Protective Monitoring Tender for Houses of Parliament

Protective Monitoring Tender for Houses of Parliament

Lot 1: Security Intelligence and Operations: SIEM/SOAR solution, log indexing and collection, managed security service, tuning, custom rule creation, full packet capture, endpoint detection.

United Kingdom-London: Computer-related services

2020/S 192-465174

Contract notice

Services

Legal Basis:

Directive 2014/24/EU

Section I: Contracting authority

I.1)Name and addresses

Official name: The Corporate Officer of The House of Lords and The Corporate Officer of The House of Common
Postal address: SW1A 0PW
Town: London
NUTS code: UKI LONDON
Country: United Kingdom
Contact person: Parliamentary Procurement and Commercial Service
E-mail: PPCS@parliament.uk
Internet address(es):Main address: https://in-tendhost.co.uk/parliamentuk/aspx/Home

I.2)Information about joint procurement

The contract is awarded by a central purchasing body

I.3)Communication

Access to the procurement documents is restricted. Further information can be obtained at: https://in-tendhost.co.uk/parliamentuk/aspx/Home
Additional information can be obtained from the abovementioned address
Tenders or requests to participate must be submitted electronically via: https://in-tendhost.co.uk/parliamentuk/aspx/Home
Tenders or requests to participate must be submitted to the abovementioned address

I.4)Type of the contracting authority

Other type: Parliament UK

I.5)Main activity

Other activity: Computer and related services

Section II: Object

II.1)Scope of the procurement

II.1.1)Title:

Protective Monitoring

 

Reference number: PI1301330

II.1.2)Main CPV code

72500000 Computer-related services

II.1.3)Type of contract

Services

II.1.4)Short description:

 

PI1301330-L1:

Lot 1: Security Intelligence and Operations:

SIEM/SOAR solution, log indexing and collection, managed security service, tuning, custom rule creation, full packet capture, endpoint detection and response service, intrusion detection system service, secure backup service, storage racks or cloud storage, file integrity management, high availability, secure encryption, threat platform (recording IOCs, looking for threat

actors TTPs).

PI1301330-L2:

Lot 2: Capability and Response:

Analyst service, skills analysis, training and development against identified skills gaps, cyber incident response (CIR) expertise available on stand-by.

 

II.1.5)Estimated total value

Value excluding VAT: 6 250 000.00 GBP

II.1.6)Information about lots

This contract is divided into lots: yes
Tenders may be submitted for all lots
II.2)Description

II.2.1)Title:

PI1301330-L1: Lot 1 – Security Intelligence and Operations

 

Lot No: 1

II.2.2)Additional CPV code(s)

72500000 Computer-related services
48900000 Miscellaneous software package and computer systems
72100000 Hardware consultancy services
72800000 Computer audit and testing services
48600000 Database and operating software package
72200000 Software programming and consultancy services
72600000 Computer support and consultancy services
72300000 Data services

II.2.3)Place of performance

NUTS code: UKI LONDON
Main site or place of performance:

 

 

II.2.4)Description of the procurement:

SIEM/SOAR solution, log indexing and collection, managed security service, tuning, custom rule creation, full packet capture, endpoint detection and response service, intrusion detection system service, secure backup service, storage racks or cloud storage, file integrity management, high availability, secure encryption, threat platform (recording IOCs, looking for threat actors TTPs).

 

II.2.5)Award criteria

Price is not the only award criterion and all criteria are stated only in the procurement documents

II.2.6)Estimated value

Value excluding VAT: 4 250 000.00 GBP

II.2.7)Duration of the contract, framework agreement or dynamic purchasing system

Duration in months: 36
This contract is subject to renewal: no

II.2.9)Information about the limits on the number of candidates to be invited

Envisaged minimum number: 5
Maximum number: 7
Objective criteria for choosing the limited number of candidates:

 

The top five (5) scoring, compliant suppliers for each lot shall be invited to tender. In the event that there is one or more supplier receiving the same compliant highest score for fifth place, they will all be invited to tender. Objective criteria for choosing the limited number of candidates:

1) CESG Cyber Incident Response (CIR) Scheme accredited, or CREST accredited or equivalent;

2) organisations must be accredited to ISO27001 or equivalent to cover the full scope of your protective monitoring environment for the lot or lots you wish to bid for;

3) other exclusion grounds as per the selection questionnaire form, accessible on InTend: https://in-tendhost.co.uk/parliamentuk/aspx/Home

 

II.2.10)Information about variants

Variants will be accepted: no

II.2.11)Information about options

Options: yes
Description of options:

To extend the contract for two (2) periods of one (1) year each (i.e. 3 + 1 + 1).

