# Cyber Risk Tooling - Design Phase

> Contract award record from UK public-sector procurement sources.

## Key facts

- Public buyer: [MINISTRY OF DEFENCE](/buyers/ministry-of-defence/contract-awards)
- Contract winner: [PA CONSULTING SERVICES LIMITED](/contract-winners/pa-consulting-services/public-sector-contract-awards)
- Award value: £69,964
- Tender value: £69,964
- Award date: 19 September 2019
- Published: 21 November 2019
- Contract start: 25 November 2019
- Contract end: 17 January 2020
- Stage: awarded
- Procurement category: services
- Notice ID: 17194694-2cb0-486a-afee-28e0a116eb79-327653
- OCID: ocds-b5fd17-c5f906de-ae42-4593-a38f-2978bc0a9111

## Description

Summary of work: Designing of a tool base that ingests and Analyses all cyber risk data, aligned with the Joint User vision\. Production of a Stakeholder Map\. Understand User Requirements/available data\. Analysis of existing capability\. Creation of costed options for the Development Phase\. Outline of Skills and experience required for the next phase\. The Cyber Risk Management Function \(part of the MOD's Cyber Security Operations Capability \(CSOC\)\) requires a set of tools that will allow for automation of the ingestion, storage, analysis and exploitation of Cyber risks, and informing data, to keep pace with the increasing level of cyber risks being discovered\. The Cyber Risk tooling capability is required by September 2019 to fall in line with programme expansion and roll out\. This Design Phase is to scope what can be delivered by this deadline\. Additional support is required to fulfil the Design Phase of the project, ensuring that an appropriate solution is defined that will offer a stable foundation and scalable configuration for the growing cyber risk management capability, while providing immediate benefit to users\. The foundations will allow for the ingest of all cyber risk-related data such as threats, vulnerabilities, cyber events and incidents data\. This will also permit rapid broadening of the data import, analytics and data exploitation capabilities, which will allow the MOD to understand its cyber risk exposure and the prioritised risks that need treatment\. Ministry of Defence - primarily the Cyber Risk Management Team in C4ISR & Cyber Joint User and the Defence Assurance and Information Security \(DAIS\) team, with growth across the MOD in time\. The user's need includes a design for an automated method of ingesting, storing and analysing of Cyber Risks based on an existing big data platform\.

## Related contract awards

- [IT HARDWARE FOR AOS 147 - Contract Award Notice](/contracts/ocds-b5fd17-ead48511-32f6-4cec-838f-d22710caa4f0): Ministry of Defence
- [EITSD Legal Support Contract Award Notice](/contracts/ocds-b5fd17-91508ab7-4066-4017-801c-af8e44967069): Ministry of Defence
- [Tactical Hearing Protection System Specialist User \(THPS SU\) Attrition Stock](/contracts/ocds-b5fd17-9c49a0f6-8207-4d1e-a3b8-3ce1211a447e): MINISTRY OF DEFENCE
- [Enterprise Asset Management](/contracts/ocds-b5fd17-86728be0-3e2b-4006-8d94-228bcd3b41ed): Sellafield Ltd
- [RegEx - Comms Analyst Support](/contracts/ocds-b5fd17-d6bbc6a3-096f-4d63-92f0-03e2ab5c2b2d): FCA
- [WHTHT - NHP Business Case Advisor](/contracts/ocds-b5fd17-8ff99e56-6ccd-4d2a-aa9f-89b80c78bc66): West Hertfordshire Teaching Hospitals NHS Trust

## Source

[View the original notice on Contracts Finder](https://www.contractsfinder.service.gov.uk/Notice/17194694-2cb0-486a-afee-28e0a116eb79-327653)