R6140 Cyber Security Managed SIEM

Location

London

Description

This is a services Contract for a Managed Cyber Security Operations Centre to cover some of the additional cybersecurity protection required to further harden the Tower Hamlets estate against cyber-attacks.

Total Quantity or Scope

Requirements of the service: • Initial health assessment and configuration of the Council’s in-house Security Event and Incident Management (SIEM) solution (Microsoft Sentinel). • Secure log collection from both on-premises and cloud systems, with logs transmitted to an externally hosted intelligence platform for advanced threat analysis. • Adaptable detection policies, leveraging automated intelligence, supplier expertise, and council-provided threat intelligence. • Support for log ingestion from a wide range of infrastructure components, including Windows and Linux servers, firewalls, routers, Azure Active Directory, Microsoft Defender, and Office 365. • No disruption to business operations during implementation. • 24x7x365 managed SOC service with incident response capabilities and access to subject matter experts. • Endpoint detection and response (EDR / XDR) • Incident detection, analysis, response and escalation. • Threat intelligence and threat hunting. • Monthly executive risk reporting and KPIs. • Ongoing threat detection and investigation support, drawing on previous incident data. • Secure portal access for council staff to incident and management information, with all operational data and SOC personnel based in the UK and cleared to BPSS as a minimum. • Demonstrated security accreditations. • Full onboarding, deployment, and initial tuning of the solution, with clear cost breakdowns for setup.

Award Detail

Award Criteria

CPV Codes

• 72000000 - IT services: consulting, software development, Internet and support

Indicators

• Award on basis of price.

Legal Justification

The contract has been awarded via a direct award on the Crown Commercial Services G-Cloud 14 Framework, specifically Lot 3: Cloud Support. The G-Cloud 14 Framework is an online catalogue to buy cloud-based computing services, including hosting, software, cloud support, and many off-the-shelf, pay-as-you-go cloud solution for all public sector organisations and charities. G-Cloud 14 has defined a 6-step buying process which should be followed when using the agreement. These steps must be followed to ensure that a compliant process is adhered to. The online catalogue ensures that all service information is available up front to enable you to evaluate services based upon best fit and/or price. This functionality aids a direct award following the buying process