Security Operations as a Service Procurement for Multiple Water Service Entities

NTU is seeking to procure a single Security Operations as a Service which can be logically separated between the 10 WSEs.

The functionalities of the Security Operations as a Service must include the core features of: - Security Operation Centre (SOC) as a Service - Security Information Event Monitoring (SIEM) - Network Security Monitoring - Patch and Vulnerability Monitoring - Security Training and Awareness Additional outcomes include: - The Security Operations as a Service can be implemented and be available ahead of January 2024 for Corporate Systems and April 2024 for Operational Technology and has the ability to scale over the remaining 24 months as each of the WSEs come online.

- This service will operate across all IT systems, including Corporate Systems (IT CS) and Operational Technology Industrial Control Systems (OT ICS). - Each WSE will have their own individual contract, initially under NTU then novated to the WSE as it goes live.

- Establishment of Security Operations as a Service is subject to �offramps� which allow the NTU to exit the agreements in the case of circumstances of change such as a change of government or Reform change. - Any volume-based pricing reflects the cumulative volumes of all 10 WSEs and the same unit price will apply in each contract regardless of the WSE�s individual volume.

The supplier briefing is on 7 August at 11am. Please email NTUdigitalprocurement@dia.govt.nz to register.