Request 101004058123

1. Procurement Routes

a) Which procurement platform(s) does the Council use for IT and cyber security procurements (for example Contracts Finder, Proactis, YORtender, Chest, Delta eSourcing or similar)?
b) Which framework agreements does the Council typically use for cyber security services (for example G-Cloud, DOS, CCS frameworks, Bloom or equivalent)?

2. Penetration Testing and Security Testing. Please provide:

a) Current supplier name(s)
b) Contract start date
c) Contract expiry date
d) Contract value or annual spend
e) Procurement route or framework used
f) Whether services include infrastructure, web application, mobile, cloud, CHECK, IT Health Check or other penetration testing services

3. Cyber Essentials and Cyber Essentials Plus. Please provide:

a) Current supplier name
b) Contract value or annual spend
c) Contract start date
d) Contract expiry date
e) Procurement route or framework used

4. ISO 27001. Please provide details of any external supplier used for:

a) ISO 27001 consultancy
b) ISO 27001 implementation support
c) ISO 27001 internal audit
d) ISO 27001 certification preparation
Including:
e) Supplier name
f) Contract value or annual spend
g) Contract expiry date
h) Procurement route used

5. PCI DSS. Please provide details of any external supplier used for:

a) PCI DSS consultancy
b) PCI DSS QSA services
c) PCI DSS penetration testing
d) PCI DSS compliance support
Including:
e) Supplier name
f) Contract value or annual spend
g) Contract expiry date
h) Procurement route used

6. Incident Response and Digital Forensics. Please provide details of any external supplier used for:

a) Incident response retainers
b) Digital forensics retainers
c) DFIR services
d) Cyber breach response services
Including:
e) Supplier name
f) Contract value or annual spend
g) Contract expiry date
h) Procurement route used

7. Future Procurement Activity. Where known, please provide:

a) The expected renewal or re-procurement date for each service
b) Whether the Council currently expects to re-tender, extend or recompete the contract

8. Relevant Departments. Please provide the name of the department or team responsible for:

a) Cyber Security / Information Security
b) ICT / IT Services
c) Procurement and Commercial Management