Opportunity for DSA Cyber Security Services · Home Office

The Home Office Data Services and Analytics (DSA) which sits within the Buyer's Home Office Digital (HOD) division, has a requirement for the procurement of specialist client-side cyber security support capabilities detailed within the Statement of Requirements document and the Book of Work. The Buyer Cyber Security capability is currently provided under a service-based offering from a third-party supplier.

The supplier delivers a range of services and provides assurance to the Buyer's Independent Assurer that IT systems are compliant with National Cyber Security Centre (NCSC) standards Cyber security advice for public sector organisations | National Cyber Security Centre - NCSC.GOV.UK The Buyer is establishing a more capable cyber function which is still defining its Target Operating Model.

It is envisaged that there will be a range of shared capabilities and processes that the Buyer's service will need to align with or onboard to. This is following Secure by Design principles Liaison and collaboration with NCSC and other UK Intelligence and Law Enforcement Agencies is also a key requirement of the service to ensure 3rd party stakeholders are assured of the Buyer's Cyber security.

The Supplier will deliver the Services in each operational area in a multi-disciplinary / multi-vendor environment. The Supplier shall be expected to develop strong and collaborative working relationships with the existing DSA portfolio teams and with other suppliers supporting the Buyer's HOD division with whom the Supplier will work. The Services will be delivered within DSA Security Team.

The Security Architecture across DSA Programmes and Projects is at different levels of maturity. The Service needs the ability to flex for urgent requirements and to change throughout the term of the Agreement as threats and consequent requirements evolve. This will result in the need for additional, ad hoc services, which are not listed in the DSA Book of Work requiring Supplier support.

Such requests by the Buyer shall be subject to an impact assessment, which will determine whether an additional Statement(s) of Work (SoW) is required. Where an Unforeseen Event occurs, the Supplier must, at the written request and at the direction of the Principal Security Architect, move capacity to the required operational area(s) to meet DSA needs. The Supplier will raise any consequential impact to Services for the acceptance of the Principal Security Architect.

The Buyer uses a range of tools including Commercial Off the Shelf SIEM tooling (SPLUNK) to monitor, detect and respond to any security threats.

Additional Information

The filter fields used under RM3674 and the joining process are outlined in the attached file