to find leading players in the CMS field.
  • Attending seminars, conferences, or webinars where vendors present their products.
  • Consulting networks and other public sector organizations for recommendations.

For example, a public agency might create a list of vendors experienced in implementing CMS solutions for the public sector and evaluate their success stories and references.

Reference to Procurement Regulations

Procurement Regulations, Part III, Chapter 12 allow for dialogue with the market before a competition is announced. Pre-announcements and market research are permitted without violating the principles of equal treatment and transparency.

A directorate, for example, can use these regulations to conduct a Request for Information (RFI) to gather information on available CMS solutions and technological developments in the market.

Pre-Announcement

By publishing a preliminary announcement on Doffin or TED, you can inform vendors of upcoming procurements. This provides an opportunity to arrange dialogue conferences or individual meetings with vendors.

A healthcare organization, for instance, plans to upgrade its CMS and publishes a pre-announcement inviting interested vendors to dialogue meetings. Here, vendors can present their solutions and provide input on the requirements that should be set in the upcoming tender.

Consider an External Advisor

Person by a cairn.

Many public sector organizations choose to engage external consultants with specialized expertise in digital projects and CMS. This is particularly relevant when the organization lacks internal expertise, such as solution architects or super users who can lead the process.

An independent consultant can provide valuable expertise and ensure that the project is managed effectively from start to finish.

It is important that the consultant is independent, meaning not affiliated with any company that supplies CMS solutions. This ensures objectivity in evaluations and that recommendations are based on the organizationā€™s best interests, free from commercial influences.

An external consultant can contribute in several ways:

  • Developing the requirements specification: By helping to identify and formulate both technical and functional requirements, the consultant ensures that all needs are covered in the tender documents.
  • Evaluating solutions: With his or her experience, the consultant can assess vendor proposals against the requirements and assist the organization in making an informed choice.

For example, a county council plans to implement a new CMS to improve communication with residents. They have limited technical expertise internally and therefore engage an external consultant with extensive experience in the public sector.

The consultant conducts workshops with various departments to identify needs, prepares a detailed requirements specification, and leads the evaluation of vendor proposals. This results in the county council selecting a solution tailored to their needs, and the project is completed on time and within budget.

Form of Agreement

Rope bundle on a dock.

Which contract type should your organization choose for the CMS? A good option is the SSA-L (Agreement for Ongoing Service Purchase). This is a contract for purchasing services over the internet, often referred to as SaaS ("Software as a Service") or PaaS (ā€œPlatform as a Serviceā€). The agreement is aimed at establishing a standard service and supporting it.

Alternatively, if you plan to manage the solution internally, the SSA-V (Maintenance Agreement) may be suitable for subscription-based solutions without license purchases. Most CMS platforms follow a subscription-based pricing model.

SSA-L is not intended for the project itself or general consultancy services. In such cases, SSA-B (Assistance Agreement), SSA-S (Agile Agreement), or SSA-O (Assignment Agreement) is recommended to distinguish between the platform and services. This also creates a clear division of responsibility between subcontractors, where the CMS provider is fully responsible under SSA-L, and the consulting firm/agency handles the project and assistance.

SSA-L includes guidance for both the client and the provider in the appendices. It is recommended to thoroughly review this guidance.

Brief Overview of the Appendices

  • Appendix 1: The client specifies the requirements.
  • Appendix 2: The provider describes the solution and responds to the requirements.
  • Appendix 3: The plan for the establishment phase should not be extensive, as it involves setting up a standard service. The provider mainly describes the creation of environments, configuration of user management, basic training for super users, and a proposal for acceptance testing. Acceptance here involves gaining access and conducting some sample checks of the solution. Handover for approval testing can typically be done within 1ā€“3 weeks.
  • Appendix 4: Service level with standardized compensations. The provider describes their SLAs and conditions. It is essential that the client specifies requirements for response times during incidents and expected uptime guarantee in Appendix 1.
  • Appendix 5: Administrative provisions such as contact persons, etc.
  • Appendix 6: The provider describes the remuneration for the service, the price for the establishment phase, other price elements, and hourly rates for consulting and assistance. It is not recommended that the client create their own pricing forms, as this could potentially alter the providerā€™s entire pricing model and lead to additional costs. Focus on providing as much information as possible to facilitate an accurate price based on the providerā€™s model.
  • Appendix 7: No changes should be made here, as the agreement is clear for both the client and the provider.
  • Appendix 8: Post-agreement provisions.
  • Appendix 9: If the provider does not take full responsibility within the SSA-L agreement text and appendices, terms from e.g. the CMS or cloud provider may be included here. This increases the risk of additional costs and uncertainty during the contract period.

