SIEM, SOC, SOAR-dienstverlening

The contract is scheduled to start on Monday, April 26, 2027. The initial end date for the agreement is April 25, 2031. There is an option for Veiligheidsregio Noord- en Oost-Gelderland (VNOG) to extend the framework agreement twice, each time for a period of two years, which would make the maximum end date April 25, 2035. This means the total duration is initially four years, with a potential extension up to eight years.

Key milestones and phases include:

• Publication of the Memorandum of Information: Friday, September 11, 2026.
• Closing date for submitting Requests for Participation: Friday, September 25, 2026, 12:00 PM.
• Notification of intended selection decision: Friday, October 9, 2026.
• Standstill period (selection): Saturday, October 10 to Thursday, October 29, 2026.
• Final selection decision: Friday, October 30, 2026.
• Award phase (indicative):
• Sending of Award Guideline to selected parties: Monday, November 2, 2026.
• Closing date for submitting questions about the Award Guideline: Friday, November 20, 2026, 12:00 PM.
• Publication of 1st Memorandum of Information: Friday, November 27, 2026.
• Closing date for submitting questions about the Award Guideline: Friday, December 4, 2026, 12:00 PM.
• Publication of 2nd Memorandum of Information: Friday, December 11, 2026.
• Closing date for submitting tenders: Friday, January 8, 2027, 12:00 PM.
• Notification of provisional award decision: Friday, February 5, 2027.
• Standstill period (award): Saturday, February 6 to Thursday, February 25, 2027.
• Definitive award: Friday, February 26, 2027.
• Implementation period: Friday, February 26 to Friday, April 23, 2027.
• Agreement start date: Monday, April 26, 2027.

The core scope of work for this tender involves contracting a single service provider to deliver, implement, set up, manage, and continuously develop integrated SIEM (Security Information and Event Management), SOC (Security Operations Center), and SOAR (Security Orchestration, Automation, and Response) services. The primary objective is to enhance the digital resilience of Veiligheidsregio Noord- en Oost-Gelderland (VNOG), professionalize information security, and enable timely responses to cybersecurity threats and security incidents.

The Statement of Work summary includes:

• Collecting, correlating, and analyzing log and security data.
• Security monitoring and detection of anomalies and threats.
• Security Incident Response and follow-up of security incidents.
• Providing a Security Operations Center (SOC).
• Use case management and optimization of detection rules.
• Reports and advisory services concerning security incidents, threats, and trends.
• Support for compliance and audit issues.
• Automation and orchestration of security processes through SOAR functionalities.
• Onboarding of data sources and integration with relevant VNOG systems.

Optional services that are part of the assignment include:

• Modification of the number of connected data sources and systems.
• Additional consultancy and advisory services in cybersecurity and information security.
• Expansion of SOC services to supplementary service levels.
• Additional incident response support.
• Support for audits, compliance, and reporting.
• Additional training and awareness activities for VNOG employees.
• An optional extension for CERT (Computer Emergency Response Team) services.

Services explicitly excluded from this assignment are:

• The delivery and replacement of generic office automation tools.
• Full management of VNOG's IT infrastructure.
• Performing penetration tests and red teaming, unless expressly agreed upon as an option or additional service.
• The provision of cybersecurity services not related to SIEM, SOC, and SOAR services.
• Activities that fall under routine functional or technical management of VNOG's application systems.

The agreement is set to commence on April 26, 2027, and will run until April 25, 2031, with an option for VNOG to unilaterally extend the framework agreement twice for a period of two years each, potentially extending the contract until April 25, 2035.