DES - ICT Security Vulnerability Assessment and Penetration Testing Services

Department of Education and Skills

Specialist expertise for the provision of penetration testing and security vulnerability assessment of the Department’s infrastructure. The annual security vulnerability assessment will cover externally hosted web systems, including its school facing (Esinet) eGovernment systems and public website, its DMZ-based public IP addresses and MS Azure hosted site plus an assessment of all its internal critical infrastructure including Servers, Switching, Security (Firewall and SIEM), Wireless and Mobile Device Management systems. The output will be a report based on best practice advice and recommendations on findings from any completed vulnerability assessments. Given the sensitive nature of the Department’s data subjects, the testing days will be required to be completed onsite at the Department’s offices.

Deadline

The time limit for receipt of tenders was 2020-06-19. The procurement was published on 2020-05-15.

Suppliers

The following suppliers are mentioned in award decisions or other procurement documents:

Who? What? Where?
Procurement history
Date Document
2020-05-15 Contract notice
2020-10-27 Contract award notice
Contract notice (2020-05-15)
Object
Scope of the procurement
Title: IT services: consulting, software development, Internet and support
Reference number: DES/IT Unit/Security
Short description:
Specialist expertise for the provision of penetration testing and security vulnerability assessment of the Department’s infrastructure. The annual security vulnerability assessment will cover externally hosted web systems, including its school facing (Esinet) eGovernment systems and public website, its DMZ-based public IP addresses and MS Azure hosted site plus an assessment of all its internal critical infrastructure including Servers, Switching, Security (Firewall and SIEM), Wireless and Mobile Device Management systems. The output will be a report based on best practice advice and recommendations on findings from any completed vulnerability assessments. Given the sensitive nature of the Department’s data subjects, the testing days will be required to be completed onsite at the Department’s offices.
Show more
Notice metadata
Original language: English 🗣️
Document type: Contract notice
Nature of contract: Services
Regulation: European Union, with participation of GPA countries
Common procurement vocabulary (CPV)
Code: IT services: consulting, software development, Internet and support 📦
Additional CPV: Software programming and consultancy services 📦
Place of performance
NUTS region: Éire/Ireland 🏙️

Procedure
Procedure type: Open procedure
Type of bid: Submission for all lots
Award criteria
The most economic tender

Contracting authority
Identity
Country: Ireland 🇮🇪
Awarding authority type: Ministry or any other national or federal authority
Awarding authority name: Department of Education and Skills
Postal address: Marlborough Street
Postal town: Dublin 1
Contact
Internet address: http://www.education.ie 🌏
E-mail: gerry_hunter@education.gov.ie 📧
Phone: +353 18896483 📞
URL for documents: http://irl.eu-supply.com/app/rfq/rwlentrance_s.asp?PID=167068&B=ETENDERS_SIMPLE 🌏
URL for participation: http://irl.eu-supply.com/app/rfq/rwlentrance_s.asp?PID=167068&B=ETENDERS_SIMPLE 🌏

Reference
Dates
Date dispatched: 2020-05-15 📅
Submission deadline: 2020-06-19 📅
Publication date: 2020-05-20 📅
Identifiers
Notice number: 2020/S 098-234356
OJ-S issue: 98

Object
Scope of the procurement
Estimated total value: 400 000 EUR 💰
Short description:
Specialist expertise for the provision of penetration testing and security vulnerability assessment of the Department’s infrastructure. The annual security vulnerability assessment will cover externally hosted web systems, including its school facing (Esinet) eGovernment systems and public website, its DMZ-based public IP addresses and MS Azure hosted site plus an assessment of all its internal critical infrastructure including servers, switching, security (Firewall and SIEM), wireless and mobile device management systems. The output will be a report based on best practice advice and recommendations on findings from any completed vulnerability assessments. Given the sensitive nature of the Department’s data subjects, the testing days will be required to be completed onsite at the Department’s offices.
Show more
Estimated value excluding VAT: 400 000 EUR 💰
Duration: 12 months
Description of renewals: 4 possible extension of 12 months each (possible total of 5 years).
Place of performance
Main site or place of performance: Dublin.

Procedure
Legal basis: 32014L0024
Time of receipt of tenders: 12:00
Languages in which tenders or requests to participate may be submitted: English 🗣️
Tender opening date: 2020-06-19 📅
Tender opening time: 12:00

Contracting authority
Identity
National registration number: IE4000067R
Contact
Contact point: Gerry Hunter
Address of the buyer profile: https://irl.eu-supply.com/ctm/Company/CompanyInformation/Index/1142 🌏
Documents URL: http://irl.eu-supply.com/app/rfq/rwlentrance_s.asp?PID=167068&B=ETENDERS_SIMPLE 🌏

Complementary information
Review body
Name: Department of Education and Skills — Procurement Review Committee
Postal town: Dublin
Country: Ireland 🇮🇪
Source: OJS 2020/S 098-234356 (2020-05-15)
Contract award notice (2020-10-27)
Object
Scope of the procurement
Short description:
Specialist expertise for the provision of penetration testing and security vulnerability assessment of the Department’s infrastructure. The annual security vulnerability assessment will cover externally hosted web systems, including its school facing (Esinet) eGovernment systems and public website, its DMZ-based public IP addresses and MS Azure hosted site plus an assessment of all its internal critical infrastructure including servers, switching, Security (Firewall and SIEM), wireless and mobile device management systems. The output will be a report based on best practice advice and recommendations on findings from any completed vulnerability assessments. Given the sensitive nature of the Department’s data subjects, the testing days will be required to be completed onsite at the Department’s offices.
Show more
Total value of the procurement: 30 813 EUR 💰
Notice metadata
Document type: Contract award notice

Procedure
Type of bid: Not applicable

Reference
Dates
Date dispatched: 2020-10-27 📅
Publication date: 2020-10-30 📅
Identifiers
Notice number: 2020/S 212-519190
Refers to notice: 2020/S 098-234356
OJ-S issue: 212

Procedure
Award criteria
Cost criterion (name): Price
Cost criterion (weighting): 40

Award of contract
Date of contract conclusion: 2020-09-28 📅
Name: Rits
National registration number: IE8289373C
Postal address: 2052 Castle Drive, Citywest Business Park
Postal town: Dublin 24
Country: Ireland 🇮🇪
Total value of the procurement: 80 000 EUR 💰
Information about tenders
Number of tenders received: 19
Source: OJS 2020/S 212-519190 (2020-10-27)