II.1)
Scope of the procurement
Provision of Endpoint Protection Platform
Reference number:
CIE 8288
72000000
-
IT services: consulting, software development, Internet and support
Services
II.1.4)
Short description
Córas Iompair Éireann (C.I.É.) is the statutory organisation with responsibility for the provision and development of public transport services in Ireland. It exercises its responsibilities through the following three wholly owned subsidiary operating companies:
• Iarnród Éireann
• Bus Éireann
• Bus Átha Cliath
CIÉ and its subsidiary operating companies wish to procure a modern Endpoint Protection Platform (EPP) solution, that includes Endpoint Detection and Response (EDR) functionality as an integral component of the overall solution.
At present, there are approximately 3,600 user endpoints, and 500 servers across the CIÉ Group of Companies estate.
II.1.6)
Information about lots
This contract is divided into lots:
no
II.2.2)
Additional CPV code(s)
48000000
-
Software package and information systems
48730000
-
Security software package
48761000
-
Anti-virus software package
72000000
-
IT services: consulting, software development, Internet and support
II.2.3)
Place of performance
II.2.4)
Description of the procurement
Córas Iompair Éireann (C.I.É.) is the statutory organisation with responsibility for the provision and development of public transport services in Ireland. It exercises its responsibilities through the following three wholly owned subsidiary operating companies:
• Iarnród Éireann
• Bus Éireann
• Bus Átha Cliath
CIÉ and its subsidiary operating companies wish to procure a modern Endpoint Protection Platform (EPP) solution, that includes Endpoint Detection and Response (EDR) functionality as an integral component of the overall solution.
At present, there are approximately 3,600 user endpoints, and 500 servers across the CIÉ Group of Companies estate.
The proposed solution should, at a minimum:
• Support the following device operating systems:
• Windows 10 and later,
• Windows Server 2012 / R2 and later, including Microsoft Azure Virtual Machines,
• Be easy to use with minimum training required,
• Can natively integrate network, endpoint, and cloud data to prevent sophisticated attacks,
• Include behavioural detection and automated blocking of ransomware, streamlining detection and eliminating the need for manual analysis,
• Can gather and retain endpoint activity metadata in a centralised storage location for later examination,
• Support endpoint and security operations by providing centralised management of policy setting, reporting, and alerting,
• Support anti-malware operations with a strong EPP alerting and reporting function,
• Can integrate with other security and operations tools,
• Aligns malicious activity detections within the MITRE ATT&CK framework and classifies detected attacks based on the techniques described in this framework,
• Have various Attack Surface Reduction techniques to limit endpoints exposure and vulnerability to attacks,
• Include pre-execution protection that leverages static file analysis techniques, along with peri-execution techniques while a binary is executing.
Price is not the only award criterion and all criteria are stated only in the procurement documents
II.2.7)
Duration of the contract, framework agreement or dynamic purchasing system
Duration in months:
36
This contract is subject to renewal:
yes
Description of renewals:
This contract may be extended by a period of up to 24 months at CIE's discretion
II.2.10)
Information about variants
Variants will be accepted:
no
II.2.11)
Information about options
Options:
no
II.2.13)
Information about European Union funds
The procurement is related to a project and/or programme financed by European Union funds:
no