Consulting services for future SOC outsourcing model

closed

<b><i>Please note that this is not a call for tenders but a publication announcing the Contracting authority’s <a href="https://ec.europa.eu/docsroom/documents/40287" target="_blank">intention to publish a future negotiated low or middle valueprocedure. </a> </i></b><br></br>The European Chemicals Agency has already outsourced SOC services, but the current outsourcing model may not be optimised due to e.g. fragmentation of the service among several contractors and inefficiency because of overlapping services. ECHA has an opportunity redesign the outsourcing model for SOC service as the main SOC related contracts will expire in near future. In the new model, ECHA has an option to use security services provided by CERT-EU (Computer Emergency Response Team for EU institutions, agencies and bodies) and by commercial SOC service provider(s). The main objectives of the new optimised outsourcing model include • improved ECHA security monitoring and detection capabilities by minimising fragmentation of the SOC services among too many contractors, and • optimised cost-effectiveness by avoiding the overlapping services provided by two or more SOC service providers. The request for service is to conduct an analysis on current SOC outsourcing model and the drafted future SOC outsourcing model, and furthermore propose improvements and optimisations to the future model. Important part of the service is advisory support to ECHA in the planning and preparation of procurement for future commercial SOC services. Preparation of the detailed tender specification is, however, out of the scope of the service. The contract is estimated to run for three months. The maximum amount of the contract is expected to be 25 000-30 000 EUR and will be defined in the invitation to tender.