23/029 - Provision of Cyber Security Operations Centre Services

Gas Networks Ireland is seeking the provision of the following managed security services: • Ongoing build out of our GNI Estate Coverage (IT), (OT), (ICS) SIEM logging, Use Cases in line with NIST, ISO 27001, NIS Directive 2016/1148 & MITRE Cyber Security Frameworks. • Continuous Vulnerability Management scanning, reporting of …

CPV: 72212730 Servicios de desarrollo de software de seguridad, 75000000 Servicios de administración pública, defensa y servicios de seguridad social, 79000000 Servicios a empresas: legislación, mercadotecnia, asesoría, selección de personal, imprenta y seguridad, 79710000 Servicios de seguridad, 80610000 Formación y simulación en materia de equipos de seguridad, 48731000 Paquetes de software de seguridad de archivos, 48732000 Paquetes de software de seguridad de datos, 72212731 Servicios de desarrollo de software de seguridad de archivos, 73421000 Desarrollo de equipos de seguridad, 79700000 Servicios de investigación y seguridad, 48730000 Paquetes de software de seguridad, 73400000 Servicios de investigación y desarrollo de materiales de seguridad y defensa, 73431000 Ensayo y evaluación de equipos de seguridad
Lugar de ejecución:
23/029 - Provision of Cyber Security Operations Centre Services
Organismo adjudicador:
Gas Networks Ireland
Número de premio:
1

1. Buyer

1.1 Buyer

Official name : Gas Networks Ireland
Legal type of the buyer : Body governed by public law
Activity of the contracting authority : General public services
Activity of the contracting entity : Production, transport or distribution of gas or heat

2. Procedure

2.1 Procedure

Title : 23/029 - Provision of Cyber Security Operations Centre Services
Description : Gas Networks Ireland is seeking the provision of the following managed security services: • Ongoing build out of our GNI Estate Coverage (IT), (OT), (ICS) SIEM logging, Use Cases in line with NIST, ISO 27001, NIS Directive 2016/1148 & MITRE Cyber Security Frameworks. • Continuous Vulnerability Management scanning, reporting of all GNI assets. Risk Identification of Assets, Automatic Ingestion into SIEM for Mitigation of system owners. • Managed offsite security monitoring and alerting of the entire Information Technology (IT), Operational Technology (OT) and Industrial Control System (ICS) infrastructure and systems. • SIEM Dashboards for Asset Identification, Risk & Monitoring, Security Infrastructure, Risk Identification, Compliance of Vulnerabilities, Mitigation Solutions, Monitoring, Detection Alerting for 24/7 365 Cover, Respond, Recover & Threat Hunting capabilities. • Threat Intelligence integration, including Surface web & Dark web monitoring & Security Orchestration Automation & Response (SOAR) SIEM integration, SIEM Alert Testing & implementation. • User Behavioural Analytics Security Monitoring & Alerting, with our NDR to be connected to HIDS, NIDS, EDR, IDS/IPS, DLP, PCAP Traffic, WAF, Proxy, FIM, Email, Honeypot/Canary SIEM integration • Complete end to end Digital Forensics with Malware Sandbox integration into GNI • Incident Response services to include incident management. • Ticket System (Service Now) Integration with SIEM as well as Standard Operating Procedure, Playbook & Runbook integration • Outlined Service Licence Agreement for Incident response and continuous improvement works • Playbook, Runbook Simulation Exercises end to end • Root Cause Analysis, Lessons Learned/Risk Register Identification, Continuous Review & Reporting.
Procedure identifier : 5ea05b4a-b90d-45fa-86b2-418742de0ece
Type of procedure : Negotiated with prior publication of a call for competition / competitive with negotiation
Justification for the accelerated procedure :
Main features of the procedure :

2.1.1 Purpose

Main nature of the contract : Services
Main classification ( cpv ): 72212730 Security software development services
Additional classification ( cpv ): 75000000 Administration, defence and social security services
Additional classification ( cpv ): 79000000 Business services: law, marketing, consulting, recruitment, printing and security
Additional classification ( cpv ): 79710000 Security services
Additional classification ( cpv ): 80610000 Training and simulation in security equipment
Additional classification ( cpv ): 48731000 File security software package
Additional classification ( cpv ): 48732000 Data security software package
Additional classification ( cpv ): 72212731 File security software development services
Additional classification ( cpv ): 73421000 Development of security equipment
Additional classification ( cpv ): 79700000 Investigation and security services
Additional classification ( cpv ): 48730000 Security software package
Additional classification ( cpv ): 72212730 Security software development services
Additional classification ( cpv ): 73400000 Research and Development services on security and defence materials
Additional classification ( cpv ): 73431000 Test and evaluation of security equipment

