Tender

Cyber Security Support

  • Mutual Energy Limited

F05: Contract notice – utilities

Notice identifier: 2023/S 000-018622

Procurement identifier (OCID): ocds-h6vhtk-03ddbc

Published 30 June 2023, 9:46am



Section one: Contracting entity

one.1) Name and addresses

Mutual Energy Limited

1st Floor, The Arena Building, 85 Ormeau Road

Belfast

BT7 1SH

Contact

Hannah Keery

Email

Hannah.Keery@mutual-energy.com

Telephone

+44 2890437508

Country

United Kingdom

NUTS code

UKN - Northern Ireland

National registration number

NI053759

Internet address(es)

Main address

https://in-tendhost.co.uk/mutual-energy/aspx/Home

Buyer's address

www.mutual-energy.com

one.3) Communication

Access to the procurement documents is restricted. Further information can be obtained at

https://in-tendhost.co.uk/mutual-energy/aspx/Home

Additional information can be obtained from the above-mentioned address

Tenders or requests to participate must be submitted electronically via

https://in-tendhost.co.uk/mutual-energy/aspx/Home

Tenders or requests to participate must be submitted to the above-mentioned address

one.6) Main activity

Other activity

Production, transport and distribution of gas and heat


Section two: Object

two.1) Scope of the procurement

two.1.1) Title

Cyber Security Support

Reference number

2019-MEL-00000014

two.1.2) Main CPV code

  • 72800000 - Computer audit and testing services

two.1.3) Type of contract

Services

two.1.4) Short description

Tender for a cyber security support contract with 3 Lots: Penetration Testing, Compliance Support and Threat Analysis and Reporting. See PQQ Document for further information.

two.1.5) Estimated total value

Value excluding VAT: £800,000

two.1.6) Information about lots

This contract is divided into lots: Yes

Tenders may be submitted for all lots

two.2) Description

two.2.1) Title

Penetration Testing

Lot No

1

two.2.2) Additional CPV code(s)

  • 72800000 - Computer audit and testing services
  • 72700000 - Computer network services
  • 72600000 - Computer support and consultancy services
  • 48170000 - Compliance software package
  • 72200000 - Software programming and consultancy services
  • 72000000 - IT services: consulting, software development, Internet and support
  • 76100000 - Professional services for the gas industry
  • 72316000 - Data analysis services

two.2.3) Place of performance

NUTS codes
  • UKN - Northern Ireland
Main site or place of performance

Mutual Energy is based in Belfast, Northern Ireland but the outlined services can be provided remotely where this makes sense.

two.2.4) Description of the procurement

Mutual currently manage, maintain and support their Gas and Moyle OT environments, as well as their Corporate IT Network, in conjunction with third party support providers. In order to ensure that there is adequate review and assessment of this work, Mutual require an independent organisation to undertake the Penetration Testing on these networks and systems. See the PQQ Document for further details.

two.2.5) Award criteria

Price is not the only award criterion and all criteria are stated only in the procurement documents

two.2.6) Estimated value

Value excluding VAT: £378,000

two.2.7) Duration of the contract, framework agreement or dynamic purchasing system

Duration in months

60

This contract is subject to renewal

Yes

Description of renewals

Mutual may at its sole discretion opt to extend the initial five year term

two.2.9) Information about the limits on the number of candidates to be invited

Maximum number: 50

Objective criteria for choosing the limited number of candidates:

Please see PQQ document via our In Tend system (address/URL above) for full details

two.2.10) Information about variants

Variants will be accepted: No

two.2.11) Information about options

Options: No

two.2.13) Information about European Union Funds

The procurement is related to a project and/or programme financed by European Union funds: No

two.2) Description

two.2.1) Title

Compliance Support

Lot No

2

two.2.2) Additional CPV code(s)

  • 72000000 - IT services: consulting, software development, Internet and support
  • 72700000 - Computer network services
  • 72600000 - Computer support and consultancy services
  • 72800000 - Computer audit and testing services
  • 48170000 - Compliance software package
  • 72200000 - Software programming and consultancy services
  • 76100000 - Professional services for the gas industry
  • 72316000 - Data analysis services

two.2.3) Place of performance

NUTS codes
  • UKN - Northern Ireland
Main site or place of performance

Mutual Energy is based in Belfast, Northern Ireland. Services can be provided remotely where this makes sense.

