DYNAMIC PURCHASING SYSTEM FOR UNIFIED CYBER INCIDENT RESPONSE SERVICE

Health Service Executive (HSE)

The HSE is issuing this Request to Participate (โ€œRTPโ€) in a Dynamic Purchasing System (hereafter โ€˜the DPSโ€™) for the provision of Unified Cyber Incident Response service. The HSE is the Contracting Authority for this public procurement competition on its own behalf and on behalf of all organisations funded by the HSE. On 14 May 2021, the HSE was subjected to a serious criminal cyberattack (the โ€œIncidentโ€), through the infiltration of IT systems using Conti Ransomware. Over 80 percent of IT infrastructure impacted leading to unavailability of key patient information and diagnostics. To rapidly enhance the security operations and strengthen the cyber defence posture post the Incident, a number of security services were stood up on an emergency basis. HSE are now in the journey towards standardising these capabilities and associated services. The Post Incident Review (PIR) that was carried out following the incident has highlighted the need for integrating existing siloed incident response processes into a unified cyber incident response capability. The vision of this service is to effectively and consistently have the capability to unify the cyber incident response across multiple HSE organisational constructs.

Deadline

The time limit for receipt of tenders was 2024-04-18. The procurement was published on 2024-03-19.

Who? What? Where?
Procurement history
Date Document
2024-03-19 Contract notice
2024-04-10 Contract notice
Contract notice (2024-03-19)
Object
Scope of the procurement
Title: Dynamic purchasing system for unified cyber incident response service
Reference number: HSE 22167
Short description:
The HSE is issuing this Request to Participate (โ€œRTPโ€) in a Dynamic Purchasing System (hereafter โ€˜the DPSโ€™) for the provision of Unified Cyber Incident Response service. The HSE is the Contracting Authority for this public procurement competition on its own behalf and on behalf of all organisations funded by the HSE. On 14 May 2021, the HSE was subjected to a serious criminal cyberattack (the โ€œIncidentโ€), through the infiltration of IT systems using Conti Ransomware. Over 80 percent of IT infrastructure impacted leading to unavailability of key patient information and diagnostics. To rapidly enhance the security operations and strengthen the cyber defence posture post the Incident, a number of security services were stood up on an emergency basis. HSE are now in the journey towards standardising these capabilities and associated services. The Post Incident Review (PIR) that was carried out following the incident has highlighted the need for integrating existing siloed incident response processes into a unified cyber incident response capability. The vision of this service is to effectively and consistently have the capability to unify the cyber incident response across multiple HSE organisational constructs.
Show more
Type of contract: Services
Products/services: IT services: consulting, software development, Internet and support ๐Ÿ“ฆ
Estimated value excluding VAT: 16 000 000 EUR ๐Ÿ’ฐ
Information about lots
This contract is divided into lots โœ…
Tenders may be submitted for maximum number of lots: 2
Tenders may be submitted for all lots โœ…

1๏ธโƒฃ
Internal identifier: HSE 22167
Title: Lot A UNIFIED CYBER INCIDENT RESPONSE SERVICE
Additional products/services: Approach to reducing environmental impacts: Climate change adaptation
Title
Lot Identification Number: LOT-0001

2๏ธโƒฃ
Internal identifier: 2
Title: Lot B DIGITAL RISK PROTECTION
Title
Lot Identification Number: LOT-0002

Procedure
Type of procedure
Open procedure โœ…
Legal basis: Directive 2014/24/EU
Administrative information
Time limit for receipt of tenders or requests to participate: 2024-04-18 12:00:00 ๐Ÿ“…
Conditions for opening of tenders (place): https://www.etenders.gov.ie/epps/dps/prepareViewCfTDPSWS.do?resourceId=3234213
Languages in which tenders or requests to participate may be submitted: English ๐Ÿ—ฃ๏ธ
Information about a framework agreement or a dynamic purchasing system
Framework agreement with several operators โœ…
Tendering terms
Tenderers may submit more than one tender
Place: https://www.etenders.gov.ie/epps/dps/prepareViewCfTDPSWS.do?resourceId=3234213
Electronic invoicing: Allowed
Electronic ordering will be used โœ…
Electronic payment will be used โœ…

Legal, economic, financial and technical information
Conditions for participation
Exclusion ground: Participation in a criminal organisation

Contracting authority
Name and addresses
Name: Health Service Executive (HSE)
National registration number: 1448
Postal address: Oak House, Millennium Park Naas Co. Kildare
Postal code: Re
Postal town: Kildare
Country: Ireland ๐Ÿ‡ฎ๐Ÿ‡ช
E-mail: procurement.helpdesk@hse.ie ๐Ÿ“ง
Phone: 0870688826 ๐Ÿ“ž
URL: https://www.hse.ie ๐ŸŒ
Address of the buyer profile: https://www.hse.ie ๐ŸŒ
Type of the contracting authority
Body governed by public law
Main activity
Health
Communication
Participation URL: https://www.etenders.gov.ie/epps?resourceId=3234213 ๐ŸŒ
Access to the procurement documents is restricted
Electronic submission: Required

Complementary information
Review body
Name: The High Court of Ireland
National registration number: The High Court of Ireland
Department: The High Court of Ireland
Postal address: Four Courts, Inns Quay, Dublin 7
Postal code: D07 WDX8
Postal town: Dublin
Country: Ireland ๐Ÿ‡ฎ๐Ÿ‡ช
E-mail: highcourtcentraloffice@courts.ie ๐Ÿ“ง
Phone: +353 1 8886000 ๐Ÿ“ž
Information about electronic workflows
Electronic invoicing will be accepted
Source: OJS 2024/S 057-168729 (2024-03-19)
Contract notice (2024-04-10)
Object
Scope of the procurement
Estimated value excluding VAT: 16 000 000 EUR ๐Ÿ’ฐ
Description
Internal identifier: 1

Procedure
Information about a framework agreement or a dynamic purchasing system
A dynamic purchasing system was set up โœ…

Changes
Information about modifications
Version of the previous notice to be changed: 8fcea0c8-e812-47cf-9a4a-3e007018ff7b-01
Source: OJS 2024/S 072-215194 (2024-04-10)