United Kingdom-Barnsley: Cyber Security

Type of document: Contract Awards
Country: United Kingdom
OJEU Ref: (2018/S 054-119290/EN)
Nature of contract: Supply contract
Procedure: Open procedure
Regulation of procurement: EU
Type of bid required: Not applicable

Contract award notice
Supplies
Directive 2014/24/EU

Section I: Contracting authority
I.1) Name and addresses
Official name: Barnsley Metropolitan Borough Council
Postal address: Westgate Plaza One, Westgate
Town: Barnsley
Postal code: S70 2DR
Country: United Kingdom
Email: jamesfarrimond@barnsley.gov.uk
Internet address(es):
Main address:
Address of the buyer profile:

I.4) Type of the contracting authority
Regional or local authority
I.5) Main activity
Other activity: Information Technology

Section II: Object
II.1) Scope of the procurement
II.1.1) Title: Cyber Security

Reference number: DN299755
II.1.2) Main CPV code: 48000000
II.1.3) Type of contract Supplies
II.1.4) Short Description: The Council has multiple lines of defence when it comes to security, a number of services have been pulled together to create a Cyber Security Suite which includes Endpoint antivirus, Email Protection, Password Solutions, Policy Management, Vulnerability Scanning, Phishing Simulation and Consultancy.
II.1.6) Information about lots:
The contract is divided into lots: yes
II.1.7) Total value of the procurement(excluding VAT)
Value:295966.38
Currency:GBP
II.2) Description
II.2.1) Title: Lot 1 — Email Security
Lot No:1
II.2.2)Additional CPV code(s)
Main CPV code: 48000000

II.2.3) Place of performance
Nuts code: UKE31
II.2.4) Description of the procurement
There are newly introduced Government standards that the Council would like to comply with going forward, these are based around email security and encryption, specifically DMARC and SPF, there is a requirement that the encryption used should be a minimum of TLS 1.2. Guidance on Government secure emails can be found here.
We would like to utilise the solution to replace the current encrypted email solution and GCSX (Government Secure Intranet) secure email solution that we have in place for secure email exchange between both government partners and external non-government parties. Additionally, the council has a non-core requirement for replacement of a hosted secure email solution that is used to generate invoices and mail these securely to customers. If an API or similar integration method is offered for the encrypted e-mail solution then this could also be used to replace this system in addition.

II.2.5)Award criteria
Quality criterion – Name: Quality/Weighting:60
Price – Weighting:40
II.2.11) Information about options
Options no
II.2.13) Information about European Union funds
The procurement is related to a project and/or programme financed by European Union funds: no

II.2.1) Title: Lot 2 — Endpoint Antivirus
Lot No:2
II.2.2)Additional CPV code(s)
Main CPV code: 48000000

II.2.3) Place of performance
Nuts code: UKE31
II.2.4) Description of the procurement
In addition to signature based end point security, we would like to incorporate the use of behavioural based threat protection, which will involve consistently monitoring for abnormal behaviour patterns across our entire corporate network, but primarily on the endpoint devices.

II.2.5)Award criteria
Quality criterion – Name: Quality/Weighting:60
Price – Weighting:40
II.2.11) Information about options
Options no
II.2.13) Information about European Union funds
The procurement is related to a project and/or programme financed by European Union funds: no

II.2.1) Title: Lot 4 — Policy Management
Lot No:4
II.2.2)Additional CPV code(s)
Main CPV code: 48000000

II.2.3) Place of performance
Nuts code: UKE31
II.2.4) Description of the procurement
The Council are looking to be able to rapidly distribute policy changes, updates and news to users across our corporate estate. This is to enable better policy understanding and compliance across the organisation.
The Council would be looking for an easy to use and understand management interface that would allow us to audit policy, and target updates or tests at specific user groups.

