Cybersecurity Managed Services Provision

The Authority is procuring cyber security services to support the organisation's security posture, operational resilience, and ability to prevent, detect, respond to, and recover from cyber threats.

The required services may include, but are not limited to:

Security assessment services, including IT health checks and vulnerability assessments;

Incident response and threat management services, including cyber incident handling, threat intelligence and business continuity support;

Managed security services, such as managed detection and response (MDR), Security Operations Centre (SOC) services, and continuous monitoring;

Specialist cyber consultancy, including risk assessment, security architecture, cyber maturity analysis, security strategy, policy development and transformation activities.

These services must be delivered by suppliers admitted to the Crown Commercial Service Dynamic Purchasing System Cyber Security Services 3 (RM3764.3) and selected through the appropriate DPS filtering options. The volume, mix, and scope of services will depend on the Authority's ongoing operational and security requirements over the life of the contract.

Suppliers must ensure all services are delivered in accordance with relevant industry standards, applicable legislation, and any required cyber security certifications (including those required by the DPS filters).