Managed Detection Response Services (MDRS)

AI-generated analysis of the documents. Check the official notice and any amendments for current submission details.

1. At a glance

2. Scope of Work

The Office of the Ombudsman seeks Managed Detection Response Services (MDRS) for its Microsoft Azure cloud ecosystem. The estimated contract value is €400,000 (excluding VAT) over an initial three-year term, with a potential twelve-month extension. The services are designed to provide continuous monitoring, threat detection, and incident response capabilities within the Office's cloud environment.

The core activities and requirements for the MDRS provider include:

• Managed Detection and Response: Providing 24/7/365 monitoring of the Office of the Ombudsman's Microsoft Azure cloud environment. This involves the use of security information and event management (SIEM) tools, endpoint detection and response (EDR) solutions, and other relevant security technologies to identify potential threats and security incidents.
• Threat Intelligence and Analysis: Proactively identifying and analysing emerging threats relevant to the Office's operational context. This includes correlating threat intelligence with observed activity within the Azure environment to assess risk and impact.
• Incident Triage and Investigation: Upon detection of a potential security incident, the provider must perform rapid triage, investigation, and analysis to determine the nature, scope, and severity of the incident.
• Incident Response and Remediation Support: Providing expert support for incident response activities, including containment, eradication, and recovery. This may involve recommending and assisting with the implementation of remediation actions within the Azure environment.
• Reporting and Communication: Delivering regular reports on security posture, detected threats, and incident response activities. Clear and timely communication protocols must be established for escalating critical incidents and providing updates to the Office of the Ombudsman.
• Service Level Agreements (SLAs): Adhering to defined SLAs for detection times, response times, and resolution times for various types of security incidents.
• Technology Integration: Integrating with the Office of the Ombudsman's existing Microsoft Azure cloud infrastructure and any specified security tools.
• Continuous Improvement: Proposing and implementing enhancements to the MDRS service to adapt to evolving threat landscapes and the Office's changing IT environment.

The detailed requirements are specified in Appendix 1 of the Request for Tender (RFT).

3. Background & buyer context

This procurement is initiated by the Office of the Ombudsman to enhance its cybersecurity posture through the provision of Managed Detection Response Services (MDRS). The services are specifically tailored for the Office's Microsoft Azure cloud ecosystem. The estimated contract value of €400,000 over three years, with a potential extension, indicates a strategic investment in securing sensitive governmental data and operations. The tender is conducted under an open procedure, aligning with EU public procurement regulations. The Contracting Authority policy seeks to encourage participation from Small and Medium Enterprises (SMEs) and encourages larger enterprises to include SMEs in their proposals, reflecting a broader government objective of fostering SME inclusion in public contracts.

4. Eligibility & selection criteria

To be considered for this tender, bidders must meet the following minimum requirements:

• Turnover requirement: An average annual turnover of at least €1,000,000 in each of the last three (3) financial years prior to the publication of the tender notice. Audited accounts will be requested for verification.
• Insurance: The successful tenderer must hold the following insurances for the term of the Services Contract:
• Employer’s Liability: €12.7M
• Public Liability: €6.7M
• Product Liability: €1M
• Professional Indemnity: €1M
• Cyber Indemnity: €2.5M Confirmation of these insurances, including territorial limits covering Ireland and absence of adverse exclusions, will be required prior to contract award.
• Certifications: Not specified for this tender.
• Past experience: Not specified for this tender.
• Personnel: Not specified for this tender.
• Geographic / facility constraints: Not specified for this tender.

Tenderers must also complete and submit an electronic European Single Procurement Document (eESPD) declaring compliance with mandatory exclusion grounds and demonstrating satisfaction of the selection criteria.

5. Award criteria & scoring

The award of the contract will be based on the Most Economically Advantageous Tender (MEAT), determined by a combination of price and quality. The specific weighting between price and quality is not detailed in the provided extract, but the tender documents state that tenderers must achieve a minimum of 60% of the total score available in each criterion to avoid elimination. The evaluation process will assess compliant tenders against the defined award criteria. The formula for evaluating cost is provided as: Total Marks Available X Lowest Tender Price / Tenderer's Price.

