Notice Information
Notice Title
GB-London: CON-21-129 Priority Asset Management
Notice Description
A Privileged Access Management (PAM) Solution that will include contracting with a 3rd party to initially procure their PAM tool and start onboarding some Pilot systems before rollout across the in-scope systems in the organisation. Our IT administrators have complete control over the systems they control and can access large volumes of data, possibly sensitive or insider information. Many are not FCA employees. A large proportion are offshore employees of our suppliers. We place a very high degree of trust in them. Whilst we vet them, this is an imperfect control. Administrator accounts are increasingly being hacked into and used to spread disruptive ransomware within organisations. We have seen examples of high-value bribes being offered to IT administrators by organised criminal gangs. The FCA currently has inadequate controls for privileged access to our systems. Although a range of manual mitigation actions are underway, best practice indicates that managing privileged access, given the evolving threat landscape, is not possible without a specialised PAM tool. It is anticipated that the solution will introduce best practices and more granular control of how IT administrators access FCA systems. It is also expected that the solution will assist in mitigating the identified corporate risks of unauthorised access and the abuse of such access. Additional information: Awarded via G-Cloud 12 Framework
Notice Details
Publication & Lifecycle
- Open Contracting ID
- ocds-b5fd17-4bb8cc60-045c-4f5d-a2e7-2cc352effb1b
- Publication Source
- Contracts Finder
- Latest Notice
- https://www.contractsfinder.service.gov.uk/Notice/7b72d9f4-cdc2-4097-9a34-ef7ee43e1e9a
- Current Stage
- Award
- All Stages
- Award
Procurement Classification
- Notice Type
- Award Notice
- Procurement Type
- Standard
- Procurement Category
- Services
- Procurement Method
- Not Specified
- Procurement Method Details
- Not specified
- Tender Suitability
- Not specified
- Awardee Scale
- Large
Common Procurement Vocabulary (CPV)
- CPV Divisions
48 - Software package and information systems
-
- CPV Codes
48900000 - Miscellaneous software package and computer systems
Notice Value(s)
- Tender Value
- £37,329 Under £100K
- Lots Value
- Not specified
- Awards Value
- £37,329 Under £100K
- Contracts Value
- Not specified
Notice Dates
- Publication Date
- 5 Sep 20223 years ago
- Submission Deadline
- 22 Nov 2021Expired
- Future Notice Date
- Not specified
- Award Date
- 22 Nov 20214 years ago
- Contract Period
- 31 Aug 2022 - 31 Aug 2024 2-3 years
- Recurrence
- Not specified
Notice Status
- Tender Status
- Complete
- Lots Status
- Not Specified
- Awards Status
- Active
- Contracts Status
- Not Specified
Buyer & Supplier
Contracting Authority (Buyer)
- Main Buyer
- FINANCIAL CONDUCT AUTHORITY
- Contact Name
- Phil Lamacraft
- Contact Email
- fcaprocurement@fca.org.uk
- Contact Phone
- 02070661000
Buyer Location
- Locality
- LONDON
- Postcode
- E20 1JN
- Post Town
- East London
- Country
- England
-
- Major Region (ITL 1)
- TLI London
- Basic Region (ITL 2)
- TLI4 Inner London - East
- Small Region (ITL 3)
- TLI41 Hackney and Newham
- Delivery Location
- TLI London
-
- Local Authority
- Newham
- Electoral Ward
- Stratford Olympic Park
- Westminster Constituency
- Stratford and Bow
Further Information
Notice Documents
-
https://www.contractsfinder.service.gov.uk/Notice/7b72d9f4-cdc2-4097-9a34-ef7ee43e1e9a
5th September 2022 - Awarded contract notice on Contracts Finder -
https://www.delta-esourcing.com/delta/respondToList.html?noticeId=718696329
Please follow this link to view the notice.
Open Contracting Data Standard (OCDS)
View full OCDS Record for this contracting process
The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.
