Date of dispatch of this notice: 23/04/2020
External Reference: 2020-299153
TED Reference: 2020/S 083-197649
Contract award notice - utilities
Information
Published
Contract award notice - utilities
Contract award notice – utilities
Results of the procurement procedure
Services
Directive 2014/25/EU
Section I: Contracting entity
I.1)
Name and addresses
EirGrid plc
N/A
Block 2 - The Oval, 160 Shelbourne Road
Ballsbridge
Dublin 4
IE
Contact person:
Paul Valentine
Telephone:
+353 12370200
E-mail:
paul.valentine@eirgrid.com
Internet address(es):
Main address:
http://www.eirgrid.com
Address of the buyer profile:
https://irl.eu-supply.com/ctm/Company/CompanyInformation/Index/219
I.6)
Main activity
Electricity
Section II: Object
II.1)
Scope of the procurement
II.1.1)
Title
Cyber Security Testing Services (CSTS)
Reference number:
ENQEIR653
II.1.2)
Main CPV code
72222300
-
Information technology services
II.1.3)
Type of contract
Services
II.1.4)
Short description
This Tender process is now complete.
Driven by the ongoing development of our information security framework and business transformation programmes, EirGrid’s Information Security function has established a security testing and a security risk assessments reporting regime. The aim of the reporting regime is to provide EirGrid with the following:
1. Vulnerability assessment with the associated exposures inherent within their current infrastructure.
2. Comprehensive risk analysis and recommendations, including a remediation plan.
3. Security audit, security reviews and test details, including applied methodology.
In keeping with its position in the industry EirGrid maintains a modern IT infrastructure comprising the following technologies:
• Servers: Physical and Virtual. Linux, Unix, Windows.
• Desktop: Workstation and Laptop. Windows.
• Databases: Oracle and MSQL.
• Network: Routers, Switches, Firewalls, Load Balancers and Gateways.
• Cloud Services.
Driven by the ongoing development of our information security framework and business transformation programmes, EirGrid’s Information Security function has established a security testing and a security risk assessments reporting regime. The aim of the reporting regime is to provide EirGrid with the following:
1. Vulnerability assessment with the associated exposures inherent within their current infrastructure.
2. Comprehensive risk analysis and recommendations, including a remediation plan.
3. Security audit, security reviews and test details, including applied methodology.
In keeping with its position in the industry EirGrid maintains a modern IT infrastructure comprising the following technologies:
• Servers: Physical and Virtual. Linux, Unix, Windows.
• Desktop: Workstation and Laptop. Windows.
• Databases: Oracle and MSQL.
• Network: Routers, Switches, Firewalls, Load Balancers and Gateways.
• Cloud Services.
II.1.6)
Information about lots
This contract is divided into lots:
no
II.1.7)
Total value of the procurement ( Agree to publish? yes )
Value excluding VAT:
1000000.00
EUR
II.2)
Description
II.2.2)
Additional CPV code(s)
72222300
-
Information technology services
II.2.3)
Place of performance
Main site or place of performance:
Dublin, Belfast
II.2.4)
Description of the procurement
This tender process is complete.
EirGrid intends to establish a single supplier framework. The Framework Agreement period will be for an initial duration of three (3) years with the option to extend yearly for up to five (5) years, subject always to the satisfactory performance of the member.
EirGrid require a security partner to provide the scope of services below. The scope of services is expected to include, but is not limited to:
• Provision of Cyber Security Testing Services (CSTS) across EirGrid’s IT Infrastructure to ensure security, confidentiality and integrity.
• Security testing will be primarily targeted at the externally visible infrastructure but some may be required to be internal.
• Security testing may be targeted at production and pre-production environments.
• Some CSTS may require re-testing to confirm the implementation of the remediation plan.
• Each security testing will be subject to individual scoping determined by EirGrid and agreed with the successful supplier, including “rules of engagement” such as:
Type of security testing.
Targets.
Objectives (what can and cannot be done).
Scope (processes, website options, infrastructure, services that are off limits).
Progress reporting.
Entry points.
EirGrid intends to establish a single supplier framework. The Framework Agreement period will be for an initial duration of three (3) years with the option to extend yearly for up to five (5) years, subject always to the satisfactory performance of the member.
EirGrid require a security partner to provide the scope of services below. The scope of services is expected to include, but is not limited to:
• Provision of Cyber Security Testing Services (CSTS) across EirGrid’s IT Infrastructure to ensure security, confidentiality and integrity.
• Security testing will be primarily targeted at the externally visible infrastructure but some may be required to be internal.
• Security testing may be targeted at production and pre-production environments.
• Some CSTS may require re-testing to confirm the implementation of the remediation plan.
• Each security testing will be subject to individual scoping determined by EirGrid and agreed with the successful supplier, including “rules of engagement” such as:
Type of security testing.
Targets.
Objectives (what can and cannot be done).
Scope (processes, website options, infrastructure, services that are off limits).
Progress reporting.
Entry points.
II.2.5)
Award criteria ( Agree to publish? yes )
Criteria below
Quality criterion
-
Name:
Quality Quantity and Balance of Human Resources
/
Weighting:
15
Quality criterion
-
Name:
Approach & Methodology
/
Weighting:
15
Quality criterion
-
Name:
Sample Projects
/
Weighting:
30
Quality criterion
-
Name:
Quality Assurance
/
Weighting:
5
Quality criterion
-
Name:
Service Levels
/
Weighting:
5
Price
-
Weighting:
30
II.2.11)
Information about options
Options:
yes
Description of options:
The initial contract period envisaged is three years with the possibility to extend annually up to a further five years, subject always to the satisfactory performance of the supplier.
II.2.13)
Information about European Union funds
The procurement is related to a project and/or programme financed by European Union funds:
no
II.2.14)
Additional information
The estimate contract value is taking into account the contract being extended for the additional five years
Section IV: Procedure
IV.1)
Description
IV.1.1)
Type of procedure
Negotiated procedure with prior call for competition
IV.1.3)
Information about a framework agreement or a dynamic purchasing system
The procurement involves the establishment of a framework agreement
IV.1.8)
Information about the Government Procurement Agreement (GPA)
The procurement is covered by the Government Procurement Agreement
: yes
IV.2)
Administrative information
IV.2.1)
Previous publication concerning this procedure
Notice number in the OJ S: 2019/S 022-048945
Section V: Award of contract
Contract No: 1
Title: Cyber Security Testing Services (CSTS)
V.2)
Award of contract
V.2.1)
Date of conclusion of the contract
22/04/2020
V.2.2)
Information about tenders ( Agree to publish? yes )
Number of tenders received:
5
Number of tenders received by electronic means:
5
The contract has been awarded to a group of economic operators
:
noV.2.3)
Name and address of the contractor ( Agree to publish? yes )
Ernst & Young
IE 4554695L
Harcourt Centre, Harcourt Street
Dublin
Dublin
IE
Telephone:
+353 4794074
E-mail:
eytendersirl@ie.ey.com
Internet address:
http://www.ey.com
The contractor is an SME : no
V.2.4)
Information on value of the contract/lot (excluding VAT) ( Agree to publish? yes )
Total value of the contract/lot:
1000000.00
EUR
Section VI: Complementary information
VI.4)
Procedures for review
VI.4.1)
Review body
The High Court
Four Courts
Dublin
7
IE
Telephone:
+353 18886000
Internet address:
http://www.courts.ie
VI.4.4)
Service from which information about the review procedure may be obtained
Central office of the High Courts (Appeal Section)
Ground Floor, East Wing, Inns Quay
Dublin
7
IE
Telephone:
+353 18886000
Internet address:
http://www.courts.ie