ICT Managed Security Services

The Council requires to have in place a robust ICT security perimeter monitoring service to ensure cyber resilience, threat detection, analysis, and response. This monitoring service plays a critical role in the Council’s cyber security strategy and in achieving information governance objectives.

The managed service is necessary to assist in meeting security criteria specified by external information security compliance schemes which the Council adheres to including Public Service Network (PSN) Information Assurance Conditions, Payment Card Industry Data Security Standards (PCI DSS), Cyber Essentials Scheme, Data Protection Act (DPA), and the General Data Protection Regulations (GDPR).

The services required include, but not limited to:

Threat management

24/7 monitoring of firewall logs and 365 environment

Security operations centre (SOC)

Incident management system

Threat intelligence, security advisories, and notifications

Log retention

Systems health, availability, and performance monitoring

Device management and software updates

Training and documentation

Quality plan, project management, and implementation (where required)