Single Point of Contact Monitoring Portal

AI-generated analysis of the documents. Check the official notice and any amendments for current submission details.

1. At a glance

2. Scope of Work

Sustainable Energy Authority of Ireland ran this procurement for “Single Point of Contact Monitoring Portal” as an operational contract requiring implementation and sustained service execution. The extracted pack showed qualification-stage material with references to later ITT technical depth; practical activity therefore centred on building, integrating, and operating the specified service stack with compliant reporting and handover obligations where stated. Constituent activities and named work elements in the supplied extracts:

• l Tenderer shall be required to hold for the term of the Managed Services Contract the following insurances*: Type of Insurance Indemnity Limit Employer’s Liability €13,000,000 limit for any one claim or series of claims arising out of a single occurrence, per insurance year Public Liability €6,500,000 limit for any one claim or series of cl
• covered by the proposed Managed Services Contract may amount to some €1.56 million (excl
• The successful Tenderer must attend regular (a minimum of quarterly) Service Review
• sessed and certified Information Security Management System ISO 27001 (or equivalent) Pass/Fail
• or example Service and Quality Management standards such as ISO 20000, ISO 9001 or other standards and organisational resources (other than the Infor
• mation Security Management System (ISO 27001) or equivalent);
• The roles and responsibilities for each team member detailing their individual role in respect of the services required by SEAI; - a
• Security Management System (ISO 27001) or equivalent);
• in the Managed Service Agreement attached as an Appendix), ISO 27001 and NIS2
• is system is required to be operational by November 2026
• [CfT Services for SPC Monitoring Function.pdf] Services CfT Rev September 2025
• an online monitoring service for the Single Non-binding monetary references in the source were treated as context only and were not used as qualification thresholds.

3. Background & buyer context

The buyer context reflected a formal Irish public-procurement route, with pre-qualification used to control entry into the tender stage.

• 9.3 Scanning and Penetration Testing Policy
• Contracting Authority policy seeks to encourage participation on a fair and equal

4. Eligibility & selection criteria

• Turnover requirement — — use these verbatim for insurance / turnover. If a category (insurance, turnover) has no entry here, treat it as 'not specified' for THIS tender.
• Insurance — — use these verbatim for insurance / turnover. If a category (insurance, turnover) has no entry here, treat it as 'not specified' for THIS tender.; in with a well-established and reputable insurance office or underwriter of repute the following insurances*: Type of Insurance Indemnity Limit Employer’s Liability €13,000,000 limit for any one claim or series of claims arising out of a single occurrence, per insurance year Public Liability €6,500,000 limit for any one claim or series of cl; aims arising out of a single occurrence, per insurance year Product Liability €6,500,000 limit for any one claim or series of cl
• Certifications — not specified for this tender
• Past experience — not specified for this tender
• Personnel — not specified for this tender
• Geographic / facility constraints — not specified for this tender Additional binding lines surfaced in the deterministic extract:
• — use these verbatim for insurance / turnover. If a category (insurance, turnover) has no entry here, treat it as 'not specified' for THIS tender.
• in with a well-established and reputable insurance office or underwriter of repute the following insurances*: Type of Insurance Indemnity Limit Employer’s Liability €13,000,000 limit for any one claim or series of claims arising out of a single occurrence, per insurance year Public Liability €6,500,000 limit for any one claim or series of cl
• aims arising out of a single occurrence, per insurance year Product Liability €6,500,000 limit for any one claim or series of cl
• Professional Indemnity €1,000,000 in the aggregate
• Cyber Liability €5,000,000 in the aggregate *other national insur
• l Tenderer shall be required to hold for the term of the Managed Services Contract the following insurances*: Type of Insurance Indemnity Limit Employer’s Liability €13,000,000 limit for any one claim or series of claims arising out of a single occurrence, per insurance year Public Liability €6,500,000 limit for any one claim or series of cl

5. Award criteria & scoring

6. Submission requirements

• Method statement / response document (template/page limits) — not specified in extract.
• CVs (page count, named roles) — not specified in extract.
• Pricing schedule (format/template) — expected at ITT stage.
• Case studies (number/value range) — client references/comparable project evidence was referenced.
• Declarations (ESPD/Bona Fides/Tax/COI) — ESPD/declaration/statement-of-confirmation language was present.
• Mandatory site visit — not specified in extract.
• Submission portal and formatting — eTenders portal and PDF electronic copies were referenced. Submission-related source lines:
• Title: Single Point of Contact Monitoring Portal
• Schedule C – Declaration of non-notifiable foreign financial contributions (valued between €200,000 and €999,000 in the last three years preceding the declaration)
• €200,000 and €999,000 in the last three (3) years preceding the declaration
• For reporting of foreign financial contributions which are of a value between €200,000 and €999,000 in the last three (3) years preceding the declaration
• Schedule D – Declaration of non-notifiable foreign financial contributions (valued between €1,000,000 and €3,999,000 in the last three years preceding the declaration)
• €1,000,000 and €3,999,000 in the last three (3) years preceding the declaration

7. Key dates & process

8. Contract terms that matter

Contract duration in the extract: 1 year. Payment cycle, SLA/KPI schedule, and penalty regime were not fully disclosed in the snippets unless listed below.