 

II.2.12)Information about electronic catalogues

II.2.13)Information about European Union funds

The procurement is related to a project and/or programme financed by European Union funds: no

II.2.14)Additional information

 

Suppliers must meet the minimum mandatory requirements within the selection questionnaire and return/upload the Non-Disclosure Agreement (NDA).

Maximum values: Lot 1: GBP 4.25 million, Lot 2: GBP 2 million.

Duration: 3 + 1 + 1 years.

Suppliers that are interested in applying for this opportunity must register to InTend via the link below: https://in-tendhost.co.uk/parliamentuk/aspx/Home

 

II.2)Description

II.2.1)Title:

PI1301330-L2: Lot 2 – Capability and Response

 

Lot No: 2

II.2.2)Additional CPV code(s)

72500000 Computer-related services
48900000 Miscellaneous software package and computer systems
72100000 Hardware consultancy services
72800000 Computer audit and testing services
48600000 Database and operating software package
72200000 Software programming and consultancy services
72600000 Computer support and consultancy services
72300000 Data services

II.2.3)Place of performance

NUTS code: UKI LONDON
Main site or place of performance:

 

 

II.2.4)Description of the procurement:

Analyst service, skills analysis, training and development against identified skills gaps, cyber incident response (CIR) expertise available on stand-by.

 

II.2.5)Award criteria

Price is not the only award criterion and all criteria are stated only in the procurement documents

II.2.6)Estimated value

Value excluding VAT: 2 000 000.00 GBP

II.2.7)Duration of the contract, framework agreement or dynamic purchasing system

Duration in months: 36
This contract is subject to renewal: no

II.2.9)Information about the limits on the number of candidates to be invited

Envisaged minimum number: 5
Maximum number: 7
Objective criteria for choosing the limited number of candidates:

 

The top five (5) scoring, compliant suppliers for each lot shall be invited to tender. In the event that there is one or more supplier receiving the same compliant highest score for fifth place, they will all be invited to tender. Objective criteria for choosing the limited number of candidates:

1) CESG Cyber Incident Response (CIR) Scheme accredited or CREST accredited or equivalent;

2) organisations must be accredited to ISO 27001 or equivalent to cover the full scope of your protective monitoring environment for the lot or lots you wish to bid for;

3) other exclusion grounds as per the selection questionnaire form, accessible on InTend: https://in-tendhost.co.uk/parliamentuk/aspx/Home

 

II.2.10)Information about variants

Variants will be accepted: no

II.2.11)Information about options

Options: yes
Description of options:

To extend the contract for two (2) periods of one (1) year each (i.e. 3 + 1 + 1).

 

II.2.12)Information about electronic catalogues

II.2.13)Information about European Union funds

The procurement is related to a project and/or programme financed by European Union funds: no

II.2.14)Additional information

 

Suppliers must meet the minimum mandatory requirements within the selection questionnaire and return/upload the Non-Disclosure Agreement (NDA).

Maximum values: Lot 1: GBP 4.25 million, Lot 2: GBP 2 million.

Duration: 3 + 1 + 1 years.

Suppliers that are interested in applying for this opportunity must register to InTend via the link below: https://in-tendhost.co.uk/parliamentuk/aspx/Home

 

Section III: Legal, economic, financial and technical information

III.1)Conditions for participation

III.1.1)Suitability to pursue the professional activity, including requirements relating to enrolment on professional or trade registers

List and brief description of conditions:

Information and formalities necessary for evaluating if requirements are met: suppliers must complete and return a selection questionnaire (SQ) and sign and return (via upload) the attached Non-Disclosure Agreement (NDA) within InTend, by the deadline stated in this advert. The SQ and NDA are both accessible via registering to In-Tend: https://in-tendhost.co.uk/parliamentuk/aspx/Home

 

III.1.2)Economic and financial standing

Selection criteria as stated in the procurement documents

III.1.3)Technical and professional ability

Selection criteria as stated in the procurement documents
III.1.5)Information about reserved contracts
III.2)Conditions related to the contract
III.2.1)Information about a particular profession
III.2.2)Contract performance conditions:
III.2.3)Information about staff responsible for the performance of the contract

