WHC - 3rd party Security Operations Centre 3 year contract

West Herts College

What the buyer published

The Scope

Deliver 24/7 cyber monitoring to react to threats within incident SLA. - Take on cyber threat tickets that are raised via West Herts – Averaging 2 tickets a day (Mainly Phishing Attacks). - Monitor and triage security alerts from security tooling and logs. - Tier 3 analyst should be involved in decision making not AI tooling. Al tooling should be used for detection and data gathering not for actioning any changes. - Support the West Herts security team via best practices and be a part of the key DR testing, pen testing and recovery actions. - Access to an account manager or team lead when needed. - Support small change activity when required,

o 20% Small Change

o 80% Day to day Operations

Looking for a small team resource pool to start with this will be reviewed each year as the business demand grows.

An empty stage is useful. For example, no tender stage usually means the buyer used a framework or gave the contract directly.

◌ Planning none

● Tender on record

◌ Award none

● End date For subscribers only

Judged against the rules we publish. How we decide.

SOC, detection and response An ongoing service that watches an organisation's systems and responds to attacks.

Bought on its own, as a separate contract The cyber work is a separate contract.