Provision of a Cyber Attack Protective Monitoring Solution

This notice is issued to notify suppliers that the Authority will be tendering for the procurement of a cyber-attack protective monitoring solution to improve its cyber-attack risk mitigations.

The specific services sought include log data aggregation and correlation, alerting, dashboards, compliance and performance reporting, threat feeds and advanced malware protection.

Suppliers interested in bidding for this tender need to note that they must be accredited under CESG Cyber Incident Response Scheme or equivalent. This will be tested for as a mandatory requirement in the pre-qualification questionnaire (PQQ).

The current estimated value of the contract for the solution will be between £4M and £6M - assuming all options to extend are taken up. This is also dependent on the functionality and ongoing support offered.

Any contract awarded is expected to operate for an initial period of 3 years, with options to extend for up to two further years (3 + 1 + 1).

Due to the nature of the contract and interdependency of the service components, this tender is not suitable for dividing into lots.

Suppliers that are interested in tendering are asked to request the PQQ / Non - Disclosure Agreement / Confidentiality Agreement from Crown Commercial Service, who will be running the first part of this procurement in order to assist the Contracting Authority that requires the Cyber Attack Protective Monitoring Solution. These documents can be obtained from:

steven.lewis@crowncommercial.gov.uk Tel: 01633 811579.

Organisations that express interest will be required to register on CCS’ eSourcing portal to gain access to the PQQ and also to the Confidentiality Agreement / non-disclosure document.

Both documents need to be completed and returned via the portal by midday on 10th September 2015.

The Contracting Authority that requires the Cyber Attack Protective Monitoring Solution will identify itself to suppliers invited to bid, following the evaluation of the PQQ and receipt of Confidentiality Agreement / non-disclosure agreements from those bidders.

Also required are:

Copies of full audited accounts, or other equivalent documentation independently certified, for the previous two financial years. Details of annual turnover in respect of similar services. Details of parent company(s) and of other companies in the group.

Type of procedure: Restricted.

The Authority envisages a min of 3 and a max of 5 operators will go on to be invited to bid.

Objective criteria for choosing the limited number of candidates: CESG Cyber Incident Response (CIR) Scheme accredited.

Award criteria is the most economically advantageous tender in terms of the criteria stated in the specifications, / the invitation to tender.

An electronic eAuction will not be used.