Early Market Engagement - Security Operations Centre

The Disclosure and Barring Service (DBS) is in the process of replacing its legacy IT estate with modern SAAS based applications.

As such it is seeking to implement a modern Security Operations Centre (SOC) service to secure the next generation estate.

DBS has completed market engagement previously under Crown Commercial Services Framework RM3764.3 Cyber Security Services 3, which informed our approach to the contract and identified the types of information bidders would prefer to receive in any ITT process to enable an effective response to be provided. We will share the findings from that market engagement as part of this market engagement.

This market engagement is to share our draft requirements, implementation expectations and to highlight the challenges we face in providing information to bidders for the SOC given that most applications to be monitored will be newly implemented and have no historical data.

DBS intends to undertake market engagement to assess whether our requirements are aligned to market expectation and to gauge interest in the opportunity, to help inform the approach DBS will take to its procurement of the services.

We anticipate market engagement will commence on 25th November 2024.

At this stage we believe CCS Framework RM3764 Cyber Security 3 is the most appropriate framework to source our requirements.

For the avoidance of doubt, DBS does not commit to using this framework (or indeed any framework) to procure its requirements.

More information about DBS and its operations can be found at: Disclosure and Barring Service - GOV.UK (www.gov.uk)

Please also see further detail in Section 5 of this notice.

Action for suppliers:

Suppliers wishing to participate in this online market engagement should register by emailing [email protected] with confirmation they are registered on Home Office Jaggaer. Suppliers who are not yet registered can do so here: https://homeoffice.app.jaggaer.com/web/login.html . The market engagement event will be open for participation from 25th November 2024 until 6th December 2024 and will be conducted via Jaggaer. Please ensure you register in good time to enable your participation.

Additional information: This market engagement is focussed on the provision of a CREST accredited SOC service that will be implemented to protect DBS's next generation estate from security threats and incidents.

DBS is implementing mostly new applications to create the next generation estate. As such it will not have any historical or other trend information relating to the applications to be monitored by the new SOC.

Given the age and nature of the legacy estate, the data from the legacy estate will have no relevance to the procurement of the new SOC service.

We will be able to notify suppliers of which SAAS applications will be monitored by the SOC when we start procurement for the SOC (we are unable to provide that information at this time due to ongoing application procurements). However, the volume of transactions, events and/or incidents will not be available.

We will be looking for a supplier who is able to provide services to a new technology estate, who will work with us to create an effective operating model for the SOC and evolve the service over time as the next generation estate beds in.

Further details on our requirements will be provided as part of the market engagement event.