Dienstverlening SIEM-SOC

The contract timeline is as follows:

• Contract start date (Implementation): October 1, 2026.
• Contract start date (ICT Performance): January 1, 2027.
• Implementation end date: January 1, 2027.
• Initial duration: 4 years from January 1, 2027.
• Initial contract end date: December 31, 2030.
• Extension options: The agreement has extension options of 1 year each, making it for an indefinite period, automatically extending unless cancelled with a minimum notice of 6 months.

Key milestones and phases include:

• Implementation phase: Commences on October 1, 2026, and concludes on January 1, 2027.
• ICT Performance phase: Begins on January 1, 2027.
• Steering group establishment: A steering group will be formed upon the signing of the agreement.
• Annual evaluations: The parties will evaluate the agreement's execution and the ICT Performance results at least once per year. Additionally, contract annexes will be evaluated at least once annually or upon request.

The core scope of work for this tender involves the delivery, implementation, and management of a SIEM (Security Information and Event Management) platform combined with SOC (Security Operations Center) services for Veiligheidsregio Haaglanden (VRH).

The primary objective is to establish a future-proof, reliable, and scalable solution for the centralized collection, correlation, and analysis of security data to promptly detect cybersecurity threats and ensure the organization's continuity. The solution must be offered as a service and comply with relevant laws and regulations regarding information security and data protection.

The assignment also encompasses implementation, setup, management, monitoring, incident response, reporting, advising, and ongoing development of the service throughout the contract period. Specifically, the assignment includes the delivery of SIEM-SOC services starting January 1, 2027, along with support and optionally addable functionalities. This new service replaces the current Cloud security center service, which ends on December 31, 2026.

The implementation phase requires a detailed project approach, including phasing, preconditions, dependencies, risks and control measures, expected contributions from VRH, transfer from the implementation team to the management and execution organization, and migration, takeover, and securing of current and historical data from the existing cloud security environment. It also requires a description of roles, responsibilities, and necessary deployment of personnel involved in the implementation, including the composition of the implementation team, expertise of employees, the role of VRH's ICT Management Team, and expected VRH involvement. Planning and control aspects, such as the project schedule, relationship with the termination of current services, milestones, decision points, lead times, required staff deployment, critical dependencies, and moments for VRH involvement, are also part of the scope.