ScotRail Cyber Security Architecture

{
    "tag": [
        "compiled"
    ],
    "id": "ocds-r6ebe6-0000730055-2024-03-25T00:00:00Z",
    "date": "2024-03-25T00:00:00Z",
    "ocid": "ocds-r6ebe6-0000730055",
    "initiationType": "tender",
    "parties": [
        {
            "id": "org-1",
            "name": "ScotRail Trains Ltd",
            "identifier": {
                "legalName": "ScotRail Trains Ltd"
            },
            "address": {
                "streetAddress": "Atrium Court, , 50 Waterloo Street",
                "locality": "Glasgow",
                "region": "UKM"
            },
            "contactPoint": {
                "name": "Kathleen Gay",
                "email": "kathleen.gay@scotrail.co.uk",
                "telephone": "+44 3448110141",
                "url": "http://"
            },
            "roles": [
                "buyer",
                "centralPurchasingBody"
            ],
            "details": {
                "classifications": [
                    {
                        "id": "Railway services",
                        "scheme": "TED_CE_ACTIVITY"
                    }
                ],
                "url": "https://www.scotrail.co.uk/"
            }
        },
        {
            "id": "org-2",
            "name": "NCC Group Security Services Limited",
            "identifier": {
                "legalName": "NCC Group Security Services Limited"
            },
            "address": {
                "locality": "MANCHESTER",
                "streetAddress": "XYZ Building, 2 Hardman Boulevard, Spinningfields,",
                "region": "UK",
                "postalCode": "M3 3AQ"
            },
            "contactPoint": {
                "url": "http://",
                "telephone": "+44 1612095200"
            },
            "roles": [
                "supplier"
            ],
            "details": {
                "scale": "large",
                "url": "http://"
            }
        },
        {
            "id": "org-3",
            "name": "Glasgow Sheriff Court",
            "identifier": {
                "legalName": "Glasgow Sheriff Court"
            },
            "address": {
                "locality": "Glasgow"
            },
            "contactPoint": {
                "url": "http://"
            },
            "roles": [
                "reviewBody"
            ]
        }
    ],
    "buyer": {
        "name": "ScotRail Trains Ltd",
        "id": "org-1"
    },
    "tender": {
        "id": "SR032",
        "title": "ScotRail Cyber Security Architecture",
        "description": "ScotRail Trains Limited (SRT) invites prospective suppliers to participate in this procurement process to become a key partner in supporting the modernisation of the existing IT cyber security architecture. With the following key objectives: Implement 24-7 managed detection and response capability; Provide a seamless protection and management for privileged accounts; Rationalise and/or integrate and mesh cyber security systems together to ensure events are correlated and a view can be taken across multiple systems; Improve ScotRail's ability to prevent cyber security events and breaches; Improve ScotRail's ability to detect cyber security events and breaches; Improve ScotRail's ability to contain cyber security events and breaches; Improve ScotRail's ability to recover from security events and breaches",
        "status": "complete",
        "items": [
            {
                "id": "1",
                "additionalClassifications": [
                    {
                        "id": "48000000",
                        "scheme": "CPV"
                    }
                ],
                "deliveryAddresses": [
                    {
                        "region": "UKM"
                    }
                ],
                "relatedLot": "1"
            },
            {
                "id": "2",
                "additionalClassifications": [
                    {
                        "id": "48000000",
                        "scheme": "CPV"
                    }
                ],
                "deliveryAddresses": [
                    {
                        "region": "UKM"
                    },
                    {
                        "region": "UKM"
                    }
                ],
                "relatedLot": "2"
            },
            {
                "id": "3",
                "additionalClassifications": [
                    {
                        "id": "48000000",
                        "scheme": "CPV"
                    }
                ],
                "deliveryAddresses": [
                    {
                        "region": "UKM"
                    },
                    {
                        "region": "UKM"
                    }
                ],
                "relatedLot": "3"
            },
            {
                "id": "4",
                "additionalClassifications": [
                    {
                        "id": "48000000",
                        "scheme": "CPV"
                    }
                ],
                "deliveryAddresses": [
                    {
                        "region": "UKM"
                    },
                    {
                        "region": "UKM"
                    }
                ],
                "relatedLot": "4"
            },
            {
                "id": "5",
                "additionalClassifications": [
                    {
                        "id": "48000000",
                        "scheme": "CPV"
                    }
                ],
                "deliveryAddresses": [
                    {