II.2.5)Award criteria
Quality criterion – Name: Quality/Weighting:60
Price – Weighting:40
II.2.11) Information about options
Options no
II.2.13) Information about European Union funds
The procurement is related to a project and/or programme financed by European Union funds: no

II.2.1) Title: Lot 5 — Vulnerability Scanning
Lot No:5
II.2.2)Additional CPV code(s)
Main CPV code: 48000000

II.2.3) Place of performance
Nuts code: UKE31
II.2.4) Description of the procurement
The Council are aiming to complete proactive scanning throughout the year on a regular cycle and make changes to secure any issues that have been identified. The Council view this as taking a proactive approach to security by blocking loopholes before they are exploited by the new generation of ransomware.
The Council are looking for a regularly updated tool that will be able to scan end user devices as well as servers, switches and firewalls for known vulnerability in Hardware and Software including both Operating Systems and applications. This will allow us to patch and take appropriate controls to secure our entire estate.

II.2.5)Award criteria
Quality criterion – Name: Quality/Weighting:60
Price – Weighting:40
II.2.11) Information about options
Options no
II.2.13) Information about European Union funds
The procurement is related to a project and/or programme financed by European Union funds: no

II.2.1) Title: Lot 6 — Phishing Simulation
Lot No:6
II.2.2)Additional CPV code(s)
Main CPV code: 48000000

II.2.3) Place of performance
Nuts code: UKE31
II.2.4) Description of the procurement
The Council currently have a phishing simulation tool that we have used across the Authority with some relative degree of success. The Council currently complete most of our education of phishing manually and would like to move towards to more automated solution. We’d like to build education and training into the core of our phishing simulation, with the ability to run campaigns targeted amongst individual groups of users, or levels of management etc.

II.2.5)Award criteria
Quality criterion – Name: Quality/Weighting:60
Price – Weighting:40
II.2.11) Information about options
Options no
II.2.13) Information about European Union funds
The procurement is related to a project and/or programme financed by European Union funds: no

II.2.1) Title: Lot 7 — Consultancy
Lot No:7
II.2.2)Additional CPV code(s)
Main CPV code: 72000000

II.2.3) Place of performance
Nuts code: UKE31
II.2.4) Description of the procurement
The Council has a requirement to carry out annual an IT Health check for our PSN membership, and are looking toward gaining Cyber Essentials Plus and PCI DSS compliance.
The Council is looking for a partner to be able to carry out the above certifications / audits as required and also assist us with gaining the accreditations. The accreditation requirements for ITHC. Cyber Essentials and PCI DSS are not a strict requirement within the first year, but we would like to be able to plan our work towards these, with support from a consultancy provider.
The support could be in multiple forms for example a number of days over the duration or the Agreement or a set number of days per year, these could be weighted around timescales to help us achieve compliance. We are open to new ideas and creativity in this area, in terms of how the consultancy could be delivered to suit the Council and provider.

II.2.5)Award criteria
Quality criterion – Name: Quality/Weighting:60
Price – Weighting:40
II.2.11) Information about options
Options no
II.2.13) Information about European Union funds
The procurement is related to a project and/or programme financed by European Union funds: no

II.2.1) Title: Lot 3 — Password Enforcment
Lot No:3
II.2.2)Additional CPV code(s)
Main CPV code: 48000000

II.2.3) Place of performance
Nuts code: UKE31
II.2.4) Description of the procurement
The Council is looking to increase the security of the password policies whilst looking to make the process easier for the end user.
The Council would expect to see features like blocking of dictionary passwords, blocks on reuse of similar passwords, self-reset and some kind of password strength tool to show users how secure / insecure a password is.
The password solution will need to work with Active Directory as this is our one source for Single Sign On within various products used across the corporate estate.
We would like to implement a password reward system, whereby users who use stronger passwords are rewarded with a longer expiry period, if this is possible.

