St.Helens Council crest

Published Delegated Executive Decisions

Welcome. This system contains information about published delegated executive decisions, including exemptions.

Decision Number: 0094 2018/19

Executive Portfolio:
Collaborative Resources
Decision Number:
0094 2018/19
Exempt / Confidential Item:
No
Ward(s) Affected:
All Wards
Declarations of Interest Received:
None
Title:
To upgrade the Payments and Revenues (PARIS) to CivicaPay Income Management and Payments System
Summary of Decision:
To upgrade the Payments and Revenues System (PARIS) to CivicaPay Income Management and Payments System.
Proposed Decision:
It is proposed to enter into a seven year contract for CivicaPay, including the recurring card payments module, by direct award utilising the LASA Framework and the CCS e-marketplace to confirm the direct award.
Summary of Reason for Decision:
The decision to cease development and support of PARIS by Civica and the Council's need to become PCI DSS compliant. The upgrade will ensure that the Council continues to be able to process card payments and manage all income received by the Authority. The selected term will provide stability for a number of years.
Reason for Decision:
Entering into a seven year contract for CivicaPay will provide stability for a number of years. Due to the size of the project it is not viable in terms of cost and staff resource to change the Income Management / Payments System on a regular basis. As part of the upgrade it is proposed to purchase the recurring card payments module for CivicaPay which will allow customers to set up instalment arrangements to be paid at regular intervals utilising their credit / debit card. The cost of the module is reduced by 20% if purchased as part of the initial upgrade. The business case submitted and approved by the ICT Programme Board is attached to this decision. The Council has used PARIS for its Income Management and Card Payment functionality since 2003. Over the years PARIS has been developed and integrated with a number of systems within the Council and remains one of the key fundamental systems within the Authority. In 2017/18 170,026 card payments were processed via PARIS to a value of over £13.5m. PARIS will no longer be supported or developed when the current contract with St Helens Council expires in November 2019 and the Council has been advised that the contract will not be renewed for the processing of card payments. Consequently, it has been necessary to investigate options available to the Council. In recent years with the introduction of the Payment Card Industry Data Security Standards (PCI DSS) the Council has faced an ongoing challenge in its pursuit of PCI DSS compliance. In response, the Council to is seeking to de-scope its card data environment and by purchasing a system which is hosted by a service provider, this removes a considerable risk to the Council and reduces the Authority’s compliance obligations. CivicaPay is a fully hosted, cloud based payment solution with all servers hosted in Civica’s ISO27001 data centres, regarding PCI DSS a copy of Civica's Attestation of Compliance of Onsite Assessments - Service Providers is attached.
Risks Associated with this Decision:
Without a replacement system the Council will not be able to process card payments after November 2019. The Council will find it difficult if not impossible to achieve PCI DSS compliance with the current system processing card payments.
Measures to Redress Risk:
The upgrade to CivicaPay will ensure that the processing of card payments will continue with no loss of service to the public. Upgrading to a hosted solution removes a considerable risk to the Council and reduces the Authority's PCI DSS compliance obligations.
Anti Poverty / Human Rights / Agenda 21 Implications:
None
Attachments:
Please Contact Claire Harland - Ext 1711 for more details.