UK SBS IT16050 Application Control Security Platform Software for CEH

CEH are continually seeking to improve the security of our IT infrastructure. As part of this ongoing programme we are looking to remove administrator privileges from desktop user accounts and to further control the installation of applications and executable programs to prevent installation of ‘zero day’ malware and other unwanted software. CEH staff use a large number of applications ranging from standard office suites to specialist scientific software and user compiled executables. A method of restricting user access to install applications while avoiding a large support overhead is required. In order to maintain these effectively within existing IT support staff numbers an automated privilege management and application control system is sought. The Privilege management and Application Control software must provide granular policies for different user roles such as scientists, developers, administration and support staff and allow interactive control for ‘unknown’ and bespoke software.

CEH need to remove administrator privileges from desktop user accounts and to further control the installation of applications and executable programs to prevent installation of ‘zero day’ malware and other unwanted software. In order to achieve this while maintaining the large number of standard and bespoke applications in use within CEH without requiring a significant increase in IT support effort an automated privilege management and application control system is sought. The Privilege management and Application Control software must provide granular policies for different user roles such as scientists, developers, administration and support staff and allow interactive control for ‘unknown’ and bespoke software. For this project CEH requires security platform licences for its end points (predominantly Windows 7, with very small numbers of Linux and Mac), professional services to assist with installation and configuration at each of 4 CEH sites, as well as training for CEH staff to implement the technology security platform.

Please also provide pricing for future year’s subscriptions and support. For possible extensions into years 2 and 3, the following will be required on an annual basis for these subsequent years: • 1 year subscription licence to the security platform per Windows desktop/laptop with standard maintenance & support – quantity 1350 • 1 year Subscription license to the security platform per Mac desktop/laptop with standard maintenance & support – quantity 10 • 1 year Subscription license to the security platform per Linux desktop/laptop with standard maintenance & support – quantity 10 Initial implementation to be complete by end of March 2016. The contract Term to state March 2016 to March 2017 with the option to extend annually for a further two years on a 1 + 1 year basis until March 2019. There is no guarantee that this contract will be extended at each contract break point

Additional information: This contract shall initially be for a one year period until March 2017 with the option to extend annually for a further two years on a 1 + 1 year basis until March 2019. There is no guarantee that this contract will be extended at each contract break point. As part of the strategic alliance between UK Shared Business Services Ltd (UK SBS) and Crown Commercial Service (CCS), UK SBS can use the CCS eSourcing Suite for future procurements.

If you have not yet registered on the eSourcing Suite, this can be done online at https://gpsesourcing.cabinetoffice.gov.uk by following the link ‘Register for CCS eSourcing’. Please note that, to register, you must have a valid DUNS number (as provided by Dun and Bradstreet) for the organisation which you are registering, who will be entering into a contract if invited to do so. Once you have registered on the eSourcing Suite, a registered user can express an interest for a specific procurement. This is done by emailing [email protected]. Your email must clearly state: the name and reference for the procurement you wish to register for; the name of the registered Bidder; and the name and contact details for the registered individual sending the email. Crown Commercial Service will process the email and then enable the Bidder to access the procurement online via the e-Sourcing Suite. The registered user will receive a notification email to alert them once this has been done. The Sourcing documents can then be accessed on the eSourcing Suite at: https://gpsesourcing.cabinetoffice.gov.uk using the instructions detailed in the Specification documents within Contracts Finder.

As a user of the e-Sourcing Suite you will have access to Emptoris email messaging service which facilitates all messages sent to you and from you in relation to any specific RFX event. Please note it is your responsibility to access these emails on a regular basis to ensure you have sight of all relevant information. For technical assistance on use of the e-Sourcing Suite please contact Crown Commercial Service Helpdesk : Telephone: 0345 010 3503 Training documents to support Bidders utilise Emptoris CCS eSourcing are available in the Contracts Finder Tender documents section.