Public procurement notice: Prior Information Notice Without Call For Competition
Published: 2022-10-14
Buyer: STATENS PENSJONSKASSE FORVALTNINGSBEDRIFT
Country: NO
Contract type: Services
CPV classification: 72212730 | 72212732

Technical requirements: SPK is considering entering into a contract for the delivery of a "Managed SOC" for a selected number of IT security services. Prior to a possible contract, SPK would like to carry out a market survey / RFI process.
SPK would like too strengthen security monitoring, and is, in the first phase, carrying out a concept review of alternatives to the current security monitoring. The review must give a recommendation on the choice of the solution concept.
After evaluating a number of operation models, SPK would like to outsource a subset of our security operations to a Managed Security Services Provider (MSSP).
The chosen subset of outsourced services relates to Security Operations Center (SOC) services. In any future tender contest for the procurement of this from a 'Security Operation Center Service Provider', we will require the following basic services:
Surveillance and monitoring - tenderers must offer the possibility to receive events generated by the contracting authority's infrastructure, applications, and security tools, and by the cloud services that the contracting authority would like to be monitored. These events must be processed in order to collect, enrich, and contextualise.
Threat detection - tenderers must have the capacity to detect threats, flag security incidents, and give warnings.
Vulnerability detection - tenderers must have capabilities to identify vulnerabilities from the evaluation of software and IT infrastructure configuration.
Vulnerability management - tenderers must provide the option to use a score and contextualise enrichments of the collected vulnerability data, prioritise identified vulnerabilities, track trends, and give warnings of high risk vulnerabilities on critical properties/assets.
Incident Response Management - tenderers must offer incident management functions that enable incident response to be operated in collaboration with SPK, or, if needed, with SPK's collaboration partners and suppliers.
Analysis - tenderers must be able to provide analyses of incidents and malware, and, in addition, offer analysis options for tactical studies of incidents and malware for SPK. In addition, the chosen tenderer must offer an option for data visualisation and incident analysis for SPK.
Threat Intelligence - tenderers must have capabilities to collect relevant threat information, threat analyses and management, and for threat modelling. In addition it will be necessary for the tenderer to be able to consume threat intelligence delivered by SPK.
Collaboration with others - the tenderer must collaborate with or be part of a network of other SOC, CERT, SCIRT, etc., so that SPK can, directly or indirectly, benefit from such a collaboration.
Consultancy - tenderers must be able to provide consultancy services connected to best practice for security monitoring and incident management. The consultancy services will not be part of the actual incident management, but will be connected to the further development of the security operations in SPK.
Courses and competence raising - tenderers must be able to provide courses and competence raising connected to best practice for security monitoring and incident management.
Operation and administration - SPK expects that the tenderer administers and operates all of its own technologies and systems that they use to provide the Managed SOC services. The operation and administration of systems, tools, and agents in SPK's infrastructure that are used for log collection will be detailed when the contract is signed.