ITES-10902 - Ireland - Cybersecurity Specialist Services - Deadline September 24,2026

(1) Vendor needs to provide cybersecurity specialist services.• The services will include, but are not limited to, Managed Security Operations Centre, Managed Extended Detection and Response (XDR), threat detection and analysis, incident response, triage and escalation, vulnerability scanning, penetration testing, cybersecurity awareness sessions, cybersecurity advisory services, tabletop exercises and the provision of specific security related licences where required.• Overview of Services Required1. 24x7x365 Managed SOC, SIEM and XDR services, including analyst–led monitoring, alert triage, investigation, classification, prioritisation, escalation, response and recovery.2. Threat detection and analysis, including detection of ransomware activity, malware, suspicious activity, indicators of compromise, anomalous behaviour and emerging cyber threats.3. Configuration, tuning and continuous improvement of relevant log sources and monitoring use cases.4. Incident response support, including containment, eradication, recovery, post–incident review, forensic support where required, lessons learned reporting and including an annual tabletop exercise.5. Vulnerability scanning, penetration testing and technical assurance reviews across agreed internal, external, cloud, SaaS, application and infrastructure scopes.6. Compliance and security control reviews, including assessment against relevant frameworks and standards such as agency Cybersecurity Framework, agency aligned good practice, and other relevant public sector cybersecurity requirements.7. Cybersecurity awareness sessions, including instructor–led targeted awareness training for the Executive Team, ICT teams and business areas such as Finance and HR.8. Cybersecurity advisory and professional services and ad–hoc project support.9. Provision, resale of cybersecurity–related licences, tools or subscriptions where required, including but not limited to awareness platforms, vulnerability management tooling, and other cybersecurity technologies(2) The contract period will be for one year.(3) All the questions must be submitted no later than September 7, 2026.