2.1.3 Value

Estimated value excluding VAT : 3 588 339 Euro

2.1.4 General information

Legal basis :
Directive 2014/25/EU

5. Lot

5.1 Lot technical ID : LOT-0001

Title : 23/029 - Cyber Security Operations Centre Contract
Description : Gas Networks Ireland (GNI), as an Operator of Essential Services under the Directive on security of network and information systems (NIS Directive) are obligated to protect their networks and services from threat actors such as Nation State sponsored groups; cyber-criminals; hacktivists and threats relating to employee activity whether malicious or accidental. GNI is looking for a service provider that can cover all aspects of a managed service, support and change delivery, including, but not limited to, the following: Managed Monitoring and Alerting, Digital Forensics and Incident Response
Internal identifier : 1

5.1.1 Purpose

Main nature of the contract : Services
Main classification ( cpv ): 72212730 Security software development services

5.1.2 Place of performance

Country : Ireland
Anywhere in the given country
Additional information : Ireland

5.1.5 Value

Estimated value excluding VAT : 3 588 339 Euro

5.1.6 General information

Procurement Project not financed with EU Funds.
The procurement is covered by the Government Procurement Agreement (GPA) : yes

5.1.7 Strategic procurement

Aim of strategic procurement : No strategic procurement

5.1.10 Award criteria

Criterion :
Type : Quality
Name :
Description : (MEAT) Price & Quality
Weight (percentage, exact) : 70
Criterion :
Type : Price
Name :
Description : (MEAT) Price & Quality
Weight (percentage, exact) : 30
Description of the method to be used if weighting cannot be expressed by criteria :
Justification for not indicating the weighting of the award criteria :

5.1.15 Techniques

Framework agreement :
Framework agreement, without reopening of competition
Information about the dynamic purchasing system :
No dynamic purchase system

5.1.16 Further information, mediation and review

Review organisation : The High Court of Ireland
Organisation providing additional information about the procurement procedure : Gas Networks Ireland
Organisation signing the contract : Gas Networks Ireland
TED eSender : European Dynamics S.A.

6. Results

Value of all contracts awarded in this notice : 3 588 339 Euro
Maximum value of the framework agreements in this procedure : 3 588 339 Euro
Approximate value of the framework agreements : 3 588 339 Euro

6.1 Result lot ldentifier : LOT-0001

At least one winner was chosen.
Framework agreement :
Maximum value of the framework agreement : 3 588 339 Euro
Re-estimated value of the framework agreement : 3 588 339 Euro

6.1.2 Information about winners

Winner :
Tender :
Tender identifier : 23/029 Provision of Cyber Security Operations Centre Services
Identifier of lot or group of lots : LOT-0001
Subcontracting : No
Contract information :
Identifier of the contract : 23/029 Provision of Cyber Security Operations Centre Services
Date on which the winner was chosen : 14/06/2024
Date of the conclusion of the contract : 23/09/2024
The contract is awarded within a framework agreement : yes
Organisation signing the contract : Gas Networks Ireland

8. Organisations

8.1 ORG-0001

Official name : Gas Networks Ireland
Registration number : 555744
Postal address : Gasworks Road
Town : Cork
Postcode : T12RX96
Country subdivision (NUTS) : Dublin ( IE061 )
Country : Ireland
Telephone : +353 0000000
Internet address : https://www.gasnetworks.ie
Roles of this organisation :
Buyer
Organisation providing additional information about the procurement procedure
Organisation signing the contract

8.1 ORG-0002

Official name : The High Court of Ireland
Registration number : The High Court of Ireland
Department : The High Court of Ireland
Postal address : Four Courts, Inns Quay, Dublin 7
Town : Dublin
Postcode : D07 WDX8
Country subdivision (NUTS) : Dublin ( IE061 )
Country : Ireland
Telephone : +353 1 8886000
Roles of this organisation :
Review organisation

8.1 ORG-0003

Official name : European Dynamics S.A.
Registration number : 002024901000
Department : European Dynamics S.A.
Town : Athens
Postcode : 15125
Country subdivision (NUTS) : Βόρειος Τομέας Αθηνών ( EL301 )
Country : Greece
Telephone : +30 2108094500
Roles of this organisation :
TED eSender

11. Notice information

11.1 Notice information

Notice identifier/version : 3b9e652d-a619-4a86-bf52-e864349d648e - 01
Form type : Result
Notice type : Contract or concession award notice – standard regime
Notice dispatch date : 18/11/2024 13:48 +00:00
Languages in which this notice is officially available : English

11.2 Publication information

Notice publication number : 00703878-2024
OJ S issue number : 225/2024
Publication date : 19/11/2024