The Authority is procuring cyber security services to support the organisation's security posture, operational resilience, and ability to prevent, detect, respond to, and recover from cyber threats. The required services may include, but are not limited to: Security assessment services, including IT health checks and vulnerability assessments; Incident response and threat management services, including cyber incident handling, threat intelligence and business continuity support; Managed security services, such as managed detection and response (MDR), Security Operations Centre (SOC) services, and continuous monitoring; Specialist cyber consultancy, including risk assessment, security architecture, cyber maturity analysis, security strategy, policy development and transformation activities. These services must be delivered by suppliers admitted to the Crown Commercial Service Dynamic Purchasing System Cyber Security Services 3 (RM3764.3) and selected through the appropriate DPS filtering options. The volume, mix, and scope of services will depend on the Authority's ongoing operational and security requirements over the life of the contract. Suppliers must ensure all services are delivered in accordance with relevant industry standards, applicable legislation, and any required cyber security certifications (including those required by the DPS filters).

A previous PA23 notice was incorrectly issued, whereas this contract was awarded following a PCR2015 DPS mini-competition so this new PCR2015 contract notice is being issued as a correction.

Options: The contract will be awarded for an initial term of three (3) years, with the option to extend by up to two (2) additional periods of twelve (12) months each, up to a maximum total contract duration of five (5) years. Extensions may be used where: The Supplier's performance remains satisfactory, as demonstrated through contract management reviews, KPIs, and service delivery standards; Continuing with the incumbent Supplier represents value for money, taking into account cost, quality, market conditions, and the Authority's ongoing operational requirements; There is a continued business need for the services and extending the contract supports continuity and avoids unnecessary disruption to service delivery; Any changes in scope remain within the limits permitted by the PCR2015 and do not materially alter the nature of the original procurement. Where both optional extensions are exercised, they may be applied individually or consecutively, depending on the needs of the Authority at the relevant time.

Public Contracts Regulations 2015 (Directive 2014/24/EU)

Award procedure without prior publication of a call for competition The procurement was a mini-competition from a PCR2015 compliant DPS, namely Government Commercial Services' RM3764.3 Cyber Security Services 3.

Lot 1: Bids: 2