Threat Intelligence and Digital Risk

Tender description

National Grid is looking to continue to deliver and enhance their Threat & Risk Management capabilities and ensure the external services utilised are still relevant, providing the most value and strategic partners. Operationally, it's key that National Grid achieve improved service delivery across the areas of security; including Security Operations, Threat Intelligence, Vulnerability Management, and Risk Management teams. It is critical that all services can flex to meet our future needs whilst insuring stability in the current operating environment. The required services, ranging from Threat Intelligence, Vulnerability Management, Digital Risk Management and Third Party Risk will be used to detect and respond to cyber threats and vulnerabilities outside the network perimeter and will enable protection, monitoring, and give early indication of security risks. This must be done according to regulated policies to maintain security of National Grid, its reputation, data, assets and to manage impact of security events affecting our third parties. Lot 1: Threat Intelligence A cyber threat intelligence feed including strategic and technical intelligence on threat actors and attack patterns. Intelligence should provide regular reporting to inform the Security team of changes to the threat landscape and new threats. The service must also enable integration with a Threat Intelligence Platform to enable automated actions. Lot 2: Vulnerability Management An external vulnerability management service that detects vulnerabilities to National Grids externally facing assets through continuous assessment of the digital footprint. Such a service will detect exposed services, open ports, and vulnerabilities. Tactical reporting will enable timely resolution, and the service will enable integration with centralised logging to allow for automated response. Lot 3: Digital Risk Management A digital risk management service will scan open, deep, and dark web resources to identify risks to National Grid. Examples include potential phishing domains, data loss, or credentials. Tactical reporting will enable timely resolution, and the service will enable integration with centralised logging to allow for automated response. Lot 4: Third Party Risk A focus on third party risk management; this service should provide insight into risks associated with third parties; such as security incidents or data breaches that may have an impact to the security of National Grid.