                        "region": "UKM"
                    },
                    {
                        "region": "UKM"
                    }
                ],
                "relatedLot": "5"
            }
        ],
        "procurementMethod": "selective",
        "procurementMethodDetails": "Negotiated procedure with prior call for competition",
        "mainProcurementCategory": "goods",
        "submissionMethod": [
            "electronicSubmission"
        ],
        "submissionMethodDetails": "https://scotrail.wax-live.com/S2C/DisplayModules/TradeModules/Negotiations/Opportunities/ListEvents.aspx",
        "tenderPeriod": {
            "endDate": "2023-05-24T17:00:00Z"
        },
        "documents": [
            {
                "id": "APR476869",
                "documentType": "contractNotice",
                "title": "ScotRail Cyber Security Architecture",
                "description": "ScotRail Trains Limited (SRT) invites prospective suppliers to participate in this procurement process to become a key partner in supporting the modernisation of the existing IT cyber security architecture. With the following key objectives: Implement 24-7 managed detection and response capability; Provide a seamless protection and management for privileged accounts; Rationalise and/or integrate and mesh cyber security systems together to ensure events are correlated and a view can be taken across multiple systems; Improve ScotRail's ability to prevent cyber security events and breaches; Improve ScotRail's ability to detect cyber security events and breaches; Improve ScotRail's ability to contain cyber security events and breaches; Improve ScotRail's ability to recover from security events and breaches",
                "url": "https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=APR476869",
                "format": "text/html"
            },
            {
                "id": "economic",
                "documentType": "economicSelectionCriteria"
            },
            {
                "id": "technical",
                "documentType": "technicalSelectionCriteria"
            },
            {
                "id": "MAR501670",
                "documentType": "awardNotice",
                "title": "ScotRail Cyber Security Architecture",
                "description": "ScotRail Trains Limited (SRT) invites prospective suppliers to participate in this procurement process to become a key partner in supporting the modernisation of the existing IT cyber security architecture. With the following key objectives: Implement 24-7 managed detection and response capability; Provide a seamless protection and management for privileged accounts; Rationalise and/or integrate and mesh cyber security systems together to ensure events are correlated and a view can be taken across multiple systems; Improve ScotRail's ability to prevent cyber security events and breaches; Improve ScotRail's ability to detect cyber security events and breaches; Improve ScotRail's ability to contain cyber security events and breaches; Improve ScotRail's ability to recover from security events and breaches",
                "url": "https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=MAR501670",
                "format": "text/html"
            }
        ],
        "lots": [
            {
                "id": "1",
                "title": "Privileged Access Management (PAM)",
                "description": "ScotRail Trains Limited (SRT) invites prospective suppliers to participate in this procurement process to become a key partner in supporting the modernisation of the existing IT cyber security architecture. With the following key objectives: Implement 24-7 managed detection and response capability; Provide a seamless protection and management for privileged accounts; Rationalise and/or integrate and mesh cyber security systems together to ensure events are correlated and a view can be taken across multiple systems; Improve ScotRail's ability to prevent cyber security events and breaches; Improve ScotRail's ability to detect cyber security events and breaches; Improve ScotRail's ability to contain cyber security events and breaches; Improve ScotRail's ability to recover from security events and breaches. The opportunity is split into the following Lots and suppliers are invited to apply for 1 or multiple lots: - Lot 1 - Privileged Access Management (PAM) - Lot 2 - Lot 2 - Security Information and Event Management (SIEM) - Lot 3 - Extended Detection and Response (XDR) - Lot 4 - Endpoint Detection and Response (EDR) - Lot 5 - Managed Detection and Response (MDR) The full business requirements for each Lot are contained in the 'ScotRail Requirements Document - Cyber Security Architecture' which can be accessed through the link to the E-Sourcing portal and clicking on the event for Cyber Security Architecture (https://scotrail.wax-live.com/S2C/DisplayModules/TradeModules/Negotiations/Opportunities/ListEvents.aspx). https://scotrail.wax-live.com/S2C/DisplayModules/TradeModules/Negotiations/Opportunities/ListEvents.aspx",
                "status": "active",
                "hasOptions": false,
                "secondStage": {
                    "minimumCandidates": 1
                },
                "submissionTerms": {
                    "variantPolicy": "notAllowed"
                },
                "contractPeriod": {
                    "durationInDays": 1080
                },
                "hasRenewal": true,
                "renewal": {
                    "description": "The proposed contract term is a 3 year initial term, with the option to extend this for a potential further 2 or 4 years, this will be explored and confirmed at the ITN stage."
