Cyber Risk Tooling - Design Phase

Contract summary

Industry

• IT services: consulting, software development, Internet and support - 72000000

Location of contract

London

Value of contract

£69,963.60

Procurement reference

ISSSECINF/700008759

Published date

21 November 2019

Closing date

12 July 2019

Contract start date

25 November 2019

Contract end date

17 January 2020

Contract type

Service contract

Procedure type

Call-off from a framework agreement

Contract is suitable for SMEs?

Yes

Contract is suitable for VCSEs?

No

---

Description

Summary of work: Designing of a tool base that ingests and Analyses all cyber risk data, aligned with the Joint User vision.
Production of a Stakeholder Map.
Understand User Requirements/available data.
Analysis of existing capability.
Creation of costed options for the Development Phase.
Outline of Skills and experience required for the next phase.

The Cyber Risk Management Function (part of the MOD's Cyber Security Operations Capability (CSOC)) requires a set of tools that will allow for automation of the ingestion, storage, analysis and exploitation of Cyber risks, and informing data, to keep pace with the increasing level of cyber risks being discovered. The Cyber Risk tooling capability is required by September 2019 to fall in line with programme expansion and roll out. This Design Phase is to scope what can be delivered by this deadline.

Additional support is required to fulfil the Design Phase of the project, ensuring that an appropriate solution is defined that will offer a stable foundation and scalable configuration for the growing cyber risk management capability, while providing immediate benefit to users. The foundations will allow for the ingest of all cyber risk-related data such as threats, vulnerabilities, cyber events and incidents data. This will also permit rapid broadening of the data import, analytics and data exploitation capabilities, which will allow the MOD to understand its cyber risk exposure and the prioritised risks that need treatment.

Ministry of Defence - primarily the Cyber Risk Management Team in C4ISR & Cyber Joint User and the Defence Assurance and Information Security (DAIS) team, with growth across the MOD in time.
The user's need includes a design for an automated method of ingesting, storing and analysing of Cyber Risks based on an existing big data platform.

---

Award information

Awarded date

19 September 2019

Contract start date

25 November 2019

Contract end date

17 January 2020

Total value of contract

£69,963.60

This contract was awarded to 1 supplier.

PA CONSULTING SERVICES LIMITED

---

About the buyer

Contact name

Caroline Draper

Address

Spur F1, Building 405, MoD Corsham.
Westwells Road. Corsham. SN13 9NR
Corsham
SN13 9NR
England

Telephone

03067702271

Email

caroline.draper102@mod.gov.uk