II.2.3) Place of performance
NUTS code:
UKI
II.2.4) Description of the procurement
The Authority is procuring cyber security services to support the organisation's security posture, operational resilience, and ability to prevent, detect, respond to, and recover from cyber threats.
The required services may include, but are not limited to:
Security assessment services, including IT health checks and vulnerability assessments;
Incident response and threat management services, including cyber incident handling, threat intelligence and business continuity support;
Managed security services, such as managed detection and response (MDR), Security Operations Centre (SOC) services, and continuous monitoring;
Specialist cyber consultancy, including risk assessment, security architecture, cyber maturity analysis, security strategy, policy development and transformation activities.
These services must be delivered by suppliers admitted to the Crown Commercial Service Dynamic Purchasing System Cyber Security Services 3 (RM3764.3) and selected through the appropriate DPS filtering options. The volume, mix, and scope of services will depend on the Authority's ongoing operational and security requirements over the life of the contract.
Suppliers must ensure all services are delivered in accordance with relevant industry standards, applicable legislation, and any required cyber security certifications (including those required by the DPS filters).
II.2.5) Award criteria
Quality criterion: Quality
/ Weighting: 70
Price
/ Weighting:
30
II.2.11) Information about options
Options:
Yes
Description of options:
The contract will be awarded for an initial term of three (3) years, with the option to extend by up to two (2) additional periods of twelve (12) months each, up to a maximum total contract duration of five (5) years.
Extensions may be used where:
The Supplier's performance remains satisfactory, as demonstrated through contract management reviews, KPIs, and service delivery standards;
Continuing with the incumbent Supplier represents value for money, taking into account cost, quality, market conditions, and the Authority's ongoing operational requirements;
There is a continued business need for the services and extending the contract supports continuity and avoids unnecessary disruption to service delivery;
Any changes in scope remain within the limits permitted by the PCR2015 and do not materially alter the nature of the original procurement.
Where both optional extensions are exercised, they may be applied individually or consecutively, depending on the needs of the Authority at the relevant time.
II.2.13) Information about European Union funds
The procurement is related to a project and/or programme financed by European Union funds:
No