Published date: 5 September 2022

Awarded contract - This means that the contract has been awarded to a supplier.


Closing: 22 November 2021, 12am

Contract summary

Industry

  • Miscellaneous software package and computer systems - 48900000

Location of contract

London

Value of contract

£37,329.76

Procurement reference

BIP718696329

Published date

5 September 2022

Closing date

22 November 2021

Closing time

12am

Contract start date

1 September 2022

Contract end date

31 August 2024

Contract type

Service contract

Procedure type

Not specified

Contract is suitable for SMEs?

No

Contract is suitable for VCSEs?

No

Description

A Privileged Access Management (PAM) Solution that will include contracting with a 3rd party to initially procure their PAM tool and start onboarding some Pilot systems before rollout across the in-scope systems in the organisation.
Our IT administrators have complete control over the systems they control and can access large volumes of data, possibly sensitive or insider information. Many are not FCA employees. A large proportion are offshore employees of our suppliers. We place a very high degree of trust in them. Whilst we vet them, this is an imperfect control.
Administrator accounts are increasingly being hacked into and used to spread disruptive ransomware within organisations.
We have seen examples of high-value bribes being offered to IT administrators by organised criminal gangs.
The FCA currently has inadequate controls for privileged access to our systems. Although a range of manual mitigation actions are underway, best practice indicates that managing privileged access, given the evolving threat landscape, is not possible without a specialised PAM tool.
It is anticipated that the solution will introduce best practices and more granular control of how IT administrators access FCA systems.
It is also expected that the solution will assist in mitigating the identified corporate risks of unauthorised access and the abuse of such access.

More information

Links

Additional text

Awarded via G-Cloud 12 Framework

Award information

Awarded date

22 November 2021

Contract start date

1 September 2022

Contract end date

31 August 2024

Total value of contract

£37,329.76

This contract was awarded to 1 supplier.

Softcat Plc

Address

Thames Industrial Estate
Fieldhouse Lane
Marlow
SL7 1LW

Reference

None

Supplier is SME?

No

About the buyer

Contact name

Phil Lamacraft

Address

12 Endeavour Square
London
E20 1JN
UK

Telephone

02070661000

Email

fcaprocurement@fca.org.uk