Cyber Security Enhancements

Tender description

Summary of the work The University of Cambridge is undertaking a Cyber Security review and has set up a dedicated programme of work to address specific areas of concern. We require specialist security and network resources to assist with 5 areas of work. Expected Contract Length 3-6 months Latest start date 04/07/2016 Why the Work is Being Done The University Information Service (UIS) provides network infrastructure for the organisation. To date, there has been no central requirement for a co-ordinated approach to cyber security and therefore work is required to understand the technical arrangements and capabilities on a University-wide basis. Three activities came together to form an overall programme of work, including a Cyber Assessment by Deloitte (the University’s Auditors), work determined by the Information Management Division and governance arrangements including a Technical Working Group set up to provide internal assurance and recommendations. Problem to Be Solved A number of priority actions uncovered as part of the security audit demand substantial additional resource from the Networks Team (part of the Service Operations Division) that it cannot immediately fulfil. Consequently additional resources are required to address the University’s highest priority cyber and information security enhancements as soon as practicable. 5 areas of work have been highlighted as top priority for the programme, network reconfiguration, implementation of an IDS, creation of a managed firewall service, expansion of our emergency response team and other possible work around Phishing attacks. Who Are the Users o As a Security Architect I want to get a report of the University’s servers and configuration so I can understand our security risk o As a Security Architect I need assistance with designing/implementing zoning o As a member of the Computer Laboratory I want an open source IDS implementing so I can analyse the data and provide recommendations for a commercial IDS o As a School/Department I want the option to pay for a Managed Firewall Service o As the Manager of the Emergency Response Team I want additional staff or tools available should the University be attacked Existing Team The supplier will be working closely with the Network Team who are part of the Service Operation Division. The key members of this team are the Head of Networks, Network Systems staff and the manager of the Emergency Response Team. The supplier will also need to work closely with the Security Architect. The overall Cyber Security Programme is also being managed by a Programme Manager and a Senior Project Manager who will require regular progress reports and manage the overall contract with the supplier. Current Phase Discovery Skills & Experience • Have extensive experience of relevant assignments that have provided demonstrable value to clients • Have a good level of knowledge and understanding of the challenges faced by an IT organisation • Work successfully undertaken in the area of Information and Cyber Security, either in this sector or one that faces similar challenges. • Have extensive knowledge of networking technologies and operation. • Have experience in data centre networking • Have knowledge of IT security issues and vulnerabilities. • Have experience in implementing an open source IDS (ideally Snort) • Have extensive experience of implementing and managing enterprise firewalls. • Have experience of designing and implementing networks, preferably with Cisco IOS experience. • Have extensive knowledge of security infrastructure, solutions and operation. • Have experience in resolving security or infrastructure IT incidents. Nice to Haves • Start work as soon as possible • Experience of switching and routing with VLANs in an enterprise environment • Experience of configuring BGP, MPLS and interior routing protocols • In-depth experience of Linux System Administration • Experience of working in a University environment is beneficial. • Ability in writing scripts or code to perform analysis. • Knowledge of security issues applied to at least two of the following: Microsoft Windows, Macintosh OS X, Linux operating systems, network infrastructure, email services or desktop support • Knowledge of essential networking concepts, such as TCP\IP (IPv4 and IPv6), subnets and ports, as applied to security • Extensive experience with one, or more, of the major firewall platforms; such as Cisco, Checkpoint, Palo Alto or Fortinet. Work Location University Information Services, Roger Needham Building, JJ Thompson Avenue, Cambridge. Working Arrangments We would require resources to work alongside UIS staff Monday to Friday during usual office hours. The supplier will provide contractors to work from our office in Cambridge for the full duration of the work. No. of Suppliers to Evaluate 6 Proposal Criteria • The proposed technical solution • The proposed approach and methodology • How the approach or solution meets the University’s goal • How the approach or solution meets user needs • Estimated timeframes for the work • How you’ve identified risks and dependencies and offered approaches to manage them • Team structure • Value for money of the proposal Cultural Fit Criteria • Work as a team with our organisation and other suppliers • Transparent and collaborative when making decisions • Have a no-blame culture and encourage people to learn from their mistakes • Share experience, knowledge and results Payment Approach Fixed price Evaluation Weighting Technical competence 60% Cultural fit 10% Price 30% Questions from Suppliers 1. In order to provide a written response to the evaluation criteria outlined, please could we confirm the preferred format and how should we submit this response? Should we use the framework response templates provided and return via email? If so, please also confirm the deadline date and time. Many thanks. Hi and thanks for your question. Our understanding is that for this initial stage, suppliers just need to confirm a number of details before the 30th May. This includes that they can meet the essential skills and experience and when they would be available to start and prices etc. I'm unsure of the process online as we can't see that side. Once we have these applications we will short list and then send out more details and a written proposal template to the successful suppliers to complete within 2 weeks. Thanks 2. Can you please confirm where the university are tendering this opportunity? We are aware the university has their own intend portal, however this particular opportunity is not appearing on it. Can you clarify why this has happened, and what our next steps need to be to request further documents / information, and how to eventually submit a bid. regards, The University are only using the Digital Marketplace for this procurement and won't be putting it on our portal. This is due to the urgency with which we need these suppliers to start. The Government frameworks allows us to reduce the time it takes to find a potential supplier. The initial application for suppliers I believe is straight forward and we will then send out further details and ask for a written proposal from the short listed applications after the closing date of the 30th May. Thanks 3. Dear University Team, In one of the clarification questions answered by your team, you mentioned that after 30th May shortlisted suppliers will be given 2 weeks to send a written proposal to the University. May I ask that if we will be given a chance after 30th May to seek clarification/further information regarding the University current set up/landscape so that we can use/include that information in the written proposal? or do we have to ask all the queries now? I see now that we have limited space to ask questions (100 words limit) Thanks Hi, thanks for your question. Yes, if you are shortlisted then you will have plenty of opportunities to ask for further clarification and information before the deadline for the written proposals. We also hope to invite suppliers in for a meeting/interview during the 2 weeks to ask questions and have an opportunity for us to meet face to face. Thanks 4. 1. Are bidders able to bid for individual components of the work or must they bid for the whole package? 2. What is the level of support required, is it to provide advice or is it to provide full support including design and implementation? 3. Please could we request additional detail regarding your requirements and current maturity state for the expansion of your emergency response team. Many thanks Hi there, 1. Yes suppliers will be eligible to apply for individual lots. 2. We will need technical resource to implement the work on the ground. 3. Further details and clarification regarding our response team will be sent out in the next stage as there isn't the capacity to provide sufficient details in this Q&A section.Thanks