Decision

A new contract, through G-Cloud, for supplying an MDR (Managed Detection and Response) service will start on 28/06/2025 with our incumbent supplier. The current contract was established through G-Cloud with Secon Cyber, a trusted partner to the councils. An MDR service is a cybersecurity service that combines technology with human expertise to rapidly identify and limit the impact of threats by performing threat hunting, monitoring, and response. The main benefit of MDR is that it quickly helps in limiting the impact of threats without the need for additional staffing. The value of the 12-month contract extension is £70,445.67.

Reasons for the decision

Security is at the forefront of Digital and this decision is based on the ongoing need for advanced cybersecurity measures to protect against evolving threats. The current contract has proven the value of MDR in rapidly identifying and mitigating cyber threats without requiring additional staffing. This service is important for safeguarding critical systems and data, while ensuring cost-efficiency with a value of £70,445.67 for the period.

Alternative options considered

Do nothing and let the current contract expire without putting an alternative solution in-place, introducing a cost saving. This was discounted as the risk in not monitoring our environment is too great.

Move the MDR service to an alternative supplier. This was also discounted for predominantly two reasons. Firstly the existing service is working very well, providing a timely and insightful view of our security landscape. Secondly the cost and resource required to move to a new service and refine it accordingly would be significant.