SSA-L can be included as part of the delivery from a consulting firm/agency or signed directly with the CMS provider, if appropriate.

Execution of the Tender

People at Preikestolen.

A structured and well-planned tender process ensures that you obtain the best solution to meet your needs. Here are key points to consider during the execution of the tender process.

Timeline

An effective timeline should include all critical milestones, from the preparation of tender documents to contract signing.

A public agency, for example, might plan the following hypothetical timeline:

Week

Activity

1ā€“4

Preparation of requirements specification and tender documents.

5

Publication of the tender on Doffin.

6ā€“10

Tender period during which suppliers can ask questions and submit offers.

11ā€“12

Evaluation of received offers.

13ā€“14

Negotiations with selected suppliers.

15

Award letter announcing the winner.

17

Contract signing after a 10-day complaint period.

Key Elements in the Announcement

The tender announcement must include all necessary information so that suppliers can submit complete and competitive offers.

You should include a clear requirements specification with detailed descriptions of functional and technical requirements, as well as explicit deadlines with dates for submitting questions and offers. Itā€™s also wise to provide contact information for inquiries, unless these are managed through a tendering platform.

Evaluation Criteria

Defined evaluation criteria ensure an objective and fair assessment of the offers.

  • Price: Total cost including licensing, implementation, and operation.
  • Quality:
    • Functionality: The extent to which the solution meets the requirements.
    • User Experience: Intuitive interface for both end-users and administrators.
    • Support: Availability and quality of customer support and maintenance.
    • Relevant Experience: The supplierā€™s experience, references, and methodology.
  • Environmental Considerations: Evaluate the supplierā€™s environmental impact and sustainability measures.

For example: A hospital might prioritize functionality and security over price due to the need for a robust system to handle sensitive patient information.

Follow-Up Requirements

Remember to include requirements that ensure the supplier maintains the quality of service post-implementation.

  • Security Audits: Regular checks to maintain data security.
  • Reporting: Periodic reporting on system performance and uptime.
  • Service-Level Agreement (SLA): Clear agreements on response times for issues and support levels.

For example: A government directorate might require quarterly reports and annual security audits in accordance with ISO 27001.

Public Procurement Regulations

To ensure a legal and transparent process, the tender process must comply with public procurement regulations.

Introduction to Public Procurement Regulations

The Public Procurement Act and its accompanying regulations set the framework for how public funds should be used in procurement. Principles such as equal treatment, predictability, and accountability are central.

How to Ensure the Tender Process Complies with Laws and Rights

  • Follow Standard Procedures: Use standard templates and guidelines from public bodies.
  • Document the Process: Retain all correspondence and documentation for accountability.
  • Information Sharing: Ensure that any information provided to one supplier is also made available to all others.

For example, if a supplier asks a question that clarifies a point in the requirements specification, the answer must be shared anonymously with all interested parties.

Choice of Procurement Method

For complex procurements, such as a CMS project, it is often advantageous to use competitive dialogue or negotiations.

  • Open Tender without Negotiations: Less flexible and may lead to misunderstandings or offers that do not fully meet the needs.
  • Competitive Dialogue: Allows for clarifying requirements and expectations, as well as tailoring solutions.

For example: A government institution chooses competitive dialogue to implement a new CMS. This allows them to discuss specific needs with suppliers and ensures the chosen solution is optimal.

Publishing the Tender on Doffin

The tender must be published on Doffin to reach potential suppliers and fulfill legal requirements.

Avoid publishing tenders right before long holidays, such as Christmas or the summer vacation. This can reduce the quantity and quality of offers, so plan accordingly!

The Process from the CMS Supplierā€™s Perspective

For suppliers, the tender process involves significant resource commitment, and they assemble teams to respond to the tender. Often, the CMS supplier collaborates with a partner, such as a system integrator or a digital agency, which takes the lead on implementation.

Schematic diagram of the procurement process.

For example, a CMS provider may collaborate with an agency that has specialized expertise in design and development for the public sector. The agency handles project management, customization, and training, while the CMS provider contributes technical support, hosting, and further development of the CMS.

Evaluating Offerings

A couple sitting in a scenic cabin.

Once the offers are received, itā€™s essential to conduct a thorough and fair evaluation to ensure the best supplier is chosen. The evaluation should be systematic and based on predefined criteria to ensure objectivity and transparency.

