Security Operations Centre Contract
Manchester Airport Group PLC wishes to commence a procurement process to award a contract for the provision of a Security Operations Centre (SOC) and Security Information and Event Management (SIEM) tool across its Group portfolio.
United Kingdom-Manchester: Security software package
Contract notice – utilities
Section I: Contracting entity
I.1)Name, addresses and contact point(s)
The Manchester Airport Group Plc
4th Floor Olympic House, Manchester Airport
For the attention of: Les Mather
M90 1QX Manchester
General address of the contracting entity: http://www.magworld.co.uk/magweb.nsf
Further information can be obtained from: The above mentioned contact point(s)
Specifications and additional documents (including documents for a dynamic purchasing system) can be obtained from: The above mentioned contact point(s)
Tenders or requests to participate must be sent to: The above mentioned contact point(s)
I.3)Contract award on behalf of other contracting entities
Section II: Object of the contract
II.1.1)Title attributed to the contract by the contracting entity:
II.1.2)Type of contract and location of works, place of delivery or of performance
Service category No 7: Computer and related services
Main site or location of works, place of delivery or of performance: Manchester Airport, Stansted Airport, East Midlands Airport, Bournemouth Airport and MAG US Operations.
NUTS code UK
II.1.3)Information about a public contract, a framework agreement or a dynamic purchasing system (DPS)
II.1.4)Information on framework agreement
II.1.5)Short description of the contract or purchase(s):
Security Information Event Management (SIEM) Tool
The SIEM tool is required to be a commercial off-the-shelf (COTS) packaged software product that is readily available to the marketplace. It is proposed that MAG will own the license for the SIEM tool directly.
The SIEM tool will be expected to deliver the following capabilities:
— Advanced analytics.
— Advanced threat defence.
— Business context and security intel.
— Data and application monitoring.
— Deployment and support simplicity.
— Incident response and management.
— Real time monitoring.
— User monitoring.
Outsourced Security Operations Centre (SOC)
To support the SIEM tool there is also a requirement for an outsourced security operations centre (SOC). The scope of the SOC service offering will include the initial implementation of the tool as well as the ongoing service function. The high level scope of implementation will cover the following areas:
— Deployment of SIEM tool including the detailed design and implementation of the tool,
— Installation of any on-premise IT infrastructure required to support the service,
— Integration of first phase of MAG legacy system reporting and alerts into SIEM tool (including testing with any required third parties),
— Detailed use case development, definition and implementation,
— SIEM tool configuration and tuning,
Ongoing SOC Service
Once the SIEM tool has been implemented the successful supplier will be required to deliver ongoing SOC services in the following areas:
— SOC to monitor the SIEM tool 24/7, 365 days a year,
— Application support,
— Ongoing integration of additional MAG legacy system reporting and alerts into SIEM tool,
— Real-time analysis of security alerts generated by network and applications,
— Established incident response processes,
— Risk matrix development and upkeep of service management plan,
— Development of Reporting and Compliance outputs,
— Vulnerability management reporting,
— Defined standard reporting, interaction with MAG internal teams and team support,
— MAG internal team access to the raw log data of SIEM tool and have the ability to generate MAG only view reports from the log data.
The contract will be procured via a Negotiated procurement process.
II.1.6)Common procurement vocabulary (CPV)
48730000, 72261000, 72263000
II.1.7)Information about Government Procurement Agreement (GPA)
II.1.8)Information about lots
II.1.9)Information about variants
II.2.1)Total quantity or scope:
Estimated value excluding VAT
Range: between 1 200 000 and 3 000 000 GBP
II.2.2)Information about options
Description of these options: The initial contract term will be 3 years, with options to extend by up to a maximum of 4 years, in any number of separate extensions.
II.2.3)Information about renewals
II.3)Duration of the contract or time limit for completion
Section III: Legal, economic, financial and technical information
III.1.1)Deposits and guarantees required:
III.1.2)Main financing conditions and payment arrangements and/or reference to the relevant provisions governing them:
III.1.3)Legal form to be taken by the group of economic operators to whom the contract is to be awarded:
— on the basis of joint and several liability;
— with a particular single Member of the Bidder as the prime Supplier (with the other Members providing collateral warranties and/or guarantees);
— as an incorporated or unincorporated special purpose vehicle (with guarantees from the other Members of the Bidder), and in any event;
— in a manner satisfactory to MAG.
III.1.4)Other particular conditions:
III.2.1)Personal situation of economic operators, including requirements relating to enrolment on professional or trade registers
III.2.2)Economic and financial ability
III.3.1)Information about a particular profession
III.3.2)Staff responsible for the execution of the service
Section IV: Procedure
IV.1.1)Type of procedure
Some candidates have already been selected (if appropriate under certain types of negotiated procedures): no
IV.2.2)Information about electronic auction
IV.3.1)File reference number attributed by the contracting entity:
IV.3.2)Previous publication(s) concerning the same contract
Periodic indicative notice
Notice number in the OJEU: 2016/S 116-207372 of 17.6.2016
IV.3.3)Conditions for obtaining specifications and additional documents(except for a DPS)
Payable documents: no
IV.3.4)Time limit for receipt of tenders or requests to participate
Section VI: Complementary information
VI.1)Information about recurrence
VI.2)Information about European Union funds
All dates, values and time periods specified in this notice are only provisional and MAG reserves the right to change these.
MAG shall not be responsible for any costs, charges or expenses incurred by candidates or tenderers and accepts no liability for any costs, charges or expenses, irrespective of the outcome of the competition, or if the competition is cancelled or postponed.
Applicants can obtain the Pre-Qualification Documents by emailing the contact point at I.1) to register interest. When requesting the Pre-Qualification Documents, please specify a contact name, phone number, email address and full company name. MAG Procurement and Contracts will respond and issue login details for our e-tendering system, Wax Digital, which will allow interested parties to download the Pre-Qualification Questionnaire (PQQ). Applicants are responsible for monitoring the e-tendering system.
Section II.1.6) — The list of CPV codes is not exhaustive.
Following receipt and evaluation of Applicant pre-qualification submissions, compliant Applicants will be ranked in terms of score and a maximum of five (5) of the top ranking compliant Applicants will be shortlisted for participation in the Invitation to Negotiate (ITN) stage. The Company reserves the right to shortlist fewer than five (5) Applicants to the ITN stage.These shortlisted Applicants will be issued with the ITN by MAG.
Please note, MAG reserves the right to further down select bidders during the negotiation stage (the basis for which will be discussed in more detail in the Invitation to Negotiate which will be issued to shortlisted Bidders).
VI.5)Date of dispatch of this notice: