Content

A new contract, through G-Cloud,  for
supplying an MDR (Managed Detection and Response) service will
start on 28/06/2025 with our incumbent supplier.  The current
contract was established through G-Cloud with Secon Cyber, a
trusted partner to the councils.  An MDR service is a
cybersecurity service that combines technology with human expertise
to rapidly identify and limit the impact of threats by performing
threat hunting, monitoring, and response. The main benefit of MDR
is that it quickly helps in limiting the impact of threats without
the need for additional staffing.  The value of the 12-month
contract extension is £70,445.67.

Reasons for the decision

Security is at the forefront of Digital and
this decision is based on the ongoing need for advanced
cybersecurity measures to protect against evolving threats. The
current contract has proven the value of MDR in rapidly identifying
and mitigating cyber threats without requiring additional staffing.
This service is important for safeguarding critical systems and
data, while ensuring cost-efficiency with a value of
£70,445.67 for the period.

Alternative options considered

Do nothing and let the current contract expire
without putting an alternative solution in-place, introducing a
cost saving.  This was discounted as the risk in not
monitoring our environment is too great.
 
Move the MDR service to an alternative
supplier.  This was also discounted for predominantly two
reasons.  Firstly the existing service is working very well,
providing a timely and insightful view of our security
landscape.  Secondly the cost and resource required to move to
a new service and refine it accordingly would be significant.