Planning

IT Security Services

  • Development Bank of Wales

F01: Prior information notice (prior information only)

Notice identifier: 2024/S 000-027991

Procurement identifier (OCID): ocds-h6vhtk-04975d

Published 2 September 2024, 4:14pm



Section one: Contracting authority

one.1) Name and addresses

Development Bank of Wales

Development Bank of Wales plc, Unit J, Yale Business Village, Ellis Way

Wrexham

LL13 7Y

Contact

Leanne Millard

Email

leanne.millard@developmentbank.wales

Telephone

+44 2920338100

Fax

+44 2920338101

Country

United Kingdom

NUTS code

UK - United Kingdom

Internet address(es)

Main address

http://www.developmentbank.wales

Buyer's address

https://www.sell2wales.gov.wales/search/Search_AuthProfile.aspx?ID=AA0555

one.2) Information about joint procurement

The contract is awarded by a central purchasing body

one.3) Communication

Additional information can be obtained from the above-mentioned address

one.4) Type of the contracting authority

Body governed by public law

one.5) Main activity

Economic and financial affairs


Section two: Object

two.1) Scope of the procurement

two.1.1) Title

IT Security Services

Reference number

DBW00105.00

two.1.2) Main CPV code

  • 72222300 - Information technology services

two.1.3) Type of contract

Services

two.1.4) Short description

We are inviting suppliers to express an interest in the notice and provide an overview either face to face in our Cardiff office or via Teams on how the organisation will be able to support our requirements.

two.1.5) Estimated total value

Value excluding VAT: £1,000,000

two.1.6) Information about lots

This contract is divided into lots: No

two.2) Description

two.2.2) Additional CPV code(s)

  • 72222300 - Information technology services

two.2.3) Place of performance

NUTS codes
  • UK - United Kingdom

two.2.4) Description of the procurement

Introduction

The Development Bank of Wales currently operate a security operation model that is split across multiple providers and technologies. To help reduce the complexity of this approach and improve our ability to effectively monitor, respond to, and mitigate security threats, the Banc are investigating the feasibility of implementing a unified Microsoft security operations platform, the day-to-day management of which would be supported by a single provider. This transition will not only streamline our processes and technology, but also increase the efficiency of our incident response efforts and reduce the potential for gaps in our security posture caused by the fragmentation of tools and services.

Currently, our Azure services are handled by Service Provider A, which focuses on optimising our cloud infrastructure. Service Provider B is responsible for managing our Microsoft 365 environment and on-premises infrastructure, ensuring that both are configured and maintained to meet our operational needs. Additionally, our managed detection and response (MDR) services are provided by Service Provider C, which utilises their own proprietary platform to deliver continuous monitoring, threat detection, and incident response across our IT estate.

The Banc is investigating replacing Service Provider C with a new Service Provider that will take over the managed detection and response function, utilising the Microsoft unified security platform. They will be responsible for the implementation, configuration and on-going management of the platform, and providing proactive advice and recommendations to improve the security of our Microsoft estate, drawing on Microsoft’s insights, but will not be responsible for any configuration outside of the security platform. The new provider will collaborate closely with Service Providers A and B to align security practices ensuring that our entire IT environment remains protected against emerging threats.

two.2.14) Additional information

At this stage we are asking suppliers to express and interest and email leanne.millard@developmentbank.wales. You will be required to attend either a face to face meeting or a teams call to demonstrate how your organisation can support our requirements.

Please note these dates are subject to change we anticipate the following dates for meetings:

24th Sept

25th Sep

1st Oct

2nd Oct

3rd Oct

two.3) Estimated date of publication of contract notice

25 November 2024


Section four. Procedure

four.1) Description

four.1.8) Information about the Government Procurement Agreement (GPA)

The procurement is covered by the Government Procurement Agreement: No


Section six. Complementary information

six.3) Additional information

Please refer to scope in additional documents

NOTE: To register your interest in this notice and obtain any additional information please visit the Sell2Wales Web Site at https://www.sell2wales.gov.wales/Search/Search_Switch.aspx?ID=144208.

(WA Ref:144208)