Further Education Network Connectivity and Cyber Security Services (FENCCSS)

{
    "tag": [
        "compiled"
    ],
    "id": "ocds-h6vhtk-059d41-2025-12-15T13:07:07Z",
    "date": "2025-12-15T13:07:07Z",
    "ocid": "ocds-h6vhtk-059d41",
    "initiationType": "tender",
    "parties": [
        {
            "id": "GB-PPON-PDZG-3487-DPVD",
            "name": "Department for Education",
            "identifier": {
                "scheme": "GB-PPON",
                "id": "PDZG-3487-DPVD"
            },
            "address": {
                "streetAddress": "Sanctuary Buildings, 20 Great Smith Street",
                "locality": "London",
                "postalCode": "SW1P3BT",
                "country": "GB",
                "countryName": "United Kingdom",
                "region": "UKI32"
            },
            "contactPoint": {
                "email": "Technology.CATEGORY@education.gov.uk"
            },
            "roles": [
                "buyer"
            ],
            "details": {
                "url": "https://www.gov.uk/government/organisations/department-for-education",
                "classifications": [
                    {
                        "id": "publicAuthorityCentralGovernment",
                        "scheme": "UK_CA_TYPE",
                        "description": "Public authority - central government"
                    }
                ]
            }
        },
        {
            "id": "GB-COH-05747339",
            "name": "Jisc",
            "identifier": {
                "scheme": "GB-COH",
                "id": "05747339"
            },
            "address": {
                "streetAddress": "4 Portwall Lane",
                "locality": "Bristol",
                "postalCode": "BS1 6NB",
                "country": "GB",
                "countryName": "United Kingdom",
                "region": "UKK11"
            },
            "contactPoint": {
                "email": "funders@jisc.ac.uk"
            },
            "roles": [
                "supplier"
            ],
            "details": {
                "url": "https://www.jisc.ac.uk/",
                "scale": "large",
                "vcse": false,
                "publicServiceMissionOrganization": false,
                "shelteredWorkshop": false
            }
        }
    ],
    "buyer": {
        "id": "GB-PPON-PDZG-3487-DPVD",
        "name": "Department for Education"
    },
    "tender": {
        "id": "project_9790",
        "legalBasis": {
            "id": "2023/54",
            "scheme": "UKPGA",
            "uri": "https://www.legislation.gov.uk/ukpga/2023/54/contents"
        },
        "title": "Further Education Network Connectivity and Cyber Security Services (FENCCSS)",
        "description": "Contract to provide Connectivity, Cyber Security and Specialist Advisory Services to the Further Education sector in England. Overview of services required DfE is proposing to contract with Jisc to deliver a comprehensive digital infrastructure and support service for the Further Education (FE) sector in England via the Janet Network. The Janet Network is the UK's sole National Research and Education Network (NREN) linking up to the Gigabit European Academic Network (GEANT), the pan-European data network for the research and education community. The tertiary education sector including FE relies on the Janet Network for IT connectivity and cyber security (CS) (please also see \"Direct award justification\" below). The digital infrastructure and support services for the FE sector will encompass robust connectivity, sector-wide cyber security, and strategic ICT guidance. 1. Connectivity * Private WAN: Secure, resilient, symmetrical network connecting all In-Scope Institutions. * Dual Connections: Each institution to benefit from a second connection for improved resilience. * Performance Standards: High bandwidth (800Gb/s), high speed (1Gb/s), low latency (1-5ms), minimal packet loss and jitter. * Scalability & Upgrades: Network must scale with demand and support upgrades via separate contracts. * Interoperability: Direct access to global NRENs, GEANT, cloud platforms, and peering with relevant public and private networks. * Managed Services: Includes router management, DNS, IP address registry, network monitoring, maintenance (including hardware refresh) and support. * Network security: threat-driven, risk-based approach to implementing physical and virtual security measures to pre-empt and respond to emerging threats. 2. Cyber Security (please also see \"Direct award justification\" below) * Sector-Wide Scope: Services extend beyond the network to cover the entire UK tertiary education sector. * Threat Detection: Uses UK tertiary education-specific data to identify vulnerabilities and sector-unique threats. * CSIRT: A 24/7/365 incident response team offering expert support and coordinating multi-institutional responses. * Intelligence Sharing: Disseminates threat insights across the sector to improve collective resilience. * Government Integration: Collaborates with NCSC and other agencies; reports major incidents within 1-2 hours. * Quarterly Reporting: Includes incident summaries, trends, and recommendations for improvement. 3. Strategic Advice and Guidance (SAAG) * Proactive Sector-Wide Guidance: Free advice on ICT use in FE, covering (but not restricted to) curriculum, cyber security, cloud, AI, mergers, Ofsted improvement, and emerging technologies. * Bespoke Support: Customised advice available under separate contracts. * Named Relationship Managers: Each institution has a dedicated contact for ICT queries and access to SAAG. * Multi-Channel Delivery: Guidance provided via blogs, webinars, training, case studies, and more. * Performance & Reporting: Must meet service standards and be reported quarterly to the Buyer. Unique Requirements The proposed services reflect the unique requirements of the FE sector (please also see \"Direct award justification\" below), combining: * National-level infrastructure and cyber resilience, * Sector-specific intelligence and threat response, and * Strategic ICT leadership and policy support.",