two.2.4) Description of the procurement

Lot 2 is for Compliance Support services. The current regulatory and compliance landscape is significant for Mutual. Operating two OT environments, each managing critical national infrastructure, as well as the corporate IT network, presents significant challenges when it comes to ensuring that our regulatory and compliance management and reporting is fit for purpose.As an ‘Operator of Essential Services’, Mutual is looking for a partner that can provide support, insight and guidance to aid the completion of the NCSC Cyber Assessment Contract and subsequent compliance actions, as part of our NIS Compliance Reporting.Mutual is also looking for a partner to assist with the development, implementation and certification of an ISO27001 Contract for each of its OT and IT environments.

two.2.5) Award criteria

Price is not the only award criterion and all criteria are stated only in the procurement documents

two.2.6) Estimated value

Value excluding VAT: £120,000

two.2.7) Duration of the contract, framework agreement or dynamic purchasing system

Duration in months

60

This contract is subject to renewal

Yes

Description of renewals

Mutual may at its sole discretion opt to extend the initial five year term

two.2.9) Information about the limits on the number of candidates to be invited

Maximum number: 50

Objective criteria for choosing the limited number of candidates:

Please see PQQ document via our In Tend system (address/URL above) for full details

two.2.10) Information about variants

Variants will be accepted: No

two.2.11) Information about options

Options: No

two.2.13) Information about European Union Funds

The procurement is related to a project and/or programme financed by European Union funds: No

two.2) Description

two.2.1) Title

Threat Analysis and Reporting

Lot No

3

two.2.2) Additional CPV code(s)

  • 72000000 - IT services: consulting, software development, Internet and support
  • 72600000 - Computer support and consultancy services
  • 72800000 - Computer audit and testing services
  • 48170000 - Compliance software package
  • 72200000 - Software programming and consultancy services
  • 72700000 - Computer network services
  • 76100000 - Professional services for the gas industry
  • 72316000 - Data analysis services

two.2.3) Place of performance

NUTS codes
  • UKN - Northern Ireland
Main site or place of performance

Mutual Energy is based in Belfast, Northern Ireland. Services will be provided remotely where this makes sense.

two.2.4) Description of the procurement

This Lot is for Threat Analysis and Reporting. Mutual requires a partner to be able to identify, clarify and offer potential mitigations for company-specific, as well as industry-wide, cyber threats and risks. The partner should be able to provide this information through either a digital platform or through a designated analysis and reporting service.

two.2.5) Award criteria

Price is not the only award criterion and all criteria are stated only in the procurement documents

two.2.6) Estimated value

Value excluding VAT: £300,000

two.2.7) Duration of the contract, framework agreement or dynamic purchasing system

Duration in months

60

This contract is subject to renewal

Yes

Description of renewals

Mutual may at its sole discretion opt to extend the initial five year term

two.2.9) Information about the limits on the number of candidates to be invited

Maximum number: 50

Objective criteria for choosing the limited number of candidates:

Please see PQQ document via our In Tend system (address/URL above) for full details

two.2.10) Information about variants

Variants will be accepted: No

two.2.11) Information about options

Options: No

two.2.13) Information about European Union Funds

The procurement is related to a project and/or programme financed by European Union funds: No


Section three. Legal, economic, financial and technical information

three.1) Conditions for participation

three.1.1) Suitability to pursue the professional activity, including requirements relating to enrolment on professional or trade registers

List and brief description of conditions

Selection criteria as stated in the procurement document (PQQ)

three.1.2) Economic and financial standing

Selection criteria as stated in the procurement documents

three.1.3) Technical and professional ability

Selection criteria as stated in the procurement documents

three.1.4) Objective rules and criteria for participation

List and brief description of rules and criteria

Please see PQQ document for further details.


Section four. Procedure

four.1) Description

four.1.1) Type of procedure

Negotiated procedure with prior call for competition

four.1.8) Information about the Government Procurement Agreement (GPA)

The procurement is covered by the Government Procurement Agreement: No

four.2) Administrative information

four.2.2) Time limit for receipt of tenders or requests to participate

Date

2 August 2023

Local time

12:00pm

four.2.3) Estimated date of dispatch of invitations to tender or to participate to selected candidates

11 August 2023

four.2.4) Languages in which tenders or requests to participate may be submitted

English


Section six. Complementary information

six.1) Information about recurrence

This is a recurrent procurement: No

six.4) Procedures for review

six.4.1) Review body

High Court of Northern Ireland

Belfast

Country

United Kingdom