Cybersecurity Specialist Services

AI-generated analysis of the documents. Check the official notice and any amendments for current submission details.

1. At a glance

2. Scope of Work

This tender seeks specialist cybersecurity services for Fáilte Ireland. The contract will involve the provision of expert advice, support, and potentially implementation of cybersecurity measures to protect Fáilte Ireland's digital assets and operations. The scale of the requirement is indicated by the need to support approximately 450-500 users nationwide.

The specific activities and deliverables are not fully detailed in the provided text but are expected to encompass:

• Provision of Services: The contractor will provide services as described in Schedule B of the Supply of Services Contract, adhering to the Specification derived from the ITT and the contractor's submission. This includes the nature, quality, time of delivery, key personnel, and specifications of the services.
• Adherence to Client Directions: Services must be provided in accordance with the Client's directions and the terms of the Agreement.
• Compliance with Policies: The contractor must comply with and implement any policies, guidelines, or project governance protocols issued by Fáilte Ireland.
• Local Security Arrangements: Compliance with local security arrangements as notified by the Client is required.
• Industry Best Practice: Services must be delivered in accordance with good industry practice and all applicable rules, regulations, codes of conduct, and laws. This includes specific reference to the Safety Health and Welfare at Work Act 2005, child protection legislation, Data Protection Acts 1988 to 2018, Freedom of Information Act 2014, and applicable employment legislation.
• Data Protection: As a Data Processor, the contractor must comply with all applicable obligations arising from data protection legislation.
• Independent Contractor Status: The contractor will operate as an independent contractor, not an employee of Fáilte Ireland.
• Key Personnel: The contractor is responsible for ensuring that key personnel specified in their submission are available and remain so for the term of the agreement. Replacement personnel must have equivalent experience and expertise, subject to client approval.
• Reporting and Data Handling: The contractor must ensure that backup copies of all data and software are taken weekly. In the event of a disaster, breakdown, or interruption, the contractor must reconstruct data according to their Data Recovery Plan.
• Confidentiality: The contractor must not disclose any Confidential Information to third parties without prior written consent, except as legally required or to give effect to the agreement.

3. Background & buyer context

Fáilte Ireland, the National Tourism Development Authority, is procuring these cybersecurity specialist services. The authority is a statutory body established by the National Tourism Development Authority Act, 2003. The procurement is being conducted under the framework of Fáilte Ireland's standard terms and conditions for the supply of services. The specific strategic drivers or programmes underpinning this procurement are not detailed in the provided text. The tender is being issued to ensure the robust protection of Fáilte Ireland's digital infrastructure and sensitive data, supporting its national tourism development mandate.

4. Eligibility & selection criteria

Bidders must meet the following minimum requirements to be considered:

• Turnover requirement: Turnover during any of the previous 3 financial years was at least €400,000.
• Insurance:
• Employer's Liability Insurance: €13,000,000 indemnity limit per claim.
• Public Liability Insurance: €6,500,000 indemnity limit per claim.
• Professional Indemnity Insurance: €2,000,000 indemnity limit per claim.
• Cyber Liability Insurance: €5,000,000 indemnity limit per claim.
• Certifications: Not specified for this tender.
• Past experience: A minimum of one contract must have been with a public sector body in Ireland.
• Personnel: Not specified for this tender.
• Geographic / facility constraints: Not specified for this tender.

Additionally, bidders must hold an up-to-date Tax Clearance Certificate.

5. Award criteria & scoring

The award criteria and scoring mechanism are not detailed in the provided text. However, the contract will be awarded based on the most economically advantageous tender (MEAT), which typically involves a balance of quality and price. The specific weighting between quality and price, and the sub-criteria for quality assessment, are not disclosed in the supplied documents.

6. Submission requirements

Bidders are required to submit the following:

• Response Document: A response to the Request for Tender (ITT), which includes any clarifications issued by Fáilte Ireland.
• Submission: The bidder's response dated [Date of Tender], including any clarifications issued by the bidder.
• Declarations:
• Declaration as to Personal Circumstances of Tenderer, confirming none of the excluding circumstances listed in Article 45 of EU Directive 2004/18/EC apply.
• Tax Clearance Certificate.
• Pricing Schedule: Not explicitly detailed but implied by the contract's payment terms.
• Case Studies: Not specified for this tender.
• CVs: Not specified for this tender.
• Mandatory Site Visit: Not specified for this tender.
• Submission Portal: Bids are submitted via eTenders.

