PURCH2317 PROVISION OF A CONTRACT FOR MANAGED SECURITY SERVICES

Description

PURCH2317 PROVISION OF A CONTRACT FOR MANAGED SECURITY SERVICES FOR THE PERIOD OF 3 YEARS WITH THE OPTION TO EXTEND FOR TWO PERIODS OF 12 MONTHS EACH WITH BREAKPOINTS AT EACH 12 MONTH INTERVAL. Tender documents available from Public Contracts Scotland. Tender returns should be submitted via Public Contracts Scotland, no paper copies will be accepted. Should paper tenders be submitted, they will be rejected. Further to this any questions or communications regarding individual tender exercises must be sent via the Public Contracts Scotland Portal. Tender queries received through any other channel will not be answered. Should users of Public Contracts Scotland have any problems with the web site they should contact website Support Desk, contact details can be found by following the ‘Contact Us’ option on the left hand menu at http://www.publiccontractsscotland.gov.uk/default.aspx PURCH2317 PROVISION OF A CONTRACT FOR MANAGED SECURITY SERVICES FOR THE PERIOD OF 3 YEARS WITH THE OPTION TO EXTEND FOR TWO PERIODS OF 12 MONTHS EACH WITH BREAKPOINTS AT EACH 12 MONTH INTERVAL. The UofG Information Security team establishes the policy, toolset, and oversight for robust defence against cyber threats. Cyber security alerts are generated around the clock, given the University's extensive online operations. The University has adopted Office 365 Education A5 Licensing and currently leverages Microsoft Sentinel as a SIEM and alerting tool. In addition to Sentinel's native and Microsoft 365 Defender alerts, we also incorporate Suricata IDS and select Windows log-based events. These are likewise accessible to UofG staff through the console. We necessitate services encompassing Security Operations Centre with Microsoft XDR capabilities as well as an Incident Response retainer to bolster our cybersecurity posture. A partner is required assist with the operations and engineering tasks associated with the monitoring of this system in a 24x7x365 fashion. Actioning agreed alerts according to UofG playbook specifications (this could include a wide range of responses including, isolation machine with malware, flagging email accounts as compromised, initiating remote forensic investigations) We are also seeking a partner to provide additional Threat Hunting, Threat Intelligence and advice on security best practice and design for gathering further security telemetry from a diverse set of technologies such as additional server-based log sources, Sophos Central, Cisco Firepower and InfoBlox. To help us further increase our visibility and security posture. We additionally require Incident Response capability to be offered via retainer. Refer to ITT document for detailed specification.