                }
            },
            {
                "id": "2",
                "title": "Security Information and Event Management (SIEM)",
                "description": "ScotRail Trains Limited (SRT) invites prospective suppliers to participate in this procurement process to become a key partner in supporting the modernisation of the existing IT cyber security architecture. With the following key objectives: Implement 24-7 managed detection and response capability; Provide a seamless protection and management for privileged accounts; Rationalise and/or integrate and mesh cyber security systems together to ensure events are correlated and a view can be taken across multiple systems; Improve ScotRail's ability to prevent cyber security events and breaches; Improve ScotRail's ability to detect cyber security events and breaches; Improve ScotRail's ability to contain cyber security events and breaches; Improve ScotRail's ability to recover from security events and breaches The opportunity is split into the following Lots and suppliers are invited to apply for 1 or multiple lots: - Lot 1 - Privileged Access Management (PAM) - Lot 2 - Lot 2 - Security Information and Event Management (SIEM) - Lot 3 - Extended Detection and Response (XDR) - Lot 4 - Endpoint Detection and Response (EDR) - Lot 5 - Managed Detection and Response (MDR)",
                "status": "complete",
                "hasOptions": false,
                "secondStage": {
                    "minimumCandidates": 1
                },
                "submissionTerms": {
                    "variantPolicy": "notAllowed"
                },
                "contractPeriod": {
                    "durationInDays": 1080
                },
                "hasRenewal": true,
                "renewal": {
                    "description": "The proposed contract term is a 3 year initial terms, with the option to extend this for a potential further 3 or 4 years, this will be explored and confirmed at the ITN stage."
                }
            },
            {
                "id": "3",
                "title": "Extended Detection and Response (XDR)",
                "description": "ScotRail Trains Limited (SRT) invites prospective suppliers to participate in this procurement process to become a key partner in supporting the modernisation of the existing IT cyber security architecture. With the following key objectives: Implement 24-7 managed detection and response capability; Provide a seamless protection and management for privileged accounts; Rationalise and/or integrate and mesh cyber security systems together to ensure events are correlated and a view can be taken across multiple systems; Improve ScotRail's ability to prevent cyber security events and breaches; Improve ScotRail's ability to detect cyber security events and breaches; Improve ScotRail's ability to contain cyber security events and breaches; Improve ScotRail's ability to recover from security events and breaches The opportunity is split into the following Lots and suppliers are invited to apply for 1 or multiple lots: - Lot 1 - Privileged Access Management (PAM) - Lot 2 - Lot 2 - Security Information and Event Management (SIEM) - Lot 3 - Extended Detection and Response (XDR) - Lot 4 - Endpoint Detection and Response (EDR) - Lot 5 - Managed Detection and Response (MDR)",
                "status": "complete",
                "hasOptions": false,
                "secondStage": {
                    "minimumCandidates": 1
                },
                "submissionTerms": {
                    "variantPolicy": "notAllowed"
                },
                "contractPeriod": {
                    "durationInDays": 1080
                },
                "hasRenewal": true,
                "renewal": {
                    "description": "The proposed contract term is a 3 year initial terms, with the option to extend this for a potential further 3 or 4 years, this will be explored and confirmed at the ITN stage."