The contractor may not amend Fáilte Ireland's standard Supply of Services Contract.

7. Key dates & process

The tender validity period required is 12 months.

8. Contract terms that matter

• Term: The contract has an Effective Date and an Expiry Date, specified in Schedule B. The Client reserves the right to extend the Term for additional periods.
• Payment Terms: Payment is made within 30 days of receipt of a correct and appropriately vouched invoice, provided there is no dispute. Payment is subject to the contractor providing a valid Purchase Order number on each invoice and possessing a current Tax Clearance Certificate. Professional Services Withholding Tax (PSWT) will be deducted at the standard rate.
• Key SLAs/KPIs: Not specified in the provided text.
• Liquidated Damages: Not specified in the provided text.
• Termination Clauses: The agreement can be terminated in accordance with its provisions or otherwise lawfully. A material breach by the contractor, such as failure to comply with TUPE-like regulations, can lead to termination.
• IP Ownership: All Intellectual Property Rights (IPR) in materials produced for the agreement vest in the Client. The contractor assigns all IPR to the Client.
• Sub-contracting: The contractor shall not sub-contract any aspect of the services without prior written consent. If consent is given, the contractor remains fully responsible for the sub-contractor's acts and omissions.
• Parent-company Guarantee/Bond: Not specified for this tender.

9. Risks, red flags & unusuals

• Turnover Requirement: The minimum annual turnover requirement of €400,000 is relatively low compared to the total contract value of €800,000. This could indicate a desire to attract smaller or specialist firms, or it might be a standard threshold applied across various procurements.
• Insurance Levels: The insurance requirements, particularly Cyber Liability at €5,000,000, are substantial and reflect the critical nature of cybersecurity services.
• Contractual Priority: The order of priority for contractual documents is clearly defined: Agreement/Schedules, ITT, and then the Submission. This means the standard contract terms are paramount.
• No Amendments: Fáilte Ireland will not enter into negotiations regarding the standard terms and conditions, and contractors cannot amend the agreement.
• 12-Month Tender Validity: A 12-month tender validity period is requested, which is longer than the typical 6 months and may require bidders to secure internal commitments for an extended period.

10. SME fit assessment

This tender is potentially accessible to Small and Medium-sized Enterprises (SMEs) that specialise in cybersecurity.

• Credible Bidders: A viable bidder would be a firm with demonstrated expertise in cybersecurity, capable of providing specialist advice and services to a national authority. They must meet the significant insurance requirements, particularly the €5,000,000 Cyber Liability cover. Experience with public sector bodies in Ireland is a mandatory requirement.
• Consortium/Sub-contracting: Sub-contracting is permitted but requires prior written consent from Fáilte Ireland. The prime contractor remains fully responsible for any sub-contractors. Consortium bids are not explicitly mentioned but would likely be evaluated based on the collective capabilities of the consortium members, provided they meet all eligibility criteria.
• Indicative Bid-Prep Effort: Preparing a bid for a tender of this nature, especially given the insurance requirements and the need to demonstrate public sector experience, would likely require several days of effort from a dedicated bid team. This includes gathering documentation, articulating service delivery methodologies, and ensuring compliance with all contractual terms.
• Pwin Signal: The tender does not explicitly mention an incumbent. The requirement for a minimum of one public sector contract in Ireland suggests that firms with existing relationships or experience within the Irish public sector may have an advantage. The €800,000 value suggests a significant but not massive contract, potentially open to specialist firms rather than large, diversified consultancies.

11. Where to dig deeper

• Source RFT Filename(s): [Appendix 1 - Supply of Services Contract.pdf]
• eTenders CFT ID: Not specified in the provided text.
• Contact: [email protected]
• Most Important Attachments:
• Fáilte Ireland’s Supply of Services Contract – V1
• Schedule B (details of Services, Prices, Key Personnel, Term, Additional Periods)
• Schedule E (ITT document)
• Schedule F (Contractor's Submission)