        "status": "complete",
        "procurementMethod": "direct",
        "procurementMethodDetails": "Direct award",
        "procurementMethodRationale": "Jisc operates the Janet Network which is the UK's sole NREN linking up to GEANT, the pan-European data network for the research and education community. The tertiary education sector including Further Education (FE) relies on the Janet Network for IT connectivity and cyber security (CS). Jisc also hosts and operates the .ac.uk domain used by all UK tertiary education establishments, providing additional CS capability. Underpinning the Janet Network and therefore curriculum delivery and BAU operations of all FE colleges is the provision of appropriate CS. Combating the more serious cyber attacks (i.e. ransomware) requires the use of threat intelligence to identify, anticipate and mitigate attacks. In turn this requires a critical mass of network data to analyse. The Janet Network is a private network solely for tertiary education users and is therefore able to collect detailed data on network traffic and potential threats specific to the tertiary education sector. Only the Janet Network has access to the volume and quality of data needed to combat serious cyber attacks and the DfE Chief Information Security Officer has assessed that no other provider can offer the level of cyber security as appropriate for the sector. It is proposed to award the contract directly to Jisc that is not an excluded supplier because a direct award justification applies in accordance with section 41(1)(a) of the Procurement Act 2023. DfE is relying on the single supplier direct award justifications in paragraphs 6 and 5 of schedule 5 of the Procurement Act 2023: * paragraph 6 (a) due to an absence of competition for technical reasons, only a particular supplier can supply the goods, services or works required, and (b) there are no reasonable alternatives to those goods, services or works ; and * paragraph 5 (a) due to a particular supplier having intellectual property rights or other exclusive rights, only that supplier can supply the goods, services or works required, and (b) there are no reasonable alternatives to those goods, services or works. The explanations for why the justifications apply are as follows. Absence of competition for technical reasons - paragraph 6 This justification applies because all FE colleges obtain their connectivity from the Janet Network. Their use of the Janet Network also provides the data on which the CS services specifically tailored to FE institution are based. It is therefore not possible to separate the IT connectivity services from the CS services and both services need to be provided via the Janet Network, which is specifically configured to provide both connectivity services and specifically tailored CS services to FE institutions. No other internet service provider is able to provide the combination of IT connectivity services and bespoke CS services which are the direct result of the Janet Network being the UK's sole NREN. No reasonable alternative. In the absence of another NREN, the only potential alternative would be for another supplier to develop a replacement solution to the requirements for FE institutions which would require building a NREN from scratch with the features of being a private network for the tertiary education sector to provide the required IT connectivity services and specifically tailored CS. A replacement NREN would also be required to meet the stringent requirements of GEANT to continue being able to connect to it . In addition to creating such a replacement NREN which would create significant upfront costs, sufficient time for testing and mobilisation of that replacement NREN would also be required. There is not sufficient funding and time for any alternative supplier to design, build, test, and deploy an alternative solution to ensure the continuation of IT connectivity and CS services delivered via a NREN required for FE institutions to continue to provide education services to their students. Therefore, there are no reasonable alternatives. The second justification is intellectual property rights - paragraph 5 This justification applies because Jisc owns the intellectual property rights to the Janet Network, therefore only Jisc is able to provide the proposed services via the Janet Network. The same justifications regarding limb (a) of paragraph 6 of Schedule 5 of the PA also apply for limb (a) of paragraph 5 of Schedule 5 of the PA. No reasonable alternatives. The same justifications, stated above, for why there are no reasonable alternatives for paragraph 6 absence of competition for technical reasons, apply to the justification for paragraph 5. Therefore, there are no reasonable alternatives.",
        "procurementMethodRationaleClassifications": [
            {
                "id": "singleSuppliersIntellectualPropertyExclusiveRights"
            },
            {
                "id": "singleSuppliersTechnicalReasons"
            }
        ],
        "lots": [
            {
                "id": "1",
                "status": "complete"
            }
        ],
        "documents": [
            {
                "id": "conflictOfInterest",
                "documentType": "conflictOfInterest",
                "description": "Not published"
            }
        ],
        "riskDetails": "None."