                }
            },
            {
                "id": "4",
                "title": "Endpoint Detection and Response (EDR)",
                "description": "ScotRail Trains Limited (SRT) invites prospective suppliers to participate in this procurement process to become a key partner in supporting the modernisation of the existing IT cyber security architecture. With the following key objectives: Implement 24-7 managed detection and response capability; Provide a seamless protection and management for privileged accounts; Rationalise and/or integrate and mesh cyber security systems together to ensure events are correlated and a view can be taken across multiple systems; Improve ScotRail's ability to prevent cyber security events and breaches; Improve ScotRail's ability to detect cyber security events and breaches; Improve ScotRail's ability to contain cyber security events and breaches; Improve ScotRail's ability to recover from security events and breaches The opportunity is split into the following Lots and suppliers are invited to apply for 1 or multiple lots: - Lot 1 - Privileged Access Management (PAM) - Lot 2 - Lot 2 - Security Information and Event Management (SIEM) - Lot 3 - Extended Detection and Response (XDR) - Lot 4 - Endpoint Detection and Response (EDR) - Lot 5 - Managed Detection and Response (MDR)",
                "status": "complete",
                "hasOptions": false,
                "secondStage": {
                    "minimumCandidates": 1
                },
                "submissionTerms": {
                    "variantPolicy": "notAllowed"
                },
                "contractPeriod": {
                    "durationInDays": 1080
                },
                "hasRenewal": true,
                "renewal": {
                    "description": "The proposed contract term is a 3 year initial terms, with the option to extend this for a potential further 3 or 4 years, this will be explored and confirmed at the ITN stage."
                }
            },
            {
                "id": "5",
                "title": "Managed Detection and Response (MDR)",
                "description": "ScotRail Trains Limited (SRT) invites prospective suppliers to participate in this procurement process to become a key partner in supporting the modernisation of the existing IT cyber security architecture. With the following key objectives: Implement 24-7 managed detection and response capability; Provide a seamless protection and management for privileged accounts; Rationalise and/or integrate and mesh cyber security systems together to ensure events are correlated and a view can be taken across multiple systems; Improve ScotRail's ability to prevent cyber security events and breaches; Improve ScotRail's ability to detect cyber security events and breaches; Improve ScotRail's ability to contain cyber security events and breaches; Improve ScotRail's ability to recover from security events and breaches The opportunity is split into the following Lots and suppliers are invited to apply for 1 or multiple lots: - Lot 1 - Privileged Access Management (PAM) - Lot 2 - Lot 2 - Security Information and Event Management (SIEM) - Lot 3 - Extended Detection and Response (XDR) - Lot 4 - Endpoint Detection and Response (EDR) - Lot 5 - Managed Detection and Response (MDR)",
                "status": "complete",
                "hasOptions": false,
                "secondStage": {
                    "minimumCandidates": 1
                },
                "submissionTerms": {
                    "variantPolicy": "notAllowed"
                },
                "contractPeriod": {
                    "durationInDays": 1080
                },
                "hasRenewal": true,
                "renewal": {
                    "description": "The proposed contract term is a 3 year initial terms, with the option to extend this for a potential further 3 or 4 years, this will be explored and confirmed at the ITN stage."
                }
            }
        ],
        "lotDetails": {
            "maximumLotsBidPerSupplier": 2147483647
        },
        "contractTerms": {
            "hasElectronicPayment": true,
            "hasElectronicOrdering": true,
            "electronicInvoicingPolicy": "allowed"
        },
        "coveredBy": [
            "GPA"
        ],
        "secondStage": {
            "successiveReduction": true,
            "invitationDate": "2023-07-31T00:00:00Z"
        },
        "submissionTerms": {
            "languages": [
                "en"
            ]
        },
        "classification": {
            "id": "48000000",
            "scheme": "CPV"
        },
        "hasRecurrence": false,
        "legalBasis": {
            "id": "32014L0025",
            "scheme": "CELEX"
        }
    },
    "language": "EN",
    "description": "(SC Ref:761953)",
    "links": [
        {
            "rel": "canonical",
            "href": "https://api.publiccontractsscotland.gov.uk/v1/Notice?id=ocds-r6ebe6-0000730055"
        },
        {
            "rel": "canonical",
            "href": "https://api.publiccontractsscotland.gov.uk/v1/Notice?id=ocds-r6ebe6-0000730055"
        }
    ],
    "noticetype": "OJEU - F6 - Contract Award Notice (Utilities)",
    "awards": [
        {
            "id": "SR032-1",
            "title": "Security Information and Event Management (SIEM)",
            "suppliers": [
                {
                    "id": "org-2",
                    "name": "NCC Group Security Services Limited"
                }
            ],
