Cyber Security Enhancements

Tender description

Why the Work is Being Done The University Information Service (UIS) provides network infrastructure for the organisation. To date, there has been no central requirement for a co-ordinated approach to cyber security and therefore work is required to understand the technical arrangements and capabilities on a University-wide basis. Three activities came together to form an overall programme of work, including a Cyber Assessment by Deloitte (the University’s Auditors), work determined by the Information Management Division and governance arrangements including a Technical Working Group set up to provide internal assurance and recommendations. Problem to Be Solved A number of priority actions uncovered as part of the security audit demand substantial additional resource from the Networks Team (part of the Service Operations Division) that it cannot immediately fulfil. Consequently additional resources are required to address the University’s highest priority cyber and information security enhancements as soon as practicable. 5 areas of work have been highlighted as top priority for the programme, network reconfiguration, implementation of an IDS, creation of a managed firewall service, expansion of our emergency response team and other possible work around Phishing attacks. Who Are the Users o As a Security Architect I want to get a report of the University’s servers and configuration so I can understand our security risk o As a Security Architect I need assistance with designing/implementing zoning o As a member of the Computer Laboratory I want an open source IDS implementing so I can analyse the data and provide recommendations for a commercial IDS o As a School/Department I want the option to pay for a Managed Firewall Service o As the Manager of the Emergency Response Team I want additional staff or tools available should the University be attacked Early Market Engagement Work Already Done Existing Team The supplier will be working closely with the Network Team who are part of the Service Operation Division. The key members of this team are the Head of Networks, Network Systems staff and the manager of the Emergency Response Team. The supplier will also need to work closely with the Security Architect. The overall Cyber Security Programme is also being managed by a Programme Manager and a Senior Project Manager who will require regular progress reports and manage the overall contract with the supplier. Current Phase Discovery Work Location University Information Services, Roger Needham Building, JJ Thompson Avenue, Cambridge. Working Arrangments We would require resources to work alongside UIS staff Monday to Friday during usual office hours. The supplier will provide contractors to work from our office in Cambridge for the full duration of the work. Security Clearance Additional T&Cs Skills & Experience Have extensive experience of relevant assignments that have provided demonstrable value to clients Have a good level of knowledge and understanding of the challenges faced by an IT organisation Work successfully undertaken in the area of Information and Cyber Security, either in this sector or one that faces similar challenges. Have extensive knowledge of networking technologies and operation. Have experience in data centre networking Have knowledge of IT security issues and vulnerabilities. Have experience in implementing an open source IDS (ideally Snort) Have extensive experience of implementing and managing enterprise firewalls. Have experience of designing and implementing networks, preferably with Cisco IOS experience. Have extensive knowledge of security infrastructure, solutions and operation. Have experience in resolving security or infrastructure IT incidents. Nice to Haves Start work as soon as possible Experience of switching and routing with VLANs in an enterprise environment Experience of configuring BGP, MPLS and interior routing protocols In-depth experience of Linux System Administration Experience of working in a University environment is beneficial. Ability in writing scripts or code to perform analysis. Knowledge of security issues applied to at least two of the following: Microsoft Windows, Macintosh OS X, Linux operating systems, network infrastructure, email services or desktop support Knowledge of essential networking concepts, such as TCP\IP (IPv4 and IPv6), subnets and ports, as applied to security Extensive experience with one, or more, of the major firewall platforms; such as Cisco, Checkpoint, Palo Alto or Fortinet. No. of Suppliers to Evaluate 6 Proposal Criteria The proposed technical solution The proposed approach and methodology How the approach or solution meets the University’s goal How the approach or solution meets user needs Estimated timeframes for the work How you’ve identified risks and dependencies and offered approaches to manage them Team structure Value for money of the proposal Cultural Fit Criteria Work as a team with our organisation and other suppliers Transparent and collaborative when making decisions Have a no-blame culture and encourage people to learn from their mistakes Share experience, knowledge and results Payment Approach Fixed price Assessment Method Written proposal Reference Presentation Evaluation Weighting Technical competence 60% Cultural fit 10% Price 30% Questions from Suppliers Budget range