    },
    "awards": [
        {
            "id": "1",
            "title": "Further Education Network Connectivity and Cyber Security Services (FENCCSS)",
            "status": "active",
            "value": {
                "amountGross": 50400000,
                "amount": 42000000,
                "currency": "GBP"
            },
            "mainProcurementCategory": "services",
            "aboveThreshold": true,
            "suppliers": [
                {
                    "id": "GB-COH-05747339",
                    "name": "Jisc"
                }
            ],
            "items": [
                {
                    "id": "1",
                    "additionalClassifications": [
                        {
                            "scheme": "CPV",
                            "id": "32412110",
                            "description": "Internet network"
                        },
                        {
                            "scheme": "CPV",
                            "id": "48730000",
                            "description": "Security software package"
                        },
                        {
                            "scheme": "CPV",
                            "id": "72220000",
                            "description": "Systems and technical consultancy services"
                        }
                    ],
                    "deliveryAddresses": [
                        {
                            "region": "UK",
                            "country": "GB",
                            "countryName": "United Kingdom"
                        },
                        {
                            "region": "UK",
                            "country": "GB",
                            "countryName": "United Kingdom"
                        },
                        {
                            "region": "UK",
                            "country": "GB",
                            "countryName": "United Kingdom"
                        }
                    ],
                    "relatedLot": "1"
                }
            ],
            "contractPeriod": {
                "startDate": "2025-10-01T00:00:00+01:00",
                "endDate": "2026-09-30T23:59:59+01:00",
                "maxExtentDate": "2028-09-30T23:59:59+01:00"
            },
            "hasRenewal": true,
            "renewal": {
                "description": "The Authority may exercise the option to extend the contract by providing the Supplier with no less than 3 months written notice before the contract expires."
            },
            "relatedLots": [
                "1"
            ],
            "documents": [
                {
                    "id": "057752-2025",
                    "documentType": "awardNotice",
                    "noticeType": "UK5",
                    "description": "Transparency notice on Find a Tender",
                    "url": "https://www.find-tender.service.gov.uk/Notice/057752-2025",
                    "datePublished": "2025-09-18T14:34:54+01:00",
                    "format": "text/html"
                },
                {
                    "id": "057860-2025",
                    "documentType": "awardNotice",
                    "noticeType": "UK6",
                    "description": "Contract award notice on Find a Tender",
                    "url": "https://www.find-tender.service.gov.uk/Notice/057860-2025",
                    "datePublished": "2025-09-18T16:31:13+01:00",
                    "format": "text/html"
                }
            ],
            "milestones": [
                {
                    "id": "1",
                    "type": "futureSignatureDate",
                    "dueDate": "2025-09-30T23:59:59+01:00",
                    "status": "scheduled"
                }
            ],
            "date": "2025-09-17T00:00:00+01:00",
            "standstillPeriod": {
                "endDate": "2025-09-29T23:59:59+01:00"
            }
        }
    ],
    "language": "en",
    "contracts": [
        {
            "id": "1",
            "awardID": "1",
            "status": "active",
            "period": {
                "startDate": "2025-12-01T00:00:00+00:00",
                "endDate": "2026-11-30T23:59:59+00:00",
                "maxExtentDate": "2028-11-30T23:59:59+00:00"
            },
            "hasRenewal": true,
            "renewal": {
                "description": "The Authority may exercise the option to extend the contract by providing the Supplier with no less than 3 months written notice before the contract expires."
