Wsc/t/054/2026 - service – framework agreement for the provision, installation of siem and soc services for water services corporation

The contract duration is for a period of five (5) years. The contract officially starts on the date of the last signature on the contract by both parties.

Key milestones and phases include:

• Submission of Monthly Technical Reports within ten working days following the end of each reporting period.
• Submission of Quarterly Executive Reports within ten working days following the end of each quarter.
• Submission of Incident Reports for each security incident, including a detailed technical report and executive summary. The vendor must report any cybersecurity incident or breach within twenty-four (24) hours of detection.
• Submission of a Final Progress Report upon completion or termination of the contract.
• Interim Payments are made on a monthly basis after the submission of the Monthly Technical Report and issuance of a Partial Acceptance Certificate.
• Final Payment is made after the submission and approval of the Final Progress Report and issuance of the Final Acceptance Certificate.
• Upon termination or expiry, the Service Provider must support a secure transition, including the handover or deletion of data, logs, configurations, and documentation.

The core scope of work for this tender involves the provision, implementation, and ongoing operation of a Security Information and Event Management (SIEM) solution along with a 24/7 Managed Detection and Response (MDR) / Security Operations Centre (SOC) service. The overall purpose is to enhance the Information Security of the Water Services Corporation (WSC), an essential service provider, by strengthening its security posture and improving visibility across its ICT and OT environments.

Key deliverables and services explicitly mentioned include:

• SIEM Service, specifically log ingestion scalable from a minimum of 100GB to a maximum of 500GB per day, billed in 50GB increments.
• MDR / SOC Service, including 24x7 monitoring.
• MDR / SOC Service, providing Senior-Level (Tier 3 or equivalent) support on-demand, up to 100 hours annually.
• A 24/7 Tier 3 support on-call retention fee.

The tender documents further detail requirements for SIEM, MDR/SOC, SOC participation in incident response exercises, SOC response time Service Level Agreements, MDR/SOC reporting, regulatory reporting requirements, access and confidentiality requirements, cybersecurity obligations of the vendor (in support of NIS-2 requirements), and key experts requirements.