Public procurement notice: Contract Notice
Published: 2017-06-30
Buyer: Cyber Security and Resilience Capability Enhancement Framework
Country: UK
Contract type: Services
Procedure: Open procedure
CPV classification: 72000000
Estimated value: 5500000 GBP
Submission deadline: 2017-08-02
Award criteria: The most economic tender

Technical requirements: Υπηρεσίες τεχνολογίας των πληροφοριών: παροχή συμβουλών, ανάπτυξη λογισμικού, Διαδίκτυο και υποστήριξη
NDA requires the services of one or more framework providers to support NDA, Site Licensed Companies (SLCs) and subsidiaries (the estate) to implement the Cyber Security and Resilience Programme (CSRP). Identification of specific work packages will follow on from the estate-wide Profiling and Risk Assessment activities is currently in progress. These will identify areas where additional investment or support is required. Provision of these support services is intended to facilitate effective and consistent remediation activity and provide demonstrable benefit for stakeholders.
This will be a framework of 1 supplier. The estimated value per annum is 1 100 000 GBP, however, NDA provides no guarantee of committed expenditure.
This support is provided following the escalation of an event to the point where external support and forensics are required, either because of duration (the on-site / NDA estate team is expected to be exhausted after 24 hours) or because of complexity (more analysts required, specialist skills, etc.) — essentially the ‘cavalry’. Based upon experience of the resource needed during a simulated event, a support team of 10 people is estimated. It is assumed that there may be 1 event per year that might require intervention (this is an assumption only — not based on historic information), with a duration of 2 weeks.
It is further assumed that 1 of the 2 training exercises that will be run during the year, 1 of them will be at such a level that the incident response team will be required. Therefore a second 2-week duration event is expected.
— Assist in minimizing and mitigating any damage caused — e.g. isolate systems, contain any infection;
The contract will be placed for a period of 12 months with NDA option to extend the contract by increments of 12 months, up to a maximum contract extension of 36 months.
This will be a framework of 1 supplier. The estimated value is 4 400 000 GBP however; this expenditure may be committed in the first year or spread over the framework term. NDA provides no guarantee of committed expenditure.
This is based upon the need for the NDA to independently assure the outcome of work carried out around the estate (including NDA HQ); to evaluate the work and ensure that it provides the level of performance expected and for which funding was provided.
It is assumed that there will be 1 system / product requiring testing per month over a 12-month period. And that a team of 3-4 people will be required to fully test a system / product over a 2-week period.
The aim of this work stream is for the Organisation to identify critical business assets and thereafter assess, develop, improve and embed the Organisation's risk management and security policies for these assets.
The contract will be placed for a period of 12 months with NDA option to extend the contract by increments of 12 months, up to a maximum contract extension of 36 months.
Relevant insurances to be in place, including professional indemnity. Evidence and details must be supplied as part of your tender submission.
Information and formalities necessary for evaluating if the requirements are met: Information and formalities necessary for evaluating if the requirements are met: 2 year's audited accounts (most recent) to be provided separately to the tender document in electronic format.

Eligibility requirements: Relevant insurances to be in place, including professional indemnity. Evidence and details must be supplied as part of your tender submission.

Award value: 5500000