Provision of Security Operations Centre (SOC) and Security Information and Event Management (SIEM) Services

AI-generated analysis of the documents. Check the official notice and any amendments for current submission details.

1. At a glance

2. Scope of Work

Tallaght University Hospital ran this procurement for “Provision of Security Operations Centre (SOC) and Security Information and Event Management (SIEM) Services” as an operational contract requiring implementation and sustained service execution. The extracted pack showed qualification-stage material with references to later ITT technical depth; practical activity therefore centred on building, integrating, and operating the specified service stack with compliant reporting and handover obligations where stated. Constituent activities and named work elements in the supplied extracts:

• Title: Provision of Security Operations Centre (SOC) and Security Information and Event Management (SIEM) Services
• rer shall be required to supply its Tax Clearance Access Number and Tax Reference Number to facilitate online verification of their tax status by
• d the Service Provider will provide this information within 5 days
• [RFT SOC SIEM Services.docx]
• Request for Tender for the Provision of Security Operations Centre (SOC) and a Security Information and Event Management (SIEM) Services
• [RFT SOC SIEM Services.docx] * Request for Tender for the Provision of Security Operations Centre (SOC) and a Security Information and Event Management (SIEM) Services
• • TUH Service Provider Confidentiality Agreement ICT SOC SIEM
• [RFT SOC SIEM Services.docx] Part 1: Introduction
• 1.1 The Adelaide and Meath Hospital Dublin incorporating the National Children’s Hospital (Tallaght University Hospital) (the “Contracting Authority”) invites tenders (“Tenders”) to this request for tenders (“RFT”) from economic operators (“Tenderers”) for the provision of the services as described in Appendix 1 to this RFT (the “Services”). Tenderers should note that the hospital is also called Tallaght University Hospital (TUH) and/or AMNCH and may be referenced in this document and any associated document(s) as such but the aforementioned is the legal title.
• 1.2 In summary, the Services comprise: the supply, delivery, installation, commissioning and support/maintenance of Security Operations Centre (SOC) and a Security Information and Event Management (SIEM)
• 1.4 This public procurement competition (the “Competition”) will be conducted in accordance with the open procedure under the European Union (Award of Public Authority Contracts) Regulations 2016 (Statutory Instrument 284 of 2016) (the “Regulations”). Any contract that may result from this Competition (the “Services Contract”) will be issued for an initial term of thirty six (36) months. (“the Term”). The Contracting Authority reserves the right to extend the Term for a period 12 months with a maximum of two (2) such extension or extensions on the same terms and conditions, subject to the Contracting Authority’s obligations at law.
• [RFT SOC SIEM Services.docx] .5 Not Used Non-binding monetary references in the source were treated as context only and were not used as qualification thresholds.

3. Background & buyer context

The buyer context reflected a formal Irish public-procurement route, with pre-qualification used to control entry into the tender stage.

• 1.7 Contracting Authority policy seeks to encourage participation on a fair and equal basis by Small and Medium Enterprises (“SME”s) in this Competition. SMEs that believe the scope of this Competition is beyond their technical or business capacity are encouraged, subject to paragraph 2.5, to explore the possibilities of forming relationships with other SMEs or with larger enterprises. Through such relationships they can participate and contribute to the successful implementation of any Contract that may result from this Competition and therefore increase their social and economic benefits. Larger enterprises are also encouraged, subject to paragraph 2.5, to consider the practical ways that SMEs can be included in their proposals to maximise the social and economic benefits of any Contracts that may result from this Competition.
• 2.21.1 The successful Tenderer shall be required to hold for the term of the Contract the following insurances: Type of Insurance Indemnity Limit Employer’s Liability €12,700,000 limit for any one claim or series of claims arising out of a single occurrence Public Liability €6,500,000 limit for any one claim or series of claims arising out of a single occurrence and €6,500 permitted deductible for any one claim. Professional Indemnity €2,000,000 for any one claim or series of claims arising out of a single occurrence and €6,500 permitted deductible for any one claim Cyber Insurance €2,000,000 limit in the aggregate per insurance year. Policy to be on a “claims made” basis

4. Eligibility & selection criteria

• Turnover requirement — — use these verbatim for insurance / turnover. If a category (insurance, turnover) has no entry here, treat it as 'not specified' for THIS tender.
• Insurance — — use these verbatim for insurance / turnover. If a category (insurance, turnover) has no entry here, treat it as 'not specified' for THIS tender.; er shall be required to hold for the term of the Contract the following insurances: Type of Insurance Indemnity Limit Employer’s Liability €12,700,000 limit for any one claim or series of claims arising out of a single occurrence Public Liability €6,500,000 limit for any one claim or series of cla; Professional Indemnity €2,000,000 for any one claim or series of claims arising out of a single occurrence and €6,500 permitted deductible for any one claim Cyber Insurance €2,000,000 limit in the aggregate per insurance yea
• Certifications — not specified for this tender
• Past experience — not specified for this tender
• Personnel — not specified for this tender
• Geographic / facility constraints — not specified for this tender Additional binding lines surfaced in the deterministic extract:
• — use these verbatim for insurance / turnover. If a category (insurance, turnover) has no entry here, treat it as 'not specified' for THIS tender.
• er shall be required to hold for the term of the Contract the following insurances: Type of Insurance Indemnity Limit Employer’s Liability €12,700,000 limit for any one claim or series of claims arising out of a single occurrence Public Liability €6,500,000 limit for any one claim or series of cla
• Professional Indemnity €2,000,000 for any one claim or series of claims arising out of a single occurrence and €6,500 permitted deductible for any one claim Cyber Insurance €2,000,000 limit in the aggregate per insurance yea