            "relatedLots": [
                "2"
            ]
        },
        {
            "id": "SR032-2",
            "title": "Extended Detection and Response (XDR)",
            "suppliers": [
                {
                    "id": "org-2",
                    "name": "NCC Group Security Services Limited"
                }
            ],
            "relatedLots": [
                "3"
            ]
        },
        {
            "id": "SR032-3",
            "title": "Endpoint Detection and Response (EDR)",
            "suppliers": [
                {
                    "id": "org-2",
                    "name": "NCC Group Security Services Limited"
                }
            ],
            "relatedLots": [
                "4"
            ]
        },
        {
            "id": "SR032-4",
            "title": "Managed Detection and Response (MDR)",
            "suppliers": [
                {
                    "id": "org-2",
                    "name": "NCC Group Security Services Limited"
                }
            ],
            "relatedLots": [
                "5"
            ]
        }
    ],
    "contracts": [
        {
            "id": "SR032-1",
            "awardID": "SR032-1",
            "title": "Security Information and Event Management (SIEM)",
            "status": "active",
            "dateSigned": "2024-02-27T00:00:00Z"
        },
        {
            "id": "SR032-2",
            "awardID": "SR032-2",
            "title": "Extended Detection and Response (XDR)",
            "status": "active",
            "dateSigned": "2024-02-27T00:00:00Z"
        },
        {
            "id": "SR032-3",
            "awardID": "SR032-3",
            "title": "Endpoint Detection and Response (EDR)",
            "status": "active",
            "dateSigned": "2024-02-27T00:00:00Z"
        },
        {
            "id": "SR032-4",
            "awardID": "SR032-4",
            "title": "Managed Detection and Response (MDR)",
            "status": "active",
            "dateSigned": "2024-02-27T00:00:00Z"
        }
    ],
    "relatedProcesses": [
        {
            "id": "1",
            "relationship": [
                "planning"
            ],
            "scheme": "EU-OJ",
            "identifier": "2023/S 000-011496"
        }
    ],
    "bids": {
        "statistics": [
            {
                "id": "1",
                "measure": "bids",
                "value": 13,
                "relatedLot": "2"
            },
            {
                "id": "2",
                "measure": "smeBids",
                "value": 6,
                "relatedLot": "2"
            },
            {
                "id": "3",
                "measure": "foreignBidsFromEU",
                "value": 0,
                "relatedLot": "2"
            },
            {
                "id": "4",
                "measure": "foreignBidsFromNonEU",
                "value": 13,
                "relatedLot": "2"
            },
            {
                "id": "5",
                "measure": "electronicBids",
                "value": 13,
                "relatedLot": "2"
            },
            {
                "id": "6",
                "measure": "bids",
                "value": 13,
                "relatedLot": "3"
            },
            {
                "id": "7",
                "measure": "smeBids",
                "value": 6,
                "relatedLot": "3"
            },
            {
                "id": "8",
                "measure": "foreignBidsFromEU",
                "value": 0,
                "relatedLot": "3"
            },
            {
                "id": "9",
                "measure": "foreignBidsFromNonEU",
                "value": 13,
                "relatedLot": "3"
            },
            {
                "id": "10",
                "measure": "electronicBids",
                "value": 13,
                "relatedLot": "3"
            },
            {
                "id": "11",
                "measure": "bids",
                "value": 13,
                "relatedLot": "4"
            },
            {
                "id": "12",
                "measure": "smeBids",
                "value": 6,
                "relatedLot": "4"
            },
            {
                "id": "13",
                "measure": "foreignBidsFromEU",
                "value": 0,
                "relatedLot": "4"
            },
            {
                "id": "14",
                "measure": "foreignBidsFromNonEU",
                "value": 13,
                "relatedLot": "4"
            },
            {
                "id": "15",
                "measure": "electronicBids",
                "value": 13,
                "relatedLot": "4"
            },
            {
                "id": "16",
                "measure": "bids",
                "value": 13,
                "relatedLot": "5"
            },
            {
                "id": "17",
                "measure": "smeBids",
                "value": 6,
                "relatedLot": "5"
            },
            {
                "id": "18",
                "measure": "foreignBidsFromEU",
                "value": 0,
                "relatedLot": "5"
            },
            {
                "id": "19",
                "measure": "foreignBidsFromNonEU",
                "value": 13,
                "relatedLot": "5"
            },
            {
                "id": "20",
                "measure": "electronicBids",
                "value": 13,
                "relatedLot": "5"
            }
        ]
    }
}