Section IV: Procedure

IV.1)Description

IV.1.1)Type of procedure

Restricted procedure
IV.1.3)Information about a framework agreement or a dynamic purchasing system
IV.1.4)Information about reduction of the number of solutions or tenders during negotiation or dialogue
IV.1.6)Information about electronic auction

IV.1.8)Information about the Government Procurement Agreement (GPA)

The procurement is covered by the Government Procurement Agreement: no
IV.2)Administrative information
IV.2.1)Previous publication concerning this procedure

IV.2.2)Time limit for receipt of tenders or requests to participate

Date: 02/11/2020
Local time: 12:00

IV.2.3)Estimated date of dispatch of invitations to tender or to participate to selected candidates

Date: 18/11/2020

IV.2.4)Languages in which tenders or requests to participate may be submitted:

English

IV.2.6)Minimum time frame during which the tenderer must maintain the tender

Duration in months: 3 (from the date stated for receipt of tender)
IV.2.7)Conditions for opening of tenders

Section VI: Complementary information

VI.1)Information about recurrence

This is a recurrent procurement: no

VI.2)Information about electronic workflows

Electronic ordering will be used
Electronic invoicing will be accepted
Electronic payment will be used

VI.3)Additional information:

 

The restricted procedure will comprise of a two-stage process:

• Stage 1: Suitability assessment

— The authority will issue a selection questionnaire (SQ), objective criteria for selection and other reference documents on 25 September 2020 to assess the suitability of the applicants that have expressed interest by registering PPCS InTend eProcurement site. A Non-disclosure Agreement will be made available to applicants for completion at this stage. These documents must be attained via InTend, which requires registration: https://in-tendhost.co.uk/parliamentuk/aspx/Home

— The completed SQ together with the Non-disclosure Agreement Form must be returned by 26 October 2020 at 12.00. SQ clarification questions must be submitted before 8 October at 12.00. The assessment of the SQ is estimated to commence on 27 October 2020 and be completed by 6 November 2020.

— The authority reserves the right to reject any SQ response that:

• does not complete any of the requested fields; or

• fails to provide any requested evidence by the requested timescale; or

• scores a ‘0’ or ‘1’ in any of the criteria.

— The authority reserves the right to seek clarification questions against responses as necessary.

— The authority will invite the five (5) top-scoring, compliant SQ bidders to invitation to tender (ITT) stage. In the event that there is one or more SQ Bidder receiving the same compliant highest score for fifth place, they will all be invited to tender.

— The authority reserves the right to run a credit check on any bidder. This will not affect any bidders’ SQ assessment or tender evaluation score.

— Following evaluation of the SQ and completion of the Non-Disclosure Agreement (NDA), those selected to tender will be issued with the invitation to tender (ITT) document. Full sets of requirements will only be issued to bidders invited to tender, and who have completed and returned the NDA issued with the SQ.

• Stage 2: Invitation to tender

— The indicative date for tender documents to be issued is 10 November 2020. Those suppliers that pass the SQ, meet the objective criteria submit a signed Non-disclosure Agreement will receive the tender documentation.

— An event will be held approximately two weeks after the ITT issued date for all bidders invited to tender, in order to facilitate discussion and clarification questions that bidders may have. Responses to questions will be circulated to all invited bidders within 7 days of the event. The event will not form part of the evaluation process.

— The evaluation process will be in accordance with the evaluation criteria and scoring definitions within the specification. This will be conducted by independent evaluations followed by a moderation to form a consensus score for each criteria for each supplier.

— The indicative closing date for the tender submission is 22 December 2020.

Note: the successful tenderer once appointed, must:

• meet specified functional and non-functional requirements as evidenced in the tender returns;

• execution of business continuity and information security management plan following contract award;

• comply with the parliamentary protective marking scheme regarding the marking of information;

• provide site personnel to obtain relevant security clearances depending on role within the contract, but including CTC, SC and DV clearances.

 

VI.4)Procedures for review

VI.4.1)Review body

Official name: High Court of Justice
Postal address: The Strand
Town: London
Country: United Kingdom
VI.4.2)Body responsible for mediation procedures

VI.4.3)Review procedure

Precise information on deadline(s) for review procedures:
VI.4.4)Service from which information about the review procedure may be obtained

VI.5)Date of dispatch of this notice:

28/09/2020