Scottish Water has gone out to tender with a wide-ranging contract for digital directorate cyber security partner worth an estimated £50 million.
The water company is seeking the procurement of a cybersecurity partner with strong heritage in security and cyber services to provide a comprehensive cyber-security managed service and delivery of cybersecurity projects.
The successful supplier will lead the proactive assessment and prevention of cybersecurity risk, lead the response and management of cyber-security emergencies and deliver complex transformative cybersecurity projects.
Scottish Water said that in addition to long term proven experience of delivering end to end cyber services within the UK utilities market, particularly in the water industry, any prospective tenderer should hold an extensive record of successful project delivery of security improvement projects.
Suppliers must be able to provide Advanced Threat Centre (ATC) services from a Security Operations Centre (SOC) located onshore within the UK. Scottish Water is looking for suppliers who have proven expert competency in technology and subject areas such as:
- Managed Detection Response (MDR) services
- Software defined networking (SD-WAN)
- Network Segregation and intrusion detection
- Security of IoT Devices and Programmable Logic Controllers
- Next-gen firewall appliances
- Microsoft E5 security products and wider Microsoft security product portfolio
- Advanced Threat Protection tools
- Threat-intelligence services
- Secure network access to remote sites
- Secure remote access services
The water company is looking for a partner that can demonstrate a holistic understanding of cybersecurity including human-factors. The cybersecurity partner will also be required to attend Scottish Water strategy and design governance boards and be the key source of cybersecurity advice.
Working collaboratively with Scottish Water they will be delivering security improvement projects to enhance security capabilities, optimise costs and add value in addition to bringing or developing new innovative technologies to address the convergence of IT and OT security.
The partner will be required to work alongside Scottish Water’s existing framework suppliers, IT partners and key strategic software suppliers, including:
- IT service providers: ATOS, Capgemini and CompanyNet
- Supply chain specialist providers: Ground Control, Magdalene and Siemens
- Existing telemetry technology providers: ICONICS, Emerson and Schneider
Initial contract term is 3 years with 3 further one year extension options.
Time limit for receipt of tenders or requests to participate is 10 February 2023 – click here to access the tender documentation