Decision

A Managed Detection and Response (MDR) service is a cybersecurity service that combines technology with human expertise to rapidly identify and limit the impact of threats by performing threat hunting, monitoring, and response. The main benefit of MDR is that it quickly helps in limiting the impact of threats without the need for additional staffing.

The current contract for supplying an MDR service will end on 28/06/2026. The intention is not to renew with the incumbent supplier and take out a new one year direct award contract with Nomios, who offer better value for money and a more mature offering. 

The value of the 12-month contract is £71,000 + VAT

Reasons for the decision

Security is at the forefront of Digital and this decision is based on the ongoing need for advanced cybersecurity measures to protect against evolving threats. This new contract will continue to show the value of MDR in rapidly identifying and mitigating cyber threats without requiring additional staffing. The move to Nomios should provide a better service, safeguarding critical systems and data, while ensuring cost-efficiency.

Alternative options considered

Do nothing and let the current contract expire without putting an alternative solution in-place, introducing a cost saving. This was discounted as the risk in not monitoring our environment is too great.

Extend the MDR service with the current  supplier. This was also discounted for predominantly two reasons. Firstly the existing service has been delivered adequately but hasn’t seen service or technical improvements. Secondly the cost of the proposed solution is more cost effective.