5. Award criteria & scoring

6. Submission requirements

• Method statement / response document (template/page limits) — not specified in extract.
• CVs (page count, named roles) — not specified in extract.
• Pricing schedule (format/template) — expected at ITT stage.
• Case studies (number/value range) — client references/comparable project evidence was referenced.
• Declarations (ESPD/Bona Fides/Tax/COI) — ESPD/declaration/statement-of-confirmation language was present.
• Mandatory site visit — not specified in extract.
• Submission portal and formatting — eTenders portal and PDF electronic copies were referenced. Submission-related source lines:
• Value: not disclosed (eTenders placeholder)
• Appendix 3A: Schedule C – Declaration of non-notifiable foreign financial contributions (valued between €200,000 and €999,000 in
• Appendix 3A: Schedule C – Declaration of non-notifiable foreign financial contributions (valued between €200,000 and €999,000 in the last three years preceding the declaration)
• 2022/2560 and where the notifying party has been in receipt of foreign financial contributions which are valued between €200,000 and €999,000 in the last three (3) years preceding the declaration
• For reporting of foreign financial contributions which are of a value between €200,000 and €999,000 in the last three (3) years preceding the declaration
• Appendix 3A: Schedule D – Declaration of non-notifiable foreign financial contributions (valued between €1,000,000 and €3,999,000 in the last three years preceding the declaration)

7. Key dates & process

8. Contract terms that matter

Contract duration in the extract: 12 months. Payment cycle, SLA/KPI schedule, and penalty regime were not fully disclosed in the snippets unless listed below.

• VERIFIED PHRASES (deterministic regex extract from the documents — treat as authoritative for numerical claims)
• er shall be required to hold for the term of the Contract the following insurances: Type of Insurance Indemnity Limit Employer’s Liability €12,700,000 limit for any one claim or series of claims arising out of a single occurrence Public Liability €6,500,000 limit for any one claim or series of cla
• 2022/2560 and where the notifying party has been in receipt of foreign financial contributions which are valued between €200,000 and €999,000 in the last three (3) years preceding the declaration
• 2022/2560 and where the notifying party has been in receipt of foreign financial contributions which are valued between €1,000,000 and €3,999,000 in the last three (3) years preceding the declaration
• uthority reserves the right to extend the Term for a period 12 months with a maximum of two (2) such extensio
• ll result in supplier invoices being paid on average within 45 days following the receipt of the relevant i
• [RFT SOC SIEM Services.docx]
• • TUH ICT Standard Terms & Conditions

9. Risks, red flags & unusuals

• Qualification gate: the deterministic extract included a turnover threshold line (— use these verbatim for insurance / turnover. If a category (insurance, turnover) has no entry here, treat it as 'not specified' for THIS tender.), which can materially narrow bidder pool composition.
• Contract value was not disclosed in metadata, creating uncertainty on margin, resourcing, and financing assumptions.
• The two-step process (PQQ then ITT) shifted effort to compliance evidence early, with competitive scoring detail potentially deferred.
• Technical and contractual granularity appeared ITT-dependent, increasing ambiguity at qualification stage for non-incumbent bidders.

10. SME fit assessment

This competition looked most accessible to firms with established public-sector tender capability, documented financial capacity, and direct operational experience in the relevant service category.

• Credible bidder profile — mid-sized to large specialist with formal QA/compliance process.
• Consortium / sub-contracting — allowed or addressed in the extracts (Appendix references and reliance provisions).
• Indicative bid-prep effort — 6 to 12 working days for evidence collation, form completion, and review cycles at PQQ level.
• Pwin signal — strongest for bidders with reusable qualification artefacts, comparable references, and low-friction mobilisation capability.

11. Where to dig deeper

• Source RFT/PQQ filenames: RFT SOC SIEM Services.docx, Appendix 3A: Schedule C – Declaration of non-notifiable foreign financial contributions, Appendix 3A: Schedule D – Declaration of non-notifiable foreign financial contributions.
• eTenders CFT / notice reference: not specified in extract.
• Clarification contact / portal: eTenders message portal (email not surfaced in extract).
• Key attachments to prioritise: RFT SOC SIEM Services.docx] ![A logo for a university Description automatically ge, RFT SOC SIEM Services.docx] * Request for Tender for the Provision of Security Oper, Appendix 2: Pricing Schedule.