Investigation and security services

Tender description

Leicester City Council is seeking a partner to provide a holistic IT Security framework based upon SIEM and SOC services. The primary goal of the service is to ensure the confidentiality, integrity and availability of Council services. The principle objectives of the service will: 1) Prevent and identify attempts at data ex-filtration from selected critical systems delivered via in-house or cloud-based infrastructure; 2) Prevent and identify attempts to maliciously corrupt or encrypt data from selected critical systems delivered via in-house or cloud-based infrastructure; 3) Prevent and detect attempts to disrupt, disable, de-stabilise or reduce availability of our systems and services; 4) Ensure LCC compliance with all relevant frameworks including for example Payment Card Industry Data Security Standard (PCI-DSS), Code of Connection (CoCo) and Public Services Network (PSN). The Council is approaching the market for a holistic IT Security framework. The Council is initially seeking an IT Security partner with whom we can assess, detect, protect and respond against a variety of prioritised cyber-security threats. We also seek to position ourselves such that we are able to routinely demonstrate compliance with all relevant frameworks. The initial scope of this contract is to identify a supplier who can provide both SIEM and a Security Operations Centre as a service. We require the partner to initially lead the design, build and commissioning of the solution. Thereafter we require a continuous monitoring, detection, advisory and response service with respect to Cyber Security. The scope of this contract will be to provide the following services initially to critical assets and endpoints. These are identified by the Authority and available upon request: a)Threat and Risk Identification and Assessment — (Security Information Management); b) Proactive and Reactive threat Detection (Security Event Management); c) Protection against risks, threats and malicious activity; d) Response to identified IT security breaches.