---
title: "Ealing ICT Cyber Security Contract 2023"
ocid: "ocds-h6vhtk-03b58d"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-h6vhtk-03b58d"
markdown_url: "https://d3tenders.com/contract/ocds-h6vhtk-03b58d.md"
json_url: "https://d3tenders.com/contract/ocds-h6vhtk-03b58d.json"
source: "Find A Tender Service"
current_stage: "Award"
buyer: "LONDON BOROUGH OF EALING"
published: "2023-03-23"
---

# Ealing ICT Cyber Security Contract 2023

Buyer: LONDON BOROUGH OF EALING  
Current stage: Award  
OCID: ocds-h6vhtk-03b58d

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-h6vhtk-03b58d)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-h6vhtk-03b58d.json)

## Summary

The London Borough of Ealing conducted a procurement process for the Ealing ICT Cyber Security Contract 2023 in the goods category. The contract involved a range of managed security services over a 3-year term to replace an expired contract. The procurement method was a limited award procedure without prior publication. The contract was awarded to Jumpsec Limited for ICT Cyber Security Services worth £1.08 million annually, commencing on 1 March 2023.

This tender presents business growth opportunities for companies providing managed security, incident response, and penetration testing services in the IT security industry. Suitable businesses should be able to offer comprehensive security monitoring, incident investigations, and vulnerability scanning services. Companies with expertise in forensic analysis, malware detection, and penetration testing would find this contract well-suited for growth and development.

## Notice

Ealing Council required a range of managed security services provided by a trusted single source supplier who could provide flexible and integrated support over a 3 year contract term. This was to replace the existing contract for these services that expired on 28th February 2023. The contracting authority was seeking to procure services for: 1) Managed Security Operations Centre (SOC) a) Security monitoring, threat protection, threat hunting and incident response covering a digital estate of over 4000 endpoints and 300 servers, across Windows, Linux, and Cloud-based (Azure) operating systems and environments; b) Incident investigations, triage, and response; c) Vulnerability scanning of many IP ranges / hosts with remediation tracking. 2) Incident Response a) Implementation of joint incident response processes for major incidents, out-of-band communication mechanisms, and management plans Incident investigations, triage, and response; b) Forensic analysis of indicators of compromise and analysis of malware samples to understand the extent of a compromise should it occur; c) Rapid remote interception of, containment of, and response to live cyber threats; d) Triage and first response without requiring intervention from Ealing personnel; e) This should be read and answered in conjunction with the SOC requirement as complimentary services/capabilities. 3) Penetration Testing a) Security audits and assessment including penetration testing of web applications and infrastructure, configuration and build reviews, etc... b) IT Health Check Testing delivered by suitably qualified and experienced personnel, in accordance with NCSC Protocols; c) 'Red Team' attack simulation services; d) The supplier should be able to provide resourcing for approximately 100 days of penetration testing per annum. The Council awarded a call off contract to Jumpsec Limited from the Crown Commercial Services Dynamic Purchasing System (DPS) "Cyber Security Services 3 - RM3764.3", in accordance with the rules of the DPS for the provision of ICT Cyber Security Services for a duration of three years commencing on the 1 March 2023, with a budget of PS0.360m per annum.

### Lot Information

Lot 1

Ealing Council required a range of managed security services provided by a trusted single source supplier who could provide flexible and integrated support over a 3 year contract term. This was to replace the existing contract for these services that expired on 28th February 2023. The contracting authority was seeking to procure services for: 1) Managed Security Operations Centre (SOC) a) Security monitoring, threat protection, threat hunting and incident response covering a digital estate of over 4000 endpoints and 300 servers, across Windows, Linux, and Cloud-based (Azure) operating systems and environments; b) Incident investigations, triage, and response; c) Vulnerability scanning of many IP ranges / hosts with remediation tracking. 2) Incident Response a) Implementation of joint incident response processes for major incidents, out-of-band communication mechanisms, and management plans Incident investigations, triage, and response; b) Forensic analysis of indicators of compromise and analysis of malware samples to understand the extent of a compromise should it occur; c) Rapid remote interception of, containment of, and response to live cyber threats; d) Triage and first response without requiring intervention from Ealing personnel; e) This should be read and answered in conjunction with the SOC requirement as complimentary services/capabilities. 3) Penetration Testing a) Security audits and assessment including penetration testing of web applications and infrastructure, configuration and build reviews, etc... b) IT Health Check Testing delivered by suitably qualified and experienced personnel, in accordance with NCSC Protocols; c) 'Red Team' attack simulation services; d) The supplier should be able to provide resourcing for approximately 100 days of penetration testing per annum. The Council awarded a call off contract to Jumpsec Limited from the Crown Commercial Services Dynamic Purchasing System (DPS) "Cyber Security Services 3 - RM3764.3", in accordance with the rules of the DPS for the provision of ICT Cyber Security Services for a duration of three years commencing on the 1 March 2023, with a budget of PS0.360m per annum.

### Procurement Information

The contract was a call off from the Crown Commercial Services Dynamic Purchasing System (DPS) "Cyber Security Services 3 - RM3764.3"

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Find A Tender Service |
| Latest notice | https://www.find-tender.service.gov.uk/Notice/008531-2023 |
| Notice type | Award Notice |
| Procurement type | Dynamic |
| Procurement category | Goods |
| Procurement method | Limited |
| Procurement method details | Award procedure without prior publication of a call for competition |
| Tender suitability | Not specified |
| Awardee scale | Large |
| All stages | Award |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 23 Mar 2023 |
| Submission deadline | Not specified |
| Future notice date | Not specified |
| Award date | 20 Dec 2022 |
| Contract period | Not specified |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | Not specified |
| Lots value | Not specified |
| Awards value | Not specified |
| Contracts value | £1,080,000 |

## Status

| Field | Value |
| --- | --- |
| Tender status | Complete |
| Lots status | Cancelled |
| Awards status | Active |
| Contracts status | Active |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | LONDON BOROUGH OF EALING |
| Locality | EALING |
| Post town | West London |
| Postcode | W5 2HL |
| Country | England |
| ITL 1 | TLI London |
| ITL 2 | TLI7 Outer London - West and North West |
| ITL 3 | TLI73 Ealing |
| Local authority | Ealing |
| Electoral ward | Ealing Broadway |
| Westminster constituency | Ealing Central and Acton |
| Delivery location | Not specified |

## Supplier

| Field | Value |
| --- | --- |
| Number of suppliers | 1 |
| Supplier names | JUMPSEC |

## CPV Codes

### Divisions

- 48 - Software package and information systems

### Codes

- 48220000 - Internet and intranet software package

## Release History

- 23 Mar 2023 at 15:43 - Award - Award Notice - https://www.find-tender.service.gov.uk/Notice/008531-2023

## Notice URLs

- http://www.ealing.gov.uk

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-h6vhtk-03b58d. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-h6vhtk-03b58d.json.