Public procurement notice: Contract Award Notice
Published: 2019-06-05
Buyer: Northern Ireland Electricity Networks
Country: UK
Contract type: Services
Procedure: Negotiated procedure
CPV classification: 72000000 | 72300000
Award criteria: Lowest price

Technical requirements: This lot is for the provision of a suitably qualified and experienced organisation to provide advice based on the latest GB and EU data protection legislation. NIE Networks has an established data protection forum to focus on exchange, analysis and communication of information on matters relating to the protection of personal information and compliance with data protection.
NIE Networks outsources the delivery of IT, telephony and other telecommunication services. These are provided through managed service contracts with third parties. This includes the operational aspects of Cyber Security. Lot 2 is for the provision of expert advice and support services to the NIE Networks IT Security Manager. This service will operate independently of the managed service contract to provide impartial advice.
NIE Networks has an established data protection forum to focus on the exchange, analysis and communication of information on all matters relating to the protection of personal information and compliance with data protection.
The following are the key data protection services required by NIE Networks to be carried out by the successful tenderer:
— assist with maintenance of data ownership for records systems identified on the personal information register, and provide support and assessment for data owners,
— assist with maintenance for a risk analysis process for DPA/GDPR compliance, and liaise with management, data owners, IT and other relevant groups or departments,
— assist in preparation, and execution of data protection audit plan as agreed with NIE Networks contract manager,
— liaise with the NIE Networks IT security forum and data protection forum on technical issues, including the reporting and investigation of incidents and/or breaches,
— facilitate communication between the audit and risk committee, executive directors, the risk management committee, the company secretary, internal IT Management Group, internal auditors and other areas of the business engaged in risk management activities.
Participate in bi-monthly NIE Networks data protection forum, either in person or via telephone conference as agreed with the NIE Networks contract manager,
— hold monthly meetings with NIE Networks to review progress and tasking including previous monthly spend and agree work program for month ahead,
The Framework Agreement will be for a period of five (5) years with an option, exercisable entirely at the discretion of the contracting entity and subject to the terms of the Framework Agreement, to extend by a further optional period of up to three (3) years, with a total potential duration of eight (8) years.
NIE Networks outsources the delivery of IT, telephony and other telecommunication services. These are provided through managed service contracts with third parties. This includes the operational aspects of cyber security.
NIE Networks seeks to appoint a suitably qualified and experienced organisation on framework for the provision of cyber security advisors to provide expert advice and support services to the NIE Networks IT security officer. This service is to operate independently of the managed service contracts and provide impartial advice and guidance to NIE Networks. The successful tenderer shall work collaboratively with the IT managed service provider throughout the course of the contract.
NIE Networks wishes to establish a Framework Agreement for the services of suitably qualified and experienced supplier to provide these services in NIE Networks sites and also the IT managed service providers’ data centre (mainly in the Belfast area).


Winner: Gemerv Ltd
Number of bids: 5