# Ealing ICT Cyber Security Contract 2023

> Contract award record from UK public-sector procurement sources.

## Key facts

- Public buyer: [London Borough of Ealing](/buyers/london-borough-of-ealing/contract-awards)
- Contract winner: Jumpsec Ltd
- Award value: £1,080,000
- Tender value: £1,080,000
- Award date: 20 December 2022
- Published: 23 March 2023
- Contract start: 1 March 2023
- Contract end: 28 February 2026
- Stage: awarded
- Procurement category: services
- Notice ID: 3e7779a1-4a2a-41dc-a1b2-68a3981d37e2-627351
- OCID: ocds-b5fd17-2a7817f6-032e-4327-8d7b-f3252045d1c0

## Description

Ealing Council required a range of managed security services provided by a trusted single source supplier who is able to provide flexible and integrated support over a 3 year contract term\. This was to replace the existing contract for these services that expired on 28th February 2023\. The contracting authority is seeking to procure services for: 1\) Managed Security Operations Centre \(SOC\) a\) Security monitoring, threat protection, threat hunting and incident response covering a digital estate of over 4000 endpoints and 300 servers, across Windows, Linux, and Cloud-based \(Azure\) operating systems and environments; b\) Incident investigations, triage, and response; c\) Vulnerability scanning of many IP ranges / hosts with remediation tracking\. 2\) Incident Response a\) Implementation of joint incident response processes for major incidents, out-of-band communication mechanisms, and management plans Incident investigations, triage, and response; b\) Forensic analysis of indicators of compromise and analysis of malware samples to understand the extent of a compromise should it occur; c\) Rapid remote interception of, containment of, and response to live cyber threats; d\) Triage and first response without requiring intervention from Ealing personnel; e\) This should be read and answered in conjunction with the SOC requirement as complimentary services/capabilities\. 3\) Penetration Testing a\) Security audits and assessment including penetration testing of web applications and infrastructure, configuration and build reviews, etc\.\.\. b\) IT Health Check Testing delivered by suitably qualified and experienced personnel, in accordance with NCSC Protocols; c\) 'Red Team' attack simulation services; d\) The supplier should be able to provide resourcing for approximately 100 days of penetration testing per annum\. The Council awarded a call off contract to Jumpsec Limited from the Crown Commercial Services Dynamic Purchasing System \(DPS\) "Cyber Security Services 3 - RM3764\.3", in accordance with the rules of the DPS for the provision of ICT Cyber Security Services for a duration of three years commencing on the 1 March 2023, with a budget of £0\.360m per annum\.

## Related contract awards

- [RE23074 Purchase of supermarket vouchers for household support fund](/contracts/ocds-b5fd17-25369438-8500-47a6-b08b-6a7361567b7f): London Borough of Ealing
- [RE23084 Valuations via CCS RM6168 Valuation &amp; Compulsory Purchase Orders](/contracts/ocds-b5fd17-3b8acb60-2905-4f71-8fea-3cdcf60bd9b6): London Borough of Ealing
- [CH232460 Content Management System &amp; Website Services 2024](/contracts/ocds-b5fd17-504f03c7-dc45-4f0f-a441-66516afefb6f): London Borough of Ealing
- [UKHSA - SH - Cyber Security Assurance](/contracts/ocds-b5fd17-68d27963-c3cb-4c08-a0a1-925ae1e87492): ATAMIS LTD
- [Achieving Cyber Essentials Plus](/contracts/ocds-b5fd17-329af4a7-9b37-4ffe-8b30-bb9f753621dc): ATAMIS LTD
- [LOTI Threat Intel Trial](/contracts/ocds-b5fd17-7260607f-21fb-4744-8674-d09c27f5c033): London Borough of Hackney

## Source

[View the original notice on Contracts Finder](https://www.contractsfinder.service.gov.uk/Notice/3e7779a1-4a2a-41dc-a1b2-68a3981d37e2-627351)
