Public procurement notice: Voluntary Ex Ante Transparency Notice
Published: 2024-11-22
Buyer: Royal Victoria Eye Ear Hospital
Country: IE
Region: IE061
Contract type: Services
Procedure: Negotiated without a prior call for competition
CPV classification: 72590000 | 72611000: Technical computer support services

Technical requirements: This is a voluntary ex ante transparency (VEAT) notice. This notice acknowledges
that the Royal Victoria Eye & Ear Hospital Dublin proposes to contract with Tangerine technology for the
provision of a full and complete 24/7 Managed Detect and Response cyber security solution (3 year term). There is no current solution in place and as such the hospital is 100% reactionary to cyber threats. The RVEEH do not have the staff or experience to interpret all security logs and events to ensure all systems, including legacy systems that cannot be secured are monitored and safe. 

Currently, Tangerine Technology manages our firewalls, endpoint security, and network access control. This includes configuring and monitoring security rules governing internal and external communication, updating policies weekly, and maintaining hardware and licensing. Such comprehensive management ensures continuity during hardware failures and critical incidents.

An MDR solution's effectiveness hinges on seamless integration with existing infrastructure and operational processes. Given our legacy systems—spanning 100 VLANs and over 70 virtual, physical, and remote services.

They possess intimate knowledge of the network’s topology, including interdependencies, data flows, and legacy constraints.

Key reasons for remaining with Tangerine Technology:

Operational Continuity and Legacy System Knowledge:
Tangerine has developed a detailed understanding of our infrastructure over years, enabling nuanced decision-making to balance security needs and operational stability.
Their familiarity with critical legacy systems minimizes the risk of disruptive actions (e.g., service interruptions due to false positives).
Integrated Security Approach:
The unified management of firewalls, endpoint security, and NAC by Tangerine reduces interoperability challenges. An MDR solution built on this existing foundation ensures optimal visibility across all systems.
Leveraging this single-source partnership allows consistent monitoring of security logs and faster detection of anomalies across all layers of the network.
Mitigating Risks of Transitioning to a New Supplier:
Onboarding a new MDR provider would involve significant learning curves, increasing the risk of misconfigurations or delays in addressing threats.
The interconnected nature of our systems and data flows demands a partner who already understands our environment, ensuring immediate and effective incident response.
Proven 24/7 Support:
Tangerine’s 24/7 support desk ensures rapid response in the event of a security incident, further reducing downtime and potential impacts. Their experience handling our specific ecosystem is critical during high-pressure situations.
 
Switching to an alternative supplier would not only undermine our current security posture but also introduce risks inherent to unfamiliarity with our intricate network. Maintaining Tangerine Technology as our MDR provider guarantees a well-integrated, resilient, and future-proof solution aligned with our operational needs.
This is a voluntary ex ante transparency (VEAT) notice. This notice acknowledges
that the Royal Victoria Eye & Ear Hospital Dublin proposes to contract with Tangerine technology for the
provision of a full and complete 24/7 Managed Detect and Response cyber security solution (3 year term). There is no current solution in place and as such the hospital is 100% reactionary to cyber threats. The REEH do not have the staff or experience to interpret all security logs and events to ensure all systems, including legacy systems that cannot be secured are monitored and safe. At present the firewalls and NAC solution are managed by Tangerine Technologies as the existing partner and we are extending this to a full MDR solution to ensure continuity across the service. Having this continuity ensures that in the event of an attack the partner has full access and knowledge of the entire security suite across the hospital infrastructure.


Winner: Tangerine Technology Ltd