Tender for ICT Managed Security Service
ICT security monitoring service which delivers continued cyber resilience through threat detection.
United Kingdom-Hamilton: Information technology services
Section I: Contracting authority
I.1)Name and addresses
Council Headquarters, Almada Street
Contact person: Shona Gordon
Telephone: +44 1698454448
NUTS code: UKM95
Address of the buyer profile: http://www.publiccontractsscotland.gov.uk/search/Search_AuthProfile.aspx?ID=AA00410
I.4)Type of the contracting authority
Section II: Object
ICT Managed Security Service.
II.1.2)Main CPV code
II.1.3)Type of contract
Provision of an ICT security monitoring service which delivers continued cyber resilience through threat detection, analysis and response.
II.1.5)Estimated total value
II.1.6)Information about lots
II.2.3)Place of performance
II.2.4)Description of the procurement:
South Lanarkshire Council (‘the Council’) has a requirement to partner with an experienced managed security service provider to implement an ICT security monitoring service which delivers continued cyber resilience through threat detection, analysis and response. This will involve the replacement of the current service. This service plays a critical role in the council’s cyber security strategy and achieving its information governance objectives.
II.2.7)Duration of the contract, framework agreement or dynamic purchasing system
There is scope within the contract for an extension period of up to 3 years subject to satisfactory performance, financial standing and availability of funding.
II.2.10)Information about variants
II.2.11)Information about options
II.2.13)Information about European Union funds
Section III: Legal, economic, financial and technical information
III.1.1)Suitability to pursue the professional activity, including requirements relating to enrolment on professional or trade registers
ESPD Question 4A.1 Trade Registers
It is a requirement of this tender that if the bidder is UK based they must hold a valid registration with Companies House. Where the bidder is UK based but not registered at Companies House they must be able to verify to the Councils satisfaction that they are trading from the address provided in the tender and under the company name given.
If the bidder is based out-with the UK they must be enrolled in the relevant professional or trade register appropriate to their country as described in Schedule 5 of the Public Contracts (Scotland) Regulations 2015.
ESPD Question 4A.2 Authorisation/Membership.
Where it is required, within a bidder’s country of establishment they must confirm which authorisation or memberships of the relevant organisation(s) are required in order to perform this service.
Bidders must confirm if they hold the particular authorisation or memberships.
III.1.2)Economic and financial standing
ESPD Question 4B.4 Economic and Financial Standing.
The Council will use the following ratios to evaluate a bidders financial status:
Profitability — this is taken as profit after tax but before dividends and minority interests. If a company makes a profit then it is a pass for this ratio;
Liquidity — this is calculated as current assets less stock and work in progress, divided by current liabilities. If the answer is greater than or equal to one then it is a pass for this ratio
Gearing — this is calculated as the total external secured borrowing (short term and long term) divided by shareholder funds expressed as a percentage. If the answer is less than or equal to 100 % it is considered a pass for this ratio.
Bidders must provide the name and value of each of the 3 ratios within their response to
ESPD question 4B.4.
The Council requires bidders to pass 2 out of the 3 financial ratios above.
Where 2 out of the 3 ratios cannot be met, the Council may take the undernoted into consideration when assessing financial viability and the risk to the Council, providing that the Bidder can supply evidence to substantiate any of the mitigating criteria when requested to do so. The following list is not exhaustive and other criteria may be considered where proposed by a bidder as mitigating factors:
Would the bidder have passed the checks if prior year accounts had been used?
Were any of the poor appraisal outcomes ‘marginal’?
Does the bidder operate in a market which, traditionally, requires lower liquidity or higher debt finance?
Does the bidder have sufficient reserves to sustain losses for a number of years?
Does the bidder have a healthy cashflow?
Is the bidder profitable enough to finance the interest on its debt?
Is most of the bidder’s debt owed to group companies?
Is the bidder’s debt due to be repaid over a number of years, and affordable?
Have the bidder’s results been adversely affected by ‘one off costs’ and / or ‘one off accounting treatments’?
Do the bidder’s auditors (where applicable) consider it to be a ‘going concern’?
Do Keynote (where applicable) consider the bidder to be a ‘going concern’?
Will the bidder provide a Parent Company Guarantee?
Is the bidder the single supplier/source of the Goods/Works/Services in the marketplace?
The Council will request submission of and assess the bidders financial accounts, and may use Keynote or similar financial verification systems to validate the information provided.
The above methodology will also be adopted to assess satisfactory financial standing of the successful bidder (s) prior to the resulting Contract / Framework being considered for extension.
ESPD Question 4B.5 Insurance
The bidder must confirm that they have or will commit to obtain prior to the commencement of the contract, the following levels of Insurance Cover:
Employer’s Liability Insurance covering the death of or bodily injuries to employees of the bidder arising out of and in the course of their employment in connection with this contract to the level of 10 000 000 GBP in respect of each claim, without limit to the number of claims.
Public Liability Insurance covering the death of or bodily injury to a person (not an employee of the bidder) or loss of or damage to property resulting from an action or failure to take action by the bidder to the level of 5 000 000 GBP in respect of each claim, without limit to the number of claims.
