Renewal and modernisation of Vigo’s Security Operations Centre

Summary

The tender covers the renewal and expansion of the City of Vigo’s Security Operations Centre (SOC). This is a mixed contract combining the supply, installation, configuration and integration of cybersecurity hardware, software, licences and subscriptions with a managed SOC service. The service must operate continuously, 24 hours a day, every day of the year, and cover security monitoring, threat and alert analysis, incident response, recovery and ongoing improvement of detection capabilities. The work includes, among other things, at least 2,000 endpoint protection licences and 50 advanced server or workload licences; renewal of support and licences for the existing network detection solution and infrastructure monitoring platform; and a cloud-based SIEM platform with automation, behavioural analytics and integrated artificial intelligence. The SIEM must handle the current volume of approximately 120 million events per day plus growth of at least 25%, and provide at least three months of searchable data retention. The provider must deliver at least 20 hours per year of incident response and digital forensics, hold two in-person cybersecurity awareness activities and three online courses each year, and conduct one tailored phishing simulation annually. The contract runs for four years, with a possible one-year extension. The four-year budget is €706,640 including VAT, and the estimated contract value, including the extension and possible modifications, is €846,800 excluding VAT. Evaluation carries up to 100 points: 40 for the technical and organisational plan and 60 for automatically scored criteria. A bidder must score more than 20 of the 40 qualitative points to continue. Bidders must meet the technical and financial capacity requirements and provide evidence of the required security certifications, network memberships and relevant experience.