The Publications Office of the EU is in the process of updating some of the content on this website in the light of the withdrawal of the United Kingdom from the European Union. If the site contains content that does not yet reflect the withdrawal of the United Kingdom, it is unintentional and will be addressed.
United Kingdom-Bristol: Internet services
Section I: Contracting authority
Main address: www.jisc.ac.uk
Address of the buyer profile: https://tenders.jisc.ac.uk
Section II: Object
Vulnerability Assessment Service and Tools Supply Framework
JSL is looking for suppliers in the following areas:
Lot 1: Vulnerability Assessment Service: a managed service providing the requested vulnerability scan, results and associated report;
Lot 2: BeyondTrust or equivalent: the supply and support of BeyondTrust solutions;
Lot 3: Nexpose or equivalent: the supply and support of Nextpose solutions;
Lot 4: Qualys or equivalent: the supply and support of Qualys solutions;
Lot 5: Tenable Nessus or equivalent: the supply and support of Tenable Nessus solutions;
Lot 6: Tripwire IP360 or equivalent: the supply and support of Tripwire IP360 solutions;
Lot 7: Vulnerability Manager Plus or equivalent: the supply and support of Vulnerability Manager Plus solutions;
Lot 8: Other tools: the supply and support of other vulnerability assessment and scanning solutions.
This framework is to cover a wide range of potential requirements and to compliment current/future services over a maximum period of 4 years, 2 + 1 + 1.
Vulnerability Assessment Service
This framework agreement is being established to support JSL’s customers and other users in purchasing either a Vulnerability assessment service or the tools to undertake assessment themselves. These organisations will primarily be members of Jisc and/or those providing or supporting education, research or culture in the UK. The Janet Eligibility Policy outlines the types of organisation that are eligible to use the Janet network and its associated services. These can be summarised as:
• all institutions of higher or further education;
• all laboratories and other establishments of the Research Councils;
• the bodies funding higher and further education and research across the UK;
• local government authorities where these are providing broadband ICT services to schools, or commissioning these services from third parties;
• “Regional Broadband Consortia” (RBCs)and any other vehicles created by local government authorities in England to aggregate the provision of broadband ICT services to schools;
• the equivalent bodies in Scotland, Wales and Northern Ireland providing broadband ICT services to schools;
• individual schools, whether under local government control or with other governance;
• individual or groups of libraries, whether under local government control or with other governance;
• individual or groups of museums, whether under local government control or with other governance;
• any other bodies whose core purpose is the support or advancement of education or research
Many of the above bodies are also members of higher and further education purchasing consortia. These are independent organisations that provide a wide range of collaborative purchase agreements to their member institutions through consensus and the common desire to maximise their purchasing power in the market place. Any member of one of these consortia will be eligible to access many of JSL’s services by virtue of its membershipii, as will members of any other similar purchasing consortium in higher or further education that might be formed during the lifetime of the hosting arrangement.
These organisations may also at their own discretion use JSL services in support of their outreach, technology transfer and associated activities in support of their missions. These activities are commonly referred to as “business and community engagement”.
Under the Janet Eligibility Policy, services may also be provided to the wider public sector and associated bodies whom are providing public services other than those relating to education or research, e.g. blue light services, Courts etc. At present these include local government authorities in England and Northern Ireland, Education Scotland, the Welsh Assembly Government and (to a limited extent) the NHS in England and Scotland.
The Services are also available for use by any National Research and Education Network (NREN) and the community it serves where the NREN has either a direct connection to Janet or the NREN is a member at any time during the period of this framework of the consortium that operates GÉANT. GÉANT is the pan-European research and education network that interconnects Europe’s NRENs. A list of members of the GÉANT consortium (GÉANT Partners) may be found at the URL below. As HEAnet, the NREN of the Republic of Ireland, is connected both to Janet and is a member of the GÉANT consortium, the framework is available for use by HEAnet, its subsidiaries, member institutions and customers to include schools serviced by the HEAnet school’s network.
Membership lists for existing higher and further education purchasing consortia may be found at:
Initial 2-year term with the ability to extend for 2 further years in annual increments, 2 + 1 + 1.
BeyondTrust or equivalent
Initial 2 year term with the ability to extend for two further years in annual increments, 2+1+1.
Nexpose or equivalent
Qualys or equivalent
Tenable Nessus or equivalent
Tripwire IP360 or equivalent
Vulnerability Manager Plus or equivalent
Section III: Legal, economic, financial and technical information
Section IV: Procedure
Section VI: Complementary information
JSL expects to set up framework agreements with up to 3 solutions for the vulnerability assessment service — Lot 1, which meet the mandatory requirements laid out in the tender document, the bidder who scores highest on the evaluation will be nominated as the preferred supplier.
JSL expects to set up framework agreements with up to 2 vendors for the vulnerability assessment tools, Lots – 2, 3, 4, 5, 6 and 7, which meet the mandatory requirements laid out int he tender document, the bidder who scores highest on the evaluation will be nominated as the preferred supplier.
JSL expects to set up framework agreements with all qualifying vendors for the Vulnerability assessment tools — Lot 8, which meet the requirements laid out in the tender document, all the vendors will have equal ranking.
JSL wishes to provide the largest possible choice to potential buyers. In order to do so, bids from suppliers that are based upon the same manufacturer’s solution will be in direct competition with each other for places on the framework dependant upon lot.
Further information on the above is provided in the tender document.
Jisc Services Ltd will incorporate a standstill period at the point information on the award of the contract is communicated to suppliers. This notification provides information on the award decision. The standstill period, which will be for a minimum of 10 calendar days, provides time for suppliers to challenge the award decision before the contract is entered into. The Public Contracts Regulations 2015 article 91 provides for aggrieved parties who have been harmed or are at risk of harm by a breach of the rules to take action in the High Court (England, Wales and Northern Ireland).