Request for Tenders for the Provision of Managed Security Services

AI-generated analysis of the documents. Check the official notice and any amendments for current submission details.

1. At a glance

2. Scope of Work

The Houses of the Oireachtas Service seeks a Managed Security Services Provider (MSSP) to deliver a suite of security services. The objective is to proactively address security risks and enhance the Contracting Authority's overall security posture. The contract is for a term of one year, with the possibility of up to two extensions of 12 months each. The estimated expenditure for the services, including potential extensions, is €1.3 million (excluding VAT).

The scope of services includes:

• Managed Security Operations Centre (SOC) Delivery: Providing resilience for SOC delivery locations, including the use of specific standards like ISO 22301 or equivalent.
• Security Services: Delivering a set of security services to manage and mitigate risks.
• Expertise Provision: Supplying expertise to proactively address security risks.
• Security Posture Enhancement: Continuously improving the Contracting Authority's security posture.
• Data Ingestion: The service must handle significant data volumes, with average daily ingestion figures provided for the last 30, 60, and 90 days:
• Last 30 days: 128 GB/day / 2,277 EPS (Events Per Second)
• Last 60 days: 125 GB/day / 2,295 EPS
• Last 90 days: 124 GB/day / 2,316 EPS
• Operational Readiness: The successful tenderer must achieve operational readiness within 60 days of contract commencement.
• Reporting: Monthly status reports are required, detailing key information.
• Service Levels: Specific service levels are detailed in Schedule D, and compliance is mandatory.
• Data Protection: Services must comply with all applicable data protection laws, including GDPR, as detailed in Schedule E.

The contract requires the successful tenderer to achieve operational readiness within 60 days of contract commencement. The current supplier's contract expires 60 days after the onboarding phase of this Agreement.

3. Background & buyer context

This procurement is initiated by the Houses of the Oireachtas Commission to secure managed security services. The need arises from the ongoing requirement to maintain and enhance the security posture of the organisation. The current supplier's contract is nearing expiry, necessitating a new procurement process. The estimated expenditure of €1.3 million (excl. VAT) over the potential contract term indicates a significant investment in cybersecurity. The Contracting Authority aims to ensure continuous protection against evolving security threats. The tender process is conducted under the open procedure, aligning with EU and Irish public procurement regulations.

4. Eligibility & selection criteria

Bidders must meet the following criteria to be considered:

• Turnover requirement: A minimum average annual turnover of €2,600,000 (excluding VAT) in each of the last three financial years.
• Insurance:
• Employer's Liability: €13,000,000
• Public Liability: €6,500,000 limit for any one claim or series of claims arising out of a single occurrence, per insurance year.
• Professional Indemnity: €10,000,000 in the aggregate.
• Cyber Liability (including loss of data): €5,000,000 in the aggregate.
• Certifications: Not specified for this tender.
• Past experience: Not specified for this tender.
• Personnel: Not specified for this tender.
• Geographic / facility constraints: Services must be provided within Ireland. SOC delivery locations must demonstrate resilience, potentially referencing ISO 22301 or equivalent.

5. Award criteria & scoring

The award criteria will determine the successful tenderer. The evaluation will follow a "Most Economically Advantageous Tender" (MEAT) approach, balancing price and quality.

Criterion Weight (%) Sub-criteria