Evaluation Method

A structured evaluation method involves assessing each offer against the established award criteria. Set up an evaluation committee with representatives from relevant departments within the organization. The committee should review all offers individually before gathering to discuss and compare findings.

Award Criteria

To compare offers fairly, it is common to use a scoring system where each criterion is weighted according to its importance. Criteria may include price, functionality, user experience, support, and quality.

For example: An administrative body sets the following award criteria with corresponding weightings:

  • Price (20%): Total cost over the systemā€™s lifetime, including implementation and maintenance.
  • Quality (50%):
    • Requirement Fulfillment: The extent to which the solution meets the technical and functional requirements.
    • User Experience: Intuitiveness and ease of use for both editors and end-users.
    • Support and Maintenance: Quality and availability of support services.
    • Relevant Experience: The supplierā€™s proven experience with similar projects and ability to deliver high quality.
  • Environmental Considerations (30%): The supplierā€™s initiatives to reduce environmental impact, including energy-efficient solutions and compliance with environmental standards.

Each offer is given a score for each criterion, which is then multiplied by the weighting. The sum of these provides a total score for each offer.

For details on how to convert price into points effectively, confer with the guidance on anskaffelser.no. This guide offers practical methods to ensure that price is evaluated in a balanced manner alongside qualitative criteria.

Legal Review

Before entering into the contract, a legal review of the preferred offer and the draft contract should be conducted. This ensures that the agreement complies with applicable laws and regulations and that the organizationā€™s interests are protected.

For example: A public organization involves its legal department to ensure that the contract terms meet GDPR privacy requirements, and that responsibilities and rights related to data and intellectual property are clearly defined.

Verification and Contract Signing

After the evaluation and legal review are completed, a final check of all documents and assumptions should be performed before signing the contract. This includes verifying that all requirements are met, that there are no ambiguities, and that all necessary appendices and attachments are included.

Before signing, the project manager may review the contract with the supplier to ensure a shared understanding of the scope of delivery, timelines, payment terms, and follow-up procedures. This lays the foundation for a good collaboration and reduces the risk of misunderstandings during the project.

Training

Hikers near a rocky mountain peak.

Training employees ensures that the new CMS is adopted as efficiently as possible. Good training helps increase user competence, reduce resistance to change, and improve productivity.

You can organize training sessions for various user groups, such as:

  • Editors and content creators: Focus on how to create, edit, and publish content, as well as best practices for accessibility and SEO.
  • Developers: If you have in-house developers, they should be trained at the beginning of the project.
  • IT personnel: Training in system administration, security settings, and maintenance routines.
  • Department managers: Introduction to reporting tools and how to use the CMS to support business processes.

Some of these training sessions can be conducted by project resources, but also see what the CMS provider can offer. They often have standardized courses available.

Sharing Experiences

Surfers relaxing on their surfboards.

After completing the procurement of the new CMS, itā€™s beneficial to focus on knowledge sharing and continuous improvement. This involves both internal evaluation and sharing insights with other public sector organizations to contribute to collective learning and development.

Internal Retrospective

An internal retrospective allows your organization to reflect on the entire process. By bringing together team members from various departments, you can discuss what worked well, what challenges arose, and how these were handled. This fosters a shared understanding and provides a foundation for improving future projects.

Sharing Experiences with Other Public Sector Organizations

Sharing your experiences with others in the public sector promotes knowledge exchange and can help others avoid common pitfalls. This can be done through professional seminars, publications, or by contributing to guidance materials.

A concrete example is the Norwegian Directorate of Health, which has shared its experiences with structured content in the CMS through a detailed guide. In this guide, they describe how they improved their digital services by implementing a comprehensive content model. By sharing their process, including challenges and solutions, they provide valuable insights to other public sector organizations considering similar initiatives.

Conclusion

Lighthouse.

The choice of a new CMS will have ripple effects on your organization for many years to come. This is a system that both internal and external users will interact with, making it all the more important not to take shortcuts.

Selecting a new content management system or digital platform is therefore challenging for any organization. For the public sector, itā€™s an even more demanding process due to all the formal requirements, laws, and regulations that must be followed. However, with thorough preparation and understanding, this journey can be much smoother.

This guide hopefully makes the process a bit less painful. Challenges and unforeseen issues will naturally arise along the way, but with a solid plan and method in hand, you can overcome them with steady resolve.

Appendix

Examples of Public Announcements

Useful Resources

Contact Information for Assistance and Guidance

Ā 

Get started with Enonic! šŸš€