II.1)
Scope of the procurement
Enterprise Security Operations Managed Service
Reference number:
18/021
48730000
-
Security software package
Services
II.1.4)
Short description
Provision of a Security Incident &Event Management System (SIEM) &a Managed SOC Service operating 24x7x365 & capable of meeting Ervia’s needs &include the following capabilities:24*7*365 Monitoring and Alerting Service,Event & Data Collection,Dashboard &Reporting,Event Correlation,User & Entity Analytics,High Volume Log Management,User Monitoring,Application Monitoring,Real Time Data Collection,Incident Management,Threat Intelligence,OT & Telemetry capability,Forensic Investigation Scope of contract: includes:Provision, implementation and support of a scalable solution for initially up to 6000 events per second (EPS) &or equivalent IP / Volume based licensing model with potential to grow significantly over subsequent number of years and incorporating additional systems (through inclusion of existing or future new systems). ( As per PQQ Document).
II.1.6)
Information about lots
This contract is divided into lots:
no
II.2.2)
Additional CPV code(s)
35721000
-
Electronic intelligence system
48200000
-
Networking, Internet and intranet software package
48731000
-
File security software package
48732000
-
Data security software package
48820000
-
Servers
72212730
-
Security software development services
72263000
-
Software implementation services
72265000
-
Software configuration services
72266000
-
Software consultancy services
72700000
-
Computer network services
79700000
-
Investigation and security services
80510000
-
Specialist training services
II.2.3)
Place of performance
Main site or place of performance:
Cork, South West
II.2.4)
Description of the procurement
Provision of a Security Incident and Event Management System (SIEM) and a Managed SOC Service operating 24x7x365 and capable of meeting Ervia’s needs and include the following capabilities:
• 24*7*365 Monitoring and Alerting Service
• Event & Data Collection
• Dashboard & Reporting
• Event Correlation
• User & Entity Analytics
• High Volume Log Management
• User Monitoring
• Application Monitoring
• Real Time Data Collection
• Incident Management
• Threat Intelligence
• OT & Telemetry capability
• Forensic Investigation
Scope of contract includes
• Provision, implementation and support of a scalable solution for initially up to 6000 events per second (EPS) and / or equivalent IP / Volume based licensing model with potential to grow significantly over subsequent number of years and incorporating additional systems (through inclusion of existing or future new systems)
• The SIEM solution must be capable of providing a secure means of integration with the relevant Ervia, Irish Water and Gas Networks Ireland systems (IT and OT Systems).Real-time collection and analysis of events from host systems, security devices and network devices. The solution must use global energy sector threat intelligence to identify existing and emerging threats.
• Ervia have a requirement for a Siem technology implementation to be co located between Ervia and Supplier premises. In addition to the SIEM solution Ervia wishes to engage with the supplier to provide a managed SOC service for which the operating model should be a hybrid approach which leverages global knowledge and skilled persons for augmenting the in house Security Operations team and help to drive the maturing of Ervia security threat intelligence capability and incident response / resolution’
• . It must be fully compatible with existing Ervia IT & OT systems and technologies, and be fully scalable (for future expansion if necessary).
• Provision of a managed SOC service to configure, tune, and respond to relevant severity events, this response will include an initial SIEM based investigation and alerting of events.
• The provider must have a dedicated Security Operations Centre staffed 24/7/365 by appropriately qualified personnel.
• Provide predefined functions that can be lightly customized to meet Ervia’s specific requirements.
• Comply with all Irish and EU regulations, including GDPR and recommendations on how the vendor will help Ervia comply with the EU NIS Directive.
• Provision of advanced security intelligence relating to Ervia’s business.
• Professional services to establish document and mobilise target operating model with Ervia’s Security Operations team, including training where applicable.
• Capability to provide auxiliary resources and services to manage security devices where necessary and to react to security incidents.
Price is not the only award criterion and all criteria are stated only in the procurement documents
II.2.7)
Duration of the contract, framework agreement or dynamic purchasing system
Duration in months:
36
This contract is subject to renewal:
yes
Description of renewals:
Option to renew for periods up to 24 months
II.2.9)
Information about the limits on the number of candidates to be invited
Envisaged number of candidates:
5
II.2.10)
Information about variants
Variants will be accepted:
yes
II.2.11)
Information about options
Options:
yes
Description of options:
Option to extend for additional periods up to 1 + 1 years
II.2.13)
Information about European Union funds
The procurement is related to a project and/or programme financed by European Union funds:
no
II.2.14)
Additional information
You must submit through the Etenders system
before the deadline. The submission deadline is strict
& no submissions will be possible after the date &
time specified in the PQQ documents. Please note
that all tenders are electronic, as such NO paper
copies will be accepted or read. Please submit via
the Etenders system not later than 12:00 hrs (local
time) Tuesday 2nd October 2018.