Contract

Cyber Security Support

  • Mutual Energy Limited

F06: Contract award notice – utilities

Notice identifier: 2024/S 000-001873

Procurement identifier (OCID): ocds-h6vhtk-03ddbc

Published 19 January 2024, 9:56am



Section one: Contracting entity

one.1) Name and addresses

Mutual Energy Limited

1st Floor, The Arena Building, 85 Ormeau Road

Belfast

BT7 1SH

Contact

Hannah Keery

Email

Hannah.Keery@mutual-energy.com

Telephone

+44 2890437508

Country

United Kingdom

NUTS code

UKN - Northern Ireland

National registration number

NI053759

Internet address(es)

Main address

https://in-tendhost.co.uk/mutual-energy/aspx/Home

Buyer's address

www.mutual-energy.com

one.6) Main activity

Other activity

Production, transport and distribution of gas and heat


Section two: Object

two.1) Scope of the procurement

two.1.1) Title

Cyber Security Support

Reference number

2019-MEL-00000014

two.1.2) Main CPV code

  • 72800000 - Computer audit and testing services

two.1.3) Type of contract

Services

two.1.4) Short description

Tender for a cyber security support contract with 3 Lots: Penetration Testing, Compliance Support and Threat Analysis and Reporting. See PQQ Document for further information.

two.1.6) Information about lots

This contract is divided into lots: Yes

two.2) Description

two.2.1) Title

Penetration Testing

Lot No

1

two.2.2) Additional CPV code(s)

  • 72800000 - Computer audit and testing services
  • 72700000 - Computer network services
  • 72000000 - IT services: consulting, software development, Internet and support
  • 72600000 - Computer support and consultancy services
  • 72316000 - Data analysis services
  • 72200000 - Software programming and consultancy services
  • 48170000 - Compliance software package
  • 76100000 - Professional services for the gas industry

two.2.3) Place of performance

NUTS codes
  • UKN - Northern Ireland
Main site or place of performance

Mutual Energy is based in Belfast, Northern Ireland but the outlined services can be provided remotely where this makes sense.

two.2.4) Description of the procurement

Mutual currently manage, maintain and support their Gas and Moyle OT environments, as well as their Corporate IT Network, in conjunction with third party support providers. In order to ensure that there is adequate review and assessment of this work, Mutual require an independent organisation to undertake the Penetration Testing on these networks and systems. See the PQQ Document for further details.

two.2.11) Information about options

Options: No

two.2.13) Information about European Union Funds

The procurement is related to a project and/or programme financed by European Union funds: No

two.2) Description

two.2.1) Title

Compliance Support

Lot No

2

two.2.2) Additional CPV code(s)

  • 72000000 - IT services: consulting, software development, Internet and support
  • 72700000 - Computer network services
  • 72600000 - Computer support and consultancy services
  • 72800000 - Computer audit and testing services
  • 48170000 - Compliance software package
  • 72200000 - Software programming and consultancy services
  • 76100000 - Professional services for the gas industry
  • 72316000 - Data analysis services

two.2.3) Place of performance

NUTS codes
  • UKN - Northern Ireland
Main site or place of performance

Mutual Energy is based in Belfast, Northern Ireland. Services can be provided remotely where this makes sense.

two.2.4) Description of the procurement

Lot 2 is for Compliance Support services. The current regulatory and compliance landscape is significant for Mutual. Operating two OT environments, each managing critical national infrastructure, as well as the corporate IT network, presents significant challenges when it comes to ensuring that our regulatory and compliance management and reporting is fit for purpose.As an ‘Operator of Essential Services’, Mutual is looking for a partner that can provide support, insight and guidance to aid the completion of the NCSC Cyber Assessment Contract and subsequent compliance actions, as part of our NIS Compliance Reporting.Mutual is also looking for a partner to assist with the development, implementation and certification of an ISO27001 Contract for each of its OT and IT environments.

two.2.11) Information about options

Options: No

two.2.13) Information about European Union Funds

The procurement is related to a project and/or programme financed by European Union funds: No

two.2) Description

two.2.1) Title

Threat Analysis and Reporting

Lot No

3

two.2.2) Additional CPV code(s)

  • 72000000 - IT services: consulting, software development, Internet and support
  • 72700000 - Computer network services
  • 72600000 - Computer support and consultancy services
  • 72800000 - Computer audit and testing services
  • 48170000 - Compliance software package
  • 72200000 - Software programming and consultancy services
  • 76100000 - Professional services for the gas industry
  • 72316000 - Data analysis services

two.2.3) Place of performance

NUTS codes
  • UKN - Northern Ireland
Main site or place of performance

Mutual Energy is based in Belfast, Northern Ireland. Services will be provided remotely where this makes sense.

two.2.4) Description of the procurement

This Lot is for Threat Analysis and Reporting. Mutual requires a partner to be able to identify, clarify and offer potential mitigations for company-specific, as well as industry-wide, cyber threats and risks. The partner should be able to provide this information through either a digital platform or through a designated analysis and reporting service.

two.2.11) Information about options

Options: No

two.2.13) Information about European Union Funds

The procurement is related to a project and/or programme financed by European Union funds: No


Section four. Procedure

four.1) Description

four.1.1) Type of procedure

Negotiated procedure with prior call for competition

four.1.8) Information about the Government Procurement Agreement (GPA)

The procurement is covered by the Government Procurement Agreement: No

four.2) Administrative information

four.2.1) Previous publication concerning this procedure

Notice number: 2023/S 000-018622


Section five. Award of contract

Contract No

Mutual Energy Cyber Security

Lot No

1

Title

Penetration Testing

A contract/lot is awarded: Yes

five.2) Award of contract

five.2.1) Date of conclusion of the contract

18 January 2024


Section five. Award of contract

Contract No

Mutual Energy Cyber Security

Lot No

2

Title

Compliance Support

A contract/lot is awarded: Yes

five.2) Award of contract

five.2.1) Date of conclusion of the contract

1 December 2023

five.2.2) Information about tenders

The contract has been awarded to a group of economic operators: No

five.2.3) Name and address of the contractor

Gemserv

Fenchurch Place

London

EC3M 4AJ

Country

United Kingdom

NUTS code
  • UK - United Kingdom
The contractor is an SME

No


Section five. Award of contract

Contract No

Mutual Energy Cyber Security

Lot No

3

Title

Threat Analysis and Reporting

A contract/lot is awarded: Yes

five.2) Award of contract

five.2.1) Date of conclusion of the contract

1 December 2023

five.2.2) Information about tenders

The contract has been awarded to a group of economic operators: No

five.2.3) Name and address of the contractor

Gemserv

Fenchurch Place

London

EC3M 4AJ

Country

United Kingdom

NUTS code
  • UK - United Kingdom
The contractor is an SME

No


Section six. Complementary information

six.4) Procedures for review

six.4.1) Review body

High Court of Northern Ireland

Belfast

Country

United Kingdom

six.4.4) Service from which information about the review procedure may be obtained

N/A

Belfast

Country

United Kingdom