ICT Managed Security Services

Description

The Council requires to have in place a robust ICT security perimeter monitoring service to ensure cyber resilience, threat detection, analysis, and response. This monitoring service plays a critical role in the Council’s cyber security strategy and in achieving information governance objectives. The managed service is necessary to assist in meeting security criteria specified by external information security compliance schemes which the Council adheres to including Public Service Network (PSN) Information Assurance Conditions, Payment Card Industry Data Security Standards (PCI DSS), Cyber Essentials Scheme, Data Protection Act (DPA), and the General Data Protection Regulations (GDPR). The services required include, but not limited to: Threat management 24/7 monitoring of firewall logs and 365 environment Security operations centre (SOC) Incident management system Threat intelligence, security advisories, and notifications Log retention Systems health, availability, and performance monitoring Device management and software updates Training and documentation Quality plan, project management, and implementation (where required) Lot 1: The procurement was a call off by direct award from the GCA G-Cloud Framework, Lot 2 Cloud Software. As per the G-Cloud 14 Buyer guide, requirements of this service were listed, and a search was undertaken in G-Cloud 14, filtering keywords, and filters to drill down on the numbers of suppliers who met the requirements in order to assess the most suitable supplier. The search is saved in G-Cloud 14 which provides a full audit trail.