Professional Indemnity Insurance covering the failure of the bidder to use the skill and care normally used by professionals providing the services described in this tender to the level of 5 000 000 GBP in respect of each claim, without limit to the number of claims.
III.1.3)Technical and professional ability
With reference to the nature and details of the services that are the subject matter of this tender, relevant examples are to be provided of the services undertaken by the bidder in the last 3 years.
Bidders should provide evidence they have at least three years experience in assisting clients with cyber security threat detection, analysis and response plus the management of security infrastructure devices. This includes evidence of providing these specific services to other UK Local Authorities or similarly sized organisations and demonstrating knowledge of the cyber security compliance schemes and policies such clients adhere to.
ESPD Question 4C.10 Technical and Professional Ability (Sub-Contracting)
Bidders will be required to confirm whether they intend to subcontract and, if so, for what proportion of the contract.
ESPD Question 4D.1 Quality Management Procedures
The Bidder must hold a UKAS (or equivalent) accredited independent third party certificate of compliance in accordance with ISO 27000 series (or equivalent)
a Security Management Systems policy authorised by their Chief Executive or equivalent that meets relevant security standards such as ISO 27000 series and/or the UK Government’s Cloud Security Principles (or equivalent) standards.
In addition the Bidder will require to comply will all other standards detailed in the Specification (Attachment 3 at section 1.3)
The project to implement the service will require to be managed to an international quality standard such as Prince 2 or equivalent.
III.2.3)Information about staff responsible for the performance of the contract
Section IV: Procedure
IV.1.1)Type of procedure
IV.1.8)Information about the Government Procurement Agreement (GPA)
IV.2.1)Previous publication concerning this procedure
IV.2.2)Time limit for receipt of tenders or requests to participate
IV.2.4)Languages in which tenders or requests to participate may be submitted:
IV.2.6)Minimum time frame during which the tenderer must maintain the tender
IV.2.7)Conditions for opening of tenders
Section VI: Complementary information
VI.1)Information about recurrence
VI.2)Information about electronic workflows
Economic operators may be excluded from this competition if they are in any of the situations referred to in regulation 58 of the Public Contracts (Scotland) Regulations 2015.
ESPD Questions 3A — 3C have been identified as mandatory exclusion grounds and ESPD Questions 3D have been identified as discretionary exclusion grounds. All the exclusion grounds will be assessed on a PASS/FAIL basis. For the mandatory exclusion grounds a bid will be excluded where the bidder fails to provide either a positive response or to provide details to the satisfaction of the Council of the self cleansing measures undertaken. .For the discretionary exclusion grounds a bid may be excluded where the bidder fails to provide either a positive response or if the Council is not satisfied as to the self cleansing measures undertaken.
The service provision must be provided 24 x 7 365 days of the year
The successful bidder will require to sign up to the Code of Connection Form for Third Party Remote Access to South Lanarkshire Council (a copy is provided in the Tender Attachment area for information)
The Council reserves the right to modify the Contract to be entered into in respect of these Services. The Contract contains clauses setting out the procedure for modification of its terms. The scope and nature of the possible modifications is as follows:-
— the inclusion of consultancy services within the scope of the Services being procured;
— the introduction of more cloud-based systems which will require to be monitored — reference section 1.2 of the specification
— the potential move of our entire data centre from Hamilton to a third-party hosting facility — reference section 2.1.8 of the specification.
— any other minor operational changes
Declarations and Certificates
In an open tendering procedure prior to any award being made the successful bidder will provide the undernoted certificates, declarations and/or completed questionnaires to evidence their compliance with the relevant questions within the Qualification Envelope.
All certificates, declarations and questionnaires can be found within the Attachment area of PCS-T.
ESPD Question 2D.1 Prompt Payment Certificate
Declaration Section *Form of Tender
ESPD Question 3D.11 Non-Collusion Certificate
ESPD Question 4B.5.1 Insurance Certificates
ESPD Questions 3A.1 to 3A.8 Serious and Organised Crime Declaration
ESPD Question 3A.6 Modern Slavery Act 2015 Declaration
The buyer is using PCS-Tender to conduct this ITT exercise. The Project code is 8789. For more information see: http://www.publiccontractsscotland.gov.uk/info/InfoCentre.aspx?ID=2343
A sub-contract clause has been included in this contract. For more information see: http://www.publiccontractsscotland.gov.uk/info/InfoCentre.aspx?ID=2363
Community benefits are included in this requirement. For more information see: http://www.publiccontractsscotland.gov.uk/info/InfoCentre.aspx?ID=2361
A summary of the expected community benefits has been provided as follows:
The Council is committed to securing Community Benefits through its contracts. Bidders will be asked to detail any community Benefits
they wish to offer the Council as part of their bid.
Council Headquarters, Almada Street
Telephone: +44 1698454448Internet address:http://www.southlanarkshire.gov.uk
VI.5)Date of dispatch of this notice: