Request for tenders for the provision of Independent Information Security Services

Description

The successful tenderer will be required to provide a suite of information security services, including but not limited to: - Providing advisory support for the Department’s Information Security Officer. Carrying out risk analysis, identification of key risks and providing advice on appropriate policies, procedures, standards, and controls. The provision of consultancy, security design services and specialist technical services as required. This may include production of documented security designs for agreement with third party implementers and in-house ICT staff, risk analysis of new applications, systems, or infrastructure. The investigation of security incidents including where necessary, the provision of forensic services to support incident handling or as part of an investigation or risk assessment. Assisting the Information Security Officer in promoting ICT security awareness at all levels within the Department. Assisting with the preparation and execution of crisis management and business continuity exercises with a range of participants, these may include ICT staff, senior management, and business unit staff. The provision of briefings and advice on complex technological ICT systems and services security matters to senior DETE management and to communicate risks in a manner that is readily understood by personnel at all levels within the organisation. The provision of incident response services to assist the response to a significant cyber security incident. Provision of appropriate training/transfer of skills to the Information Security Officer and where appropriate the wider ICT team. Due to the nature of the work involved on-site attendance at the Department’s premises will be required to deliver significant elements of this service. The successful tenderer will be required to provide a suite of information security services, including but not limited to: - Providing advisory support for the Department’s Information Security Officer. Carrying out risk analysis, identification of key risks and providing advice on appropriate policies, procedures, standards, and controls. The provision of consultancy, security design services and specialist technical services as required. This may include production of documented security designs for agreement with third party implementers and in-house ICT staff, risk analysis of new applications, systems, or infrastructure. The investigation of security incidents including where necessary, the provision of forensic services to support incident handling or as part of an investigation or risk assessment. Assisting the Information Security Officer in promoting ICT security awareness at all levels within the Department. Assisting with the preparation and execution of crisis management and business continuity exercises with a range of participants, these may include ICT staff, senior management, and business unit staff. The provision of briefings and advice on complex technological ICT systems and services security matters to senior DETE management and to communicate risks in a manner that is readily understood by personnel at all levels within the organisation. The provision of incident response services to assist the response to a significant cyber security incident. Provision of appropriate training/transfer of skills to the Information Security Officer and where appropriate the wider ICT team. Due to the nature of the work involved on-site attendance at the Department’s premises will be required to deliver significant elements of this service.