Single-Party framework for the Provision of a National Security Operations Centre (SOC)

Description

This Single-Party framework is for the provision of a National Security Operations Centre (SOC) service for the Irish local government sector, along with required telemetry gathering solution, to monitor the digital infrastructure of local authorities and other local government bodies in Ireland and identify threats to the sector. There will be a mix of technologies across the participating organisations and the successful supplier will need to be able to onboard these various technologies into it’s monitoring solution. The service will provide daily reports on threat intelligence to the sector and individualised reports to each participating entity. It will notify individual participating organisations of alerts on their infrastructure with advice on how to respond to and mitigate the impact of these threats and will include options to automate responses to predefined scenarios. Threat intelligence supplied by the National Cyber Security Centre (NCSC), via a MISP, will be used along with the Managed Security Service Provider’s (MSSP) own threat intelligence to identify threats to the sector, and any threat intelligence gathered via the National SOC service will be shared with the NCSC. The service will be managed by the LGMA but there will be direct engagement between the successful supplier and the participating organisations. This Single-Party framework is for the provision of a National Security Operations Centre (SOC) service for the Irish local government sector, along with required telemetry gathering solution, to monitor the digital infrastructure of local authorities and other local government bodies in Ireland and identify threats to the sector. There will be a mix of technologies across the participating organisations and the successful supplier will need to be able to onboard these various technologies into it’s monitoring solution. The service will provide daily reports on threat intelligence to the sector and individualised reports to each participating entity. It will notify individual participating organisations of alerts on their infrastructure with advice on how to respond to and mitigate the impact of these threats and will include options to automate responses to predefined scenarios. Threat intelligence supplied by the National Cyber Security Centre (NCSC), via a MISP, will be used along with the Managed Security Service Provider’s (MSSP) own threat intelligence to identify threats to the sector, and any threat intelligence gathered via the National SOC service will be shared with the NCSC. The service will be managed by the LGMA but there will be direct engagement between the successful supplier and the participating organisations.