FW Services - Operational Technology Framework - Extended Deadline

• Design and build of security solutions to be deployed into substation environments, including the infrastructure and services for backup, monitoring, endpoint protection and firewalls. • Design and build of physical security solutions for substation environments, including automated access control systems (AACS), CCTV, and other access control and monitoring solutions such as key safes and door contact sensors. • Procure and supply the hardware for the security solutions. In most cases this will be free issued by SSEN-T. • Provide ongoing 2nd line maintenance and support of the service / solution. • Consultancy engagements focused on future development or addressing emerging challenges, specific to Lot 1.

• Training and Awareness - Development of training content to educate users of operational technology about the risks from cyber security threats. • Provide specialised OT Security Consultancy and related services including process development and assurance (IDAM, VM, Change Management), maturity assessment, collation and summary of threat intelligence, testing and configuring security tools (Firewalls, EDR, IDS, SIEM). • Security architecture - risk assessing a new changed system IT/OT systems to ensure security principles are followed and residual risks are understood. • Penetration testing - undertaking targeted investigations to highlight vulnerabilities within our existing systems and controls that could be exploited by a threat actor. • OT Forensics - capability to undertake forensic investigations on low level devices used within the electricity sector. e.g. those running Realtime operating systems such as Vxworks. • Consultancy engagements focused on future development or addressing emerging challenges, specific to Lot 2.

• Design and build of IT/OT infrastructure to be deployed into data centres and data rooms within offices. Including hardening of servers, software installation, network configuration, physical deployment (racking and wiring). • Design and build supporting applications such as identity services, domain management, key management and backup servers. • Provide infrastructure support, including patching, processing change requests, fault investigation and repair. • Design, build or procurement of network infrastructure to include but not limited to Routers, Switches, Firewalls and typical Datacentre technologies • Consultancy engagements focused on future development or addressing emerging challenges, specific to Lot 3.

• Provide specialist application support and development for OT Applications including PowerOn, PI to respond to incidents, facilitate configuration changes and deliver updates. • Provide technical assistance for wider OT estate, including Active Directory and firewalls - often required as part of fault diagnosis, technical remediation and/or project resourcing • Provide assistance and expertise with build and support of physical and virtual OT Windows clients. Building, applying and testing new client images via SCCM for use in Production OT environment. • DR testing - provide technical expertise with backup solutions such as NetBackup & Rubrik, to assist with comprehensive DR restoration tests for our OT servers and applications. • Consultancy engagements focused on future development or addressing emerging challenges, specific to Lot 4.

• Provide data center hosting in a secure and resilient environment suitable for critical national infrastructure (CNI) (likely to be Tier 3 as a minimum) with proximity to the SSEN Transmission OT network in the north of Scotland and connectivity to public cloud services. • Provide data center hosting to Security Check Level to meet Cabinet Office requirements.

• Professional and Consultancy services. • Skillset with Operational Technology (OT) expertise. Roles to include, but not limited to; 1. Business analysis 2. Design development 3. Testing 4. Change management 5. Architecture 6. Project delivery and management 7. Technical design 8. Service design