CONTRACT NOTICE – NATIONAL

1 Authority Details

1.1

Authority Name and Address

1.2

Address from which documentation may be obtained

1.3

Completed documents must be returned to:

2 Contract Details

2.1

Title

For the Provision of Cyber Essentials Certification for Law Firms based in Wales

2.2

Description of the goods or services required

The Law Society has received grant funding approval of up to £100,000 from Welsh Government, to be applied during the period August 2022 – March 2023 (“Grant Period”), to enhance the Cyber and IT Security of law firms in Wales (“Project”).

The Project objectives are to:

• improve the cyber resilience of law firm in Wales;

• reduce the risk of any cyber security incidents; and

• improve the management response of law firms should a cyber incident or denial of service.

The particular focus of the Project is to assist Welsh law firms to achieve Cyber Essentials certification through IASME. The Law Society wishes to appoint a Supplier to work with it on the Project. This section provides general information on the process involved with this Request for Proposal (RFP).

The certification for Cyber Essentials and/or Cyber Essentials Plus is as prescribed by IASME, details can be found at www.IASME.co.uk.

NOTE: To register your interest in this notice and obtain any additional information please visit the Sell2Wales Web Site at https://www.sell2wales.gov.wales/Search/Search_Switch.aspx?ID=123242.

2.3

Notice Coding and Classification

2.4

Total quantity or scope of tender

£100,000.00

3 Conditions for Participation

3.1

Minimum standards and qualification required

The supplier organisation must be an NCSC certified training organisation and hold ISO 27001 accreditation (a copy of this documentation must be included with any response).

The supplier must hold current IASME Gold certification and must be a current IASME licensed certification body. Each member of the team delivering the Services to firms must also hold all relevant Cyber Assurance qualifications. (copies of this documentation will be required with any response) Please provide details and copies of the relevant licences and accreditations in your response.

The Supplier shall have an Information Security policy and operational procedures that ensure compliance with UK GDPR and the Data Protection Act 2018.

4 Administrative Information

4.1

Type of Procedure

Single stage

4.2

Reference number attributed to the notice by the contracting authority

N/a

4.3

Time Limits

4.5

Language or languages in which tenders or requests to participate can be drawn up

4.6

Tender Submission Postbox

5 Other Information

5.1

Additional Information

This notice has been sent as a region specific notice. If you did not receive an alert about this you are not based in the specific region selected by the buying authority. Questions on why this was sent as a region specific notice should be sent to the buying authority.

(WA Ref:123242)

5.2

Additional Documentation

5.3

Publication date of this notice