Computer-related services

Tender description

The FCA is looking for a supplier which is able to provide a mature, intelligence-led and human-driven approach Security Operations Centre (SOC) services which are augmented by technology. The supplier must provide a platform for the aggregation, enrichment and correlation of data and use it to provide an analytical-driven detective monitoring capability to the estate. This service shall also include investigative capability to analyse any alerts found, and to escalate incidents as well as assist in follow up incident investigations. The FCA is seeking to award a contract to a single supplier to provide SOC Services. This can be broken into the following high level main activities: — Monitoring, — Detection, — Investigation, — Response, — Associated hardware/software and tools, — Security/Cyber Consultancy. The FCA is looking for a supplier which is able to provide a mature, intelligence-led and human-driven approach Security Operations Centre (SOC) services which are augmented by technology. The supplier must provide a platform for the aggregation, enrichment and correlation of data and use it to provide an analytical-driven detective monitoring capability to the estate. This service shall also include investigative capability to analyse any alerts found, and to escalate incidents as well as assist in follow up incident investigations. The FCA has several third-party providers who manage areas of its infrastructure and platforms. The FCA employs different technologies which can assist with security incident detection and prevention as well as knowledgeable internal teams. Incidents once discovered are investigated on an ad-hoc basis, however as the FCA currently has limited correlation capability and centralized aggregation data repository, there is no automated incident discovery process. The FCA's IT organization follows the ITIL towers model, which, together with a number of third-party partners, who each manage a part of the infrastructure and provide services and products, will impact on the services being procured. The provider sought is expected to be able to, and have experience in, integrating and monitoring across the towers in this type of environment which includes shared infrastructure, environment and cloud managed by third-party providers. It is expected that the service being procured has the ability to grow with and assist with, the monitoring capability of the FCA throughout the engagement and assimilate any further sources of data which may be implemented in its infrastructure. The FCA is seeking to award a contract to a single supplier to provide SOC Services. This can be broken into the following high level main activities: — Monitoring, — Detection, — Investigation, — Response, — Associated hardware/software and tools, — Security/Cyber Consultancy.