Modern.gov Content
Issue - meetings
Cyber Security Contract
Meeting: 16/09/2024 - Strategy and Resources Policy Committee (Item 42)
42 Cyber Security Maturity Assessment and procurement of a managed service 
PDF 231 KB
This report informs the Committee of the outcomes of an independent Cyber Security Maturity Assessment and seeks approval to procure and award a contract for a Managed Extended Defence and Response service. This is a third-party provision of 24/7 cyber security monitoring and active defence against cyber-attacks. This report also proposes a small in-house staffing increase to ensure the Council can further strengthen cyber security in line with its risk appetite.
Additional documents:
- 13.2 Appendix B - EQIA, item 42
PDF 201 KB
- 13.3 Appendix C - EnvIA, item 42
PDF 253 KB
- 13.4 Appendix Ei - Exempt Additional Information , View reasons restricted (42/4)
- 13.5 Appendix Eii - Exempt Cyber Security Maturity Assessment report , View reasons restricted (42/5)
- 13.6 Appendix Eiii - Exempt Decision Risk Assessment , View reasons restricted (42/6)
Decision:
The Committee RESOLVED (unanimously):
1. To authorise the Director: Policy, Strategy and Digital in consultation with the Chair of the Strategy and Resources Committee, Director of Finance (S151 officer) and Director of Legal & Democratic Services to procure and award a Managed Extended Defence and Response contract, in-line with the maximum budget envelopes outlined in the report, subject to identification of funding within the Medium Term Financial Plan and the setting of the council’s budget for 2025/26.
2. To authorises the Director: Policy, Strategy and Digital to invoke any subsequent extensions or variations specifically defined in the contract(s) being awarded, up to the maximum budget envelope outlined in the report.
Minutes:
Note: this item was taken as the penultimate item of business at the meeting.
The Committee considered a report (agenda item 13) detailing the outcomes of an independent Cyber Security Maturity Assessment and seeking approval to procure and award a contract for a Managed Extended Defence and Response service.
It was noted that this was a key decision report, as the proposed decision involved spend of over £500k. It was also noted that the report included exempt appendices.
Members generally indicated their support for this proposal, noting the significant costs incurred by other authorities as a result of cyber attacks.
On the motion of the Chair, seconded by Cllr Classick, the Committee RESOLVED (unanimously):
1. To authorise the Director: Policy, Strategy and Digital in consultation with the Chair of the Strategy and Resources Policy Committee, Director of Finance (S151 officer) and Director of Legal & Democratic Services to procure and award a Managed Extended Defence and Response contract, in-line with the maximum budget envelopes outlined in the report, subject to identification of funding within the Medium Term Financial Strategy and the setting of the council’s budget for 2025/26.
2. To authorise the Director: Policy, Strategy and Digital to invoke any subsequent extensions or variations specifically defined in the contract(s) being awarded, up to the maximum budget envelope outlined in the report.