# GB-London: CON-21-129 Priority Asset Management

> Contract award record from UK public-sector procurement sources.

## Key facts

- Public buyer: [Financial Conduct Authority](/buyers/financial-conduct-authority/contract-awards)
- Contract winner: [Softcat Plc](/contract-winners/softcat/public-sector-contract-awards)
- Award value: £37,330
- Tender value: £37,330
- Award date: 22 November 2021
- Published: 5 September 2022
- Contract start: 1 September 2022
- Contract end: 31 August 2024
- Stage: awarded
- Procurement category: services
- Notice ID: 7b72d9f4-cdc2-4097-9a34-ef7ee43e1e9a-568869
- OCID: ocds-b5fd17-4bb8cc60-045c-4f5d-a2e7-2cc352effb1b

## Description

A Privileged Access Management \(PAM\) Solution that will include contracting with a 3rd party to initially procure their PAM tool and start onboarding some Pilot systems before rollout across the in-scope systems in the organisation\. Our IT administrators have complete control over the systems they control and can access large volumes of data, possibly sensitive or insider information\. Many are not FCA employees\. A large proportion are offshore employees of our suppliers\. We place a very high degree of trust in them\. Whilst we vet them, this is an imperfect control\. Administrator accounts are increasingly being hacked into and used to spread disruptive ransomware within organisations\. We have seen examples of high-value bribes being offered to IT administrators by organised criminal gangs\. The FCA currently has inadequate controls for privileged access to our systems\. Although a range of manual mitigation actions are underway, best practice indicates that managing privileged access, given the evolving threat landscape, is not possible without a specialised PAM tool\. It is anticipated that the solution will introduce best practices and more granular control of how IT administrators access FCA systems\. It is also expected that the solution will assist in mitigating the identified corporate risks of unauthorised access and the abuse of such access\. Additional information: Awarded via G-Cloud 12 Framework

## Related contract awards

- [PSN Support Services](/contracts/ocds-b5fd17-c97548a5-5177-4638-bcb6-d5ef52e7ebdd): Financial Conduct Authority
- [Architectural Services](/contracts/ocds-b5fd17-4f024fad-f51c-40f6-b8a7-065cc0092f05): Financial Conduct Authority
- [Support services for Tableau Cloud](/contracts/ocds-b5fd17-59eb8966-7eff-4558-a342-970960bf53ea): Financial Conduct Authority
- [DDaT26245 - Cloud Security Subscription](/contracts/ocds-b5fd17-831b0b96-b736-477f-9518-ccc4e5c24035): UK SHARED BUSINESS SERVICES LIMITED
- [Project and Portfolio management](/contracts/ocds-b5fd17-bb64a6a8-0630-4570-8bb3-c62e7a2e53b1): UK SHARED BUSINESS SERVICES LIMITED
- [UKSBS ServiceNow renewal](/contracts/ocds-b5fd17-3035c8b4-7c73-4c49-b382-ce988dc4c3fc): UK SHARED BUSINESS SERVICES LIMITED

## Source

[View the original notice on Contracts Finder](https://www.contractsfinder.service.gov.uk/Notice/7b72d9f4-cdc2-4097-9a34-ef7ee43e1e9a-568869)