{
"tag": [
"compiled"
],
"id": "ocds-b5fd17-4bb8cc60-045c-4f5d-a2e7-2cc352effb1b-2022-09-05T13:55:04+01:00",
"date": "2022-09-05T13:55:04+01:00",
"ocid": "ocds-b5fd17-4bb8cc60-045c-4f5d-a2e7-2cc352effb1b",
"language": "en",
"initiationType": "tender",
"tender": {
"id": "BIP718696329",
"title": "GB-London: CON-21-129 Priority Asset Management",
"description": "A Privileged Access Management (PAM) Solution that will include contracting with a 3rd party to initially procure their PAM tool and start onboarding some Pilot systems before rollout across the in-scope systems in the organisation. Our IT administrators have complete control over the systems they control and can access large volumes of data, possibly sensitive or insider information. Many are not FCA employees. A large proportion are offshore employees of our suppliers. We place a very high degree of trust in them. Whilst we vet them, this is an imperfect control. Administrator accounts are increasingly being hacked into and used to spread disruptive ransomware within organisations. We have seen examples of high-value bribes being offered to IT administrators by organised criminal gangs. The FCA currently has inadequate controls for privileged access to our systems. Although a range of manual mitigation actions are underway, best practice indicates that managing privileged access, given the evolving threat landscape, is not possible without a specialised PAM tool. It is anticipated that the solution will introduce best practices and more granular control of how IT administrators access FCA systems. It is also expected that the solution will assist in mitigating the identified corporate risks of unauthorised access and the abuse of such access. Additional information: Awarded via G-Cloud 12 Framework",
"status": "complete",
"classification": {
"scheme": "CPV",
"id": "48900000",
"description": "Miscellaneous software package and computer systems"
},
"items": [
{
"id": "1",
"deliveryAddresses": [
{
"region": "London",
"countryName": "United Kingdom"
}
]
}
],
"value": {
"amount": 37329.76,
"currency": "GBP"
},
"procurementMethodDetails": "Not specified",
"tenderPeriod": {
"endDate": "2021-11-22T00:00:00Z"
},
"contractPeriod": {
"startDate": "2022-09-01T00:00:00+01:00",
"endDate": "2024-08-31T23:59:59+01:00"
},
"suitability": {
"sme": false,
"vcse": false
},
"mainProcurementCategory": "services"
},
"parties": [
{
"id": "GB-CFS-112585",
"name": "Financial Conduct Authority",
"identifier": {
"legalName": "Financial Conduct Authority"
},
"address": {
"streetAddress": "12 Endeavour Square",
"locality": "London",
"postalCode": "E20 1JN",
"countryName": "UK"
},
"contactPoint": {
"name": "Phil Lamacraft",
"email": "fcaprocurement@fca.org.uk",
"telephone": "02070661000"
},
"roles": [
"buyer"
]
},
{
"id": "GB-CFS-218356",
"name": "Softcat Plc",
"identifier": {
"legalName": "Softcat Plc"
},
"address": {
"streetAddress": "Thames Industrial Estate Fieldhouse Lane Marlow SL7 1LW"
},
"details": {
"scale": "large"
},
"roles": [
"supplier"
]
}
],
"buyer": {
"id": "GB-CFS-112585",
"name": "Financial Conduct Authority"
},
"awards": [
{
"id": "ocds-b5fd17-4bb8cc60-045c-4f5d-a2e7-2cc352effb1b-1",
"status": "active",
"date": "2021-11-22T00:00:00Z",
"datePublished": "2022-09-05T13:55:04+01:00",
"value": {
"amount": 37329.76,
"currency": "GBP"
},
"suppliers": [
{
"id": "GB-CFS-218356",
"name": "Softcat Plc"
}
],
"contractPeriod": {
"startDate": "2022-09-01T00:00:00+01:00",
"endDate": "2024-08-31T23:59:59+01:00"
},
"documents": [
{
"id": "1",
"documentType": "awardNotice",
"description": "Awarded contract notice on Contracts Finder",
"url": "https://www.contractsfinder.service.gov.uk/Notice/7b72d9f4-cdc2-4097-9a34-ef7ee43e1e9a",
"datePublished": "2022-09-05T13:55:04+01:00",
"format": "text/html",
"language": "en"
},
{
"id": "2",
"documentType": "tenderNotice",
"description": "Please follow this link to view the notice.",
"url": "https://www.delta-esourcing.com/delta/respondToList.html?noticeId=718696329"
}
]
}
]
}