6. Submission requirements

Tenders must be submitted electronically via the eTenders platform. Key submission requirements include:

• eESPD: Completion and submission of the electronic European Single Procurement Document.
• Pricing Schedule: Completion of the Pricing Schedule at Appendix 2, with all prices in Euro, exclusive of VAT, and all-inclusive of ancillary costs. Prices must remain valid for six months from the tender deadline.
• Tenderer’s Statement: A scanned, signed copy of the Tenderer’s Statement at Appendix 3, confirming acceptance of contract terms.
• Declarations: Submission of a Declaration as to Personal Circumstances of Tenderer (Appendix 4).
• Format: Tenders must be in English and compiled for immediate reading using Adobe Acrobat or Microsoft Office. Electronic documents must not be corrupt.
• File Size Limits: A maximum of 250MB per single file and 2GB total for all documentation.
• Submission Method: Exclusively via the eTenders electronic tender box. Tenders submitted by any other means will not be accepted.
• Consortia/Subcontractors: If submitting as a group, a single nominated entity must be authorised to represent all members. The Prime Contractor must be designated prior to award.
• Tax Clearance: Submission of Tax Clearance Access Number and Tax Reference Number for online verification.

7. Key dates & process

8. Contract terms that matter

The Services Contract will be for an initial term of three (3) years, with a potential extension of up to twelve (12) months. Tenderers must confirm acceptance of the Services Contract terms (Appendix 5) by signing the Tenderer’s Statement. Prices quoted are valid for six (6) months from the tender deadline. Currency variations over the contract term are borne by the Tenderer. Payments will be made in accordance with the Services Contract. Price adjustments are permitted only on the first anniversary of the contract's effective date and subsequent anniversaries, linked to the Consumer Price Index. The successful tenderer must comply with all applicable environmental, social, and labour laws. Indemnification is required for failure to comply with employee rights regulations during transfers of undertakings. Obligations under the Protection of Employees (Temporary Agency Work) Act 2012 must be considered in pricing.

9. Risks, red flags & unusuals

The estimated contract value of €400,000 over three years, with a potential extension, is relatively modest for a managed detection and response service, which could suggest a limited scope of services or a focus on a specific segment of the Office's Azure environment. The requirement for a €1,000,000 average annual turnover over three years, while standard for many public tenders, might be a significant hurdle for smaller, specialised MDR providers, potentially limiting the competitive pool. The absence of specific detail on award criteria weighting (price vs. quality) requires bidders to make assumptions about the evaluation emphasis. The tender explicitly states that the €400,000 figure is an estimate and not a guarantee of expenditure.

10. SME fit assessment

This tender is structured to allow participation from a range of businesses, including SMEs, with a stated policy to encourage their involvement. A credible bidder would typically be a cybersecurity service provider with established expertise in managed detection and response, particularly within cloud environments like Microsoft Azure. The turnover requirement of €1,000,000 average annual turnover over three years suggests that very small, nascent businesses may find it challenging to meet this criterion. Consortium or subcontracting arrangements are permitted, offering a pathway for SMEs to participate by partnering with larger entities or other SMEs. The bid preparation effort is likely to be moderate, involving the completion of the eESPD, pricing schedule, and tenderer's statement, alongside detailing insurance and financial standing. The "Pwin" signal is not strongly indicated; the tender appears open, but the turnover requirement is a key filter.

11. Where to dig deeper

• Source RFT Filename: OMB026-ICT-003-Cyber-MDR-Services-June2026 - Final.docx
• eTenders CFT ID: Not specified in provided text.
• Contact / Clarification Portal: Messaging facility on eTenders.gov.ie
• Key Attachments:
• Appendix 1: Requirements and Specifications
• Appendix 2: Pricing Schedule
• Appendix 3: Tenderer’s Statement
• Appendix 5: Services Contract