II.2.5)Award criteria
Quality criterion – Name: Quality/Weighting:60
Price – Weighting:40
II.2.11) Information about options
Options no
II.2.13) Information about European Union funds
The procurement is related to a project and/or programme financed by European Union funds: no

Section IV: Procedure
IV.1) Description
IV.1.1) Type of procedure
Open procedure
IV.1.3) Information about a framework agreement or a dynamic purchasing system
IV.1.8) Information about the Government Procurement Agreement(GPA)
The procurement is covered by the Government Procurement Agreement: no
IV.2) Administrative information
Section V: Award of contract
Lot No: 1
Title: Lot 1 — Email Security

A contract/lot is awarded yes
V.2) Award of contract
V.2.1) Date of conclusion of the contract:2018-02-13
V.2.2) Information about tenders
Number of tenders received:10
The contract has been awarded to a group of economic operators: no
V.2.3) Name and address of the contractor
Official name: Bytes Software Services Limited
Town: Surrey
Postal code: KT22 7TW
Country: United Kingdom
Nuts code:
The contractor is an SME no

V.2.4) Information on value of the contract/lot(excluding VAT)
Total value of the contract/lot:69129.38
Currency:GBP
Lot No: 2
Title: Lot 2 — Endpoint Antivirus

A contract/lot is awarded yes
V.2) Award of contract
V.2.1) Date of conclusion of the contract:2018-02-13
V.2.2) Information about tenders
Number of tenders received:12
The contract has been awarded to a group of economic operators: no
V.2.3) Name and address of the contractor
Official name: Bytes Software Services Limited
Town: Surrey
Postal code: KT22 7TW
Country: United Kingdom
Nuts code:
The contractor is an SME no

V.2.4) Information on value of the contract/lot(excluding VAT)
Total value of the contract/lot:102937.00
Currency:GBP
Lot No: 3
Title: Lot 3

A contract/lot is awarded no
V.1) Information on non-award
The contract/lot is not awarded
No tenders or requests to participate were received or all were rejected
Lot No: 4
Title: Lot 4 — Policy Management

A contract/lot is awarded yes
V.2) Award of contract
V.2.1) Date of conclusion of the contract:2018-02-13
V.2.2) Information about tenders
Number of tenders received:3
The contract has been awarded to a group of economic operators: no
V.2.3) Name and address of the contractor
Official name: Bytes Software Services Limtied
Town: Surrey
Postal code: KT22 7TW
Country: United Kingdom
Nuts code:
The contractor is an SME no

V.2.4) Information on value of the contract/lot(excluding VAT)
Total value of the contract/lot:30000
Currency:GBP
Lot No: 5
Title: Lot 5 — Vulnerability Scanning

A contract/lot is awarded yes
V.2) Award of contract
V.2.1) Date of conclusion of the contract:2018-02-13
V.2.2) Information about tenders
Number of tenders received:12
The contract has been awarded to a group of economic operators: no
V.2.3) Name and address of the contractor
Official name: Bytes Software Services Limited
Town: Surrey
Postal code: KT22 7TW
Country: United Kingdom
Nuts code:
The contractor is an SME no

V.2.4) Information on value of the contract/lot(excluding VAT)
Total value of the contract/lot:16650.00
Currency:GBP
Lot No: 6
Title: Lot 6 — Phishing Simulation

A contract/lot is awarded yes
V.2) Award of contract
V.2.1) Date of conclusion of the contract:2018-02-13
V.2.2) Information about tenders
Number of tenders received:12
The contract has been awarded to a group of economic operators: no
V.2.3) Name and address of the contractor
Official name: Khipu Networks
Town: Hampshire
Postal code: GU51 2UH
Country: United Kingdom
Nuts code:
The contractor is an SME no

V.2.4) Information on value of the contract/lot(excluding VAT)
Total value of the contract/lot:12000.00
Currency:GBP
Lot No: 7
Title: Lot 7 — Consultancy

A contract/lot is awarded yes
V.2) Award of contract
V.2.1) Date of conclusion of the contract:2018-02-13
V.2.2) Information about tenders
Number of tenders received:11
The contract has been awarded to a group of economic operators: no
V.2.3) Name and address of the contractor
Official name: NTA Monitor
Town: Kent
Postal code: ME4 4HU
Country: United Kingdom
Nuts code:
The contractor is an SME yes

V.2.4) Information on value of the contract/lot(excluding VAT)
Total value of the contract/lot:65250.00
Currency:GBP

Section VI: Complementary information
VI.4) Procedures for review
VI.4.1) Review body
Official name: High Court
Postal address: The Strand
Town: London
Country: United Kingdom

VI.5) Date of dispatch of this notice:
2018-03-16