FW Services - Operational Technology Framework - Extended Deadline to 20/06

Design and build of security solutions to be deployed into substation environments,

including the infrastructure and services for backup, monitoring, endpoint protection and

firewalls.

• Design and build of physical security solutions for substation environments, including

automated access control systems (AACS), CCTV, and other access control and monitoring

solutions such as key safes and door contact sensors.

• Procure and supply the hardware for the security solutions. In most cases this will be free

issued by SSEN-T.

• Provide ongoing 2nd line maintenance and support of the service / solution.
• Consultancy engagements focused on future development or addressing emerging

challenges, specific to Lot 1.

Training and Awareness - Development of training content to educate users of operational

technology about the risks from cyber security threats.

• Provide specialised OT Security Consultancy and related services including process

development and assurance (IDAM, VM, Change Management), maturity assessment,

collation and summary of threat intelligence, testing and configuring security tools

(Firewalls, EDR, IDS, SIEM).

• Security architecture - risk assessing a new changed system IT/OT systems to ensure

security principles are followed and residual risks are understood.

• Penetration testing - undertaking targeted investigations to highlight vulnerabilities within

our existing systems and controls that could be exploited by a threat actor.

• OT Forensics - capability to undertake forensic investigations on low level devices used

within the electricity sector. e.g. those running Realtime operating systems such as Vxworks.

• Consultancy engagements focused on future development or addressing emerging

challenges, specific to Lot 2

• Design and build of IT/OT infrastructure to be deployed into data centres and data rooms

within offices. Including hardening of servers, software installation, network configuration,

physical deployment (racking and wiring).

• Design and build supporting applications such as identity services, domain management,

key management and backup servers.

• Provide infrastructure support, including patching, processing change requests, fault

investigation and repair.

• Design, build or procurement of network infrastructure to include but not limited to

Routers, Switches, Firewalls and typical Datacentre technologies

Page 6 to 15

• Consultancy engagements focused on future development or addressing emerging

challenges, specific to Lot 3.

• Provide specialist application support and development for OT Applications including

PowerOn, PI to respond to incidents, facilitate configuration changes and deliver updates.

• Provide technical assistance for wider OT estate, including Active Directory and firewalls -

often required as part of fault diagnosis, technical remediation and/or project resourcing

Page 7 to 15

• Provide assistance and expertise with build and support of physical and virtual OT Windows

clients. Building, applying and testing new client images via SCCM for use in Production OT

environment.

• DR testing - provide technical expertise with backup solutions such as NetBackup & Rubrik,

to assist with comprehensive DR restoration tests for our OT servers and applications.

• Consultancy engagements focused on future development or addressing emerging

challenges, specific to Lot 4.

• Provide data center hosting in a secure and resilient environment suitable for critical

national infrastructure (CNI) (likely to be Tier 3 as a minimum) with proximity to the SSEN

Transmission OT network in the north of Scotland and connectivity to public cloud services.

• Provide data center hosting to Security Check Level to meet Cabinet Office requirements.

• Professional and Consultancy services.
• Skillset with Operational Technology (OT) expertise. Roles to include, but not limited to;

1. Business analysis
2. Design development
3. Testing
4. Change management
5. Architecture
6. Project delivery and management
7. Technical design
8. Service design