• VERIFIED PHRASES (deterministic regex extract from the documents — treat as authoritative for numerical claims)
• l Tenderer shall be required to hold for the term of the Managed Services Contract the following insurances*: Type of Insurance Indemnity Limit Employer’s Liability €13,000,000 limit for any one claim or series of claims arising out of a single occurrence, per insurance year Public Liability €6,500,000 limit for any one claim or series of cl
• re parts of the contract may be performed that are in force 7 days prior to the deadline for receipt of Te
• Please note that the terms “Request for Tender” and “Call for Tender” are used
• interchangeably and have the same meaning, similarly, the terms “RFT”, and “CfT”
• Given the current legislation under Renewable Energy Directive III (REDIII), SEAI
• “Managed Services Contract”) will be issued for a term of two (2) years (“the
• The Contracting Authority reserves the right to extend the Term for a period or

9. Risks, red flags & unusuals

• Qualification gate: the deterministic extract included a turnover threshold line (— use these verbatim for insurance / turnover. If a category (insurance, turnover) has no entry here, treat it as 'not specified' for THIS tender.), which can materially narrow bidder pool composition.
• The two-step process (PQQ then ITT) shifted effort to compliance evidence early, with competitive scoring detail potentially deferred.
• Technical and contractual granularity appeared ITT-dependent, increasing ambiguity at qualification stage for non-incumbent bidders.

10. SME fit assessment

This competition looked most accessible to firms with established public-sector tender capability, documented financial capacity, and direct operational experience in the relevant service category.

• Credible bidder profile — mid-sized to large specialist with formal QA/compliance process.
• Consortium / sub-contracting — allowed or addressed in the extracts (Appendix references and reliance provisions).
• Indicative bid-prep effort — 6 to 12 working days for evidence collation, form completion, and review cycles at PQQ level.
• Pwin signal — strongest for bidders with reusable qualification artefacts, comparable references, and low-friction mobilisation capability.

11. Where to dig deeper

• Source RFT/PQQ filenames: [3
• on a known number and confirm they sent the email
• (WCAG 2.1 compliant), useable from desktop/laptop devices
• number clearly referenced
• number for any spouse,
• ISO 22301 Business Continuity
• ensure secure IT governance and management, Company must be ISO 27001
• • The Contractor is ISO 27001 certified
• postal address, facsimile number and e-mail address of the nominated entity authorised
• Access Number and Tax Reference Number to facilitate online verification of their tax
• System ISO 27001 (or equivalent)
• Quality Management standards such as ISO 20000, ISO 9001 or other
• Security Management System (ISO 27001) or equivalent);
• The roles and responsibilities for each team member detailing their individual role in
• in the Managed Service Agreement attached as an Appendix), ISO 27001 and NIS2
• 8 Cybersecurity Requirements and ISO 27001 and NIS2 Compliance
• Appendix) ISO 27001 and any other Irish & EU Cybersecurity regulations (e
• This shall include any update to the ISO 27001 standard and NIS2
• uniquely record and number all authorized calls and will manage all calls to

Deadline phrases

• is system is required to be operational by November 2026

Scale / volume phrases

• for the contract open for acceptance by you for a period of 12 months from the date of deadline
• for the contract open for acceptance by you for a period of 12 months from the date of deadline for submissio
• re parts of the contract may be performed that are in force 7 days prior to the deadline for receipt of Te
• 3.5 Users
• 11.1.5 User Responsibility
• e countries listed above must be made to HR and IT at least 8 weeks prior to travel and will be dealt with
• Max Password Age 90 days for Active Directory and Entra
• When the 90 days are up you will be prompted to re-set y
• Min Password Age 1 day
• 5.1 User Access Management
• 9.3 Scanning and Penetration Testing Policy
• 5.1.1 User Registration and de-Registration
• 5.1.2 User Access Provisioning
• of 3 months
• 6.1.2 User Eligibility Criteria
• Maximum Password age of no more than 45 days for non-Active Directory/non-Entra syst
• Active Directory is set to 90 days)
• Minimum Password age of no less than 1 day
• less than 3 days of development magnitude and submitted
• No single request should be greater than 10 days
• cle will have a combined development magnitude of less than 30 days
• • All projects between 15 and 50 days
• • All projects above 50 days:
• This verification should be carried out at least every 6 months
• tion of threats and vulnerabilities experienced in the last 12 months

TENDER DOCUMENTS [CfT Services for SPC Monitoring Function.pdf, CfT Services for SPC Monitoring Function.pdf, Schedule C – Declaration of non-notifiable foreign financial contributions (valued betwe.

• eTenders CFT / notice reference: not specified in extract.
• Clarification contact / portal: eTenders message portal (email not surfaced in extract).
• Key attachments to prioritise: Schedule D – Declaration of non-notifiable foreign financial contributions (valued betwe, Appendix), ISO 27001 and NIS2, Appendix) ISO 27001 and any other Irish & EU Cybersecurity regulations (e.