            },
            "value": {
                "amountGross": 50400000,
                "amount": 42000000,
                "currency": "GBP"
            },
            "aboveThreshold": true,
            "dateSigned": "2025-11-19T00:00:00+00:00",
            "agreedMetrics": [
                {
                    "id": "1",
                    "title": "Connectivity: Availability",
                    "description": "Percentage of time during a Month (24/7/365) when the Network is Available, excluding periods of planned maintenance.",
                    "observations": [
                        {
                            "id": "frequency",
                            "period": {
                                "durationInMonths": 3
                            }
                        }
                    ]
                },
                {
                    "id": "2",
                    "title": "Connectivity: Network performance metrics"
                },
                {
                    "id": "3",
                    "title": "Connectivity: Incident triage time"
                },
                {
                    "id": "4",
                    "title": "Connectivity: Critical incident Response Time"
                },
                {
                    "id": "5",
                    "title": "Connectivity: High priority incident Response Time"
                },
                {
                    "id": "6",
                    "title": "Connectivity: Medium priority incident Response Time"
                },
                {
                    "id": "7",
                    "title": "Connectivity: Low priority incident Response Time"
                },
                {
                    "id": "8",
                    "title": "Connectivity: Critical incident resolution time",
                    "description": "Number of Critical incidents per Month responded to within: ([REDACTED] - Text redacted under Section 94(1)(a) PA23) during Business Hours and ([REDACTED] - Text redacted under Section 94(1)(a) PA23) during On-call Hours",
                    "observations": [
                        {
                            "id": "frequency",
                            "period": {
                                "durationInMonths": 3
                            }
                        }
                    ]
                },
                {
                    "id": "9",
                    "title": "Connectivity: High priority incident resolution time"
                },
                {
                    "id": "10",
                    "title": "Connectivity: Medium priority incident resolution time"
                },
                {
                    "id": "11",
                    "title": "Connectivity: Low priority incident resolution time"
                },
                {
                    "id": "12",
                    "title": "Cyber Security: Monitoring and threat detection"
                },
                {
                    "id": "13",
                    "title": "Cyber Security: Critical (P1) cyber incident notification"
                },
                {
                    "id": "14",
                    "title": "Cyber Security: High priority cyber incident notification"
                },
                {
                    "id": "15",
                    "title": "Cyber Security: Critical (P1) cyber incident tickets Response Time",
                    "description": "Number of Critical cyber incidents reported to CSIRT responded to within ([REDACTED] - Text redacted under Section 94(1)(a) PA23)",
                    "observations": [
                        {
                            "id": "frequency",
                            "period": {
                                "durationInMonths": 3
                            }
                        }
                    ]
                },
                {
                    "id": "16",
                    "title": "Cyber Security: High priority(P2) cyber incident tickets Response Time"
                },
                {
                    "id": "17",
                    "title": "Cyber Security: Medium priority(P3) cyber incident tickets Response Time"
                },
                {
                    "id": "18",
                    "title": "Cyber Security: Low priority(P4) cyber incident tickets Response Time"
                },
                {
                    "id": "19",
                    "title": "Specialist Advice and Guidance: Quarterly report submissions"
                },
                {
                    "id": "20",
                    "title": "Specialist Advice and Guidance: Annual satisfaction surveys"
                },
                {
                    "id": "21",
                    "title": "Social Value: Number of training opportunities (Level 2, 3, and 4+) other than apprentices created or retained under this contract"
                },
                {
                    "id": "22",
                    "title": "Social Value: Number of people-hours of learning interventions delivered under this Contract, by UK region"
                }
            ],
            "documents": [
                {
                    "id": "076459-2025",
                    "documentType": "contractNotice",
                    "noticeType": "UK7",
                    "description": "Contract details notice on Find a Tender",
                    "url": "https://www.find-tender.service.gov.uk/Notice/076459-2025",
                    "datePublished": "2025-11-24T13:07:42Z",
                    "format": "text/html"
                },
                {
                    "id": "A-9173",
                    "documentType": "contractSigned",
                    "description": "Redacted Contract",
                    "url": "https://www.find-tender.service.gov.uk/Notice/Attachment/A-9173",
                    "format": "application/zip"
                },
                {
                    "id": "082882-2025",
                    "documentType": "contractNotice",
                    "noticeType": "UK7",
                    "description": "Contract details notice on Find a Tender",
                    "url": "https://www.find-tender.service.gov.uk/Notice/082882-2025",
                    "datePublished": "2025-12-15T13:07:07Z",
                    "format": "text/html"
                }
            ],
            "title": "FENCCSS (Further Education Network & Cyber Security Services)",
            "amendments": [
                {
                    "id": "082882-2025",
                    "description": "1. Included details of the top 3 KPIs of this contract. 2. Included redacted version of the contract."
                }
            ]
        }
    ]
}