AC-2026-26 Provision of ICT SOC-SIEM and Managed Support Services

AI-generated analysis of the documents. Check the official notice and any amendments for current submission details.

1. At a glance

2. Scope of Work

The Arts Council seeks a contractor to provide ICT Security Operations Centre (SOC) and Security Information and Event Management (SIEM) services, along with managed support services. The contract spans an initial three-year period, with a potential one-year extension. The contractor will manage and monitor the Arts Council's IT infrastructure to ensure security and operational efficiency.

• SOC Operations: Maintain a 24/7 Security Operations Centre, operational for at least 12 months prior to bidding. The SOC must provide real-time alerts and incident response.
• SIEM Services: Implement and manage a SIEM system to monitor, detect, and respond to security threats. Log retention must be maintained for six months, with options for longer retention periods.
• Managed Support Services: Provide ongoing IT support, including system updates, patch management, and troubleshooting.
• Technical Environment: The contractor will work within the Arts Council's existing IT framework, integrating with current systems and processes.
• Compliance and Reporting: Ensure compliance with relevant security standards such as ISO 27001 and provide regular reports on system performance and security incidents.
• Capacity Building: Offer training and support to the Arts Council's internal IT team to enhance their capability in managing security operations.

3. Background & buyer context

The procurement of ICT SOC-SIEM and Managed Support Services by the Arts Council aligns with its strategic objective to enhance cybersecurity and IT infrastructure resilience. This initiative is part of a broader effort to modernize the Council's digital capabilities and safeguard sensitive data. The current contract is being tendered as part of a routine review and upgrade of existing IT services, ensuring alignment with contemporary security standards and practices. No incumbent provider is specified, indicating an open opportunity for new entrants.

4. Eligibility & selection criteria

• Turnover requirement: Minimum annual turnover of €160,000 for each of the last three financial years.
• Insurance:
• Employer's Liability: €13,000,000 (not required if self-employed)
• Public Liability: €6,500,000 (not required for virtual services)
• Professional Indemnity: €1,000,000
• Cyber Security Indemnity: €1,000,000
• Certifications: ISO 27001 or equivalent cybersecurity certifications required.
• Past experience: At least three contracts in the past five years involving SIEM-SOC and IT Managed Services.
• Personnel: Must demonstrate capacity to operate a 24/7 SOC.
• Geographic / facility constraints: Not specified for this tender.

5. Award criteria & scoring

Price/quality split follows the MEAT (Most Economically Advantageous Tender) principle.

6. Submission requirements

• Method statement / response document: Complete the Tender Response Document (TRD).
• CVs: Minimum of three key personnel, no page limit specified.
• Pricing schedule: Use the provided template in the TRD.
• Case studies: Three case studies of similar contracts.
• Declarations: ESPD, Bona Fides, Tax clearance, Conflict of Interest.
• Mandatory site visit: Not specified.
• Submission portal: eTenders, documents must be in English.

7. Key dates & process

8. Contract terms that matter

The contract has a three-year term with a possible one-year extension. Payment terms require all prices to be quoted in Euro, exclusive of VAT. Key SLAs include a 24/7 operational SOC and compliance with ISO 27001 standards. Liquidated damages or penalty regimes are not specified. Termination clauses allow for contract termination with three months' notice. Intellectual property ownership and sub-contracting rules are not detailed. No parent-company guarantee or bond requirements are mentioned.

9. Risks, red flags & unusuals

The tender specifies a high turnover requirement relative to the contract's annual value, potentially limiting the bidder pool. The requirement for a 24/7 SOC operational for at least 12 months prior to bidding may favor incumbents or larger firms with established operations. The integration with existing IT systems could pose challenges for non-incumbents unfamiliar with the Arts Council's infrastructure.

10. SME fit assessment

This tender is suitable for SMEs with a strong background in cybersecurity and IT managed services. Firms must have a proven track record with at least three relevant contracts in the past five years. Consortium bids are allowed, and sub-contracting is permitted, offering flexibility for smaller firms to partner with others. Bid preparation is estimated to take several days, given the detailed requirements. The presence of a high turnover threshold and the need for an established SOC may indicate a preference for experienced providers.

11. Where to dig deeper

• Source RFT filename: "AC-2026-26 Arts Council CFT Final v1.1.pdf"
• eTenders CFT ID: Not specified
• Contact email or clarification portal: Messaging facility on www.etenders.gov.ie
• Important attachments:
• "Appendix 1 — Service Requirements"
• "Appendix 2 — Specimen Contract"
• "Tender Response Document (TRD)"