C20702 - Provision of a Cyber Attack and Breach (CAB) Simulation Platform

The Authority was seeking the provision of a Cyber Attack and Breach (CAB) Simulation Platform service for a period of 3 years with options to extend for a further 1 years at the end of year 3 and year 4 (3+1+1). This requirement would assist the Authority to be able to assess its capability to defend against cyber-attack. The Authority sought an off the shelf product that DEFRA could use, with some of following high level requirements:

1. The solution must provide a GUI that Defra staff can use to launch simulated attacks on the Defra estate with malware signatures that has been provided by the supplier.
2. The solution must provide a GUI that Defra staff can use to interrogate results from a simulated attack.
3. The solution must provide a capability to export results for reports (PDF/ CSV download).
4. The solution must provide training for staff either as an online course or as a bookable service as part of the FP contract.
5. The solution must be kept up to date with the latest malware and signatures to ensure Defra SOC is able to trigger "cutting edge" attacks against our estate.
6. The solution must be hosted on the supplier's cloud infrastructure.
7. The solution platform must be kept up to date with regular patching and security updates.
8. The solution must support the deployment of agents onto the latest cloud environments as well as older technology.
9. The solution must provide clear instructions an support when Defra deploy or remove agents from the estate over the length of the contract.