Yarra Valley Water (YVW) uses a number of Industrial Control Systems (ICS) to provide water and sanitation services to almost 2 million Victorians. The security of these ICS systems is a critical and core requirement for YVW’s ability to provide services to its citizens. YVW is seeking to procure the services of a supplier that will provide Operational Technology Security Operations Centre (SOC) Managed Services to perform 24x7 monitoring, investigation and notification of security threats and incidents. This will give YVW the ability to respond and contain cyber incidents and keep its ICS environment secure from attackers.

The key objective of the OT SOC service is to provide YVW the ability to detect and respond to security incidents and preserve the security of our ICS systems. The solution shall be able to:

1. Detect, investigate, notify and advise on security events in ICS environment

2. Monitor security events inclusive but not limited to ingress, egress and lateral movement within OT networks

3. Collect the asset inventory for the Purdue Model Level 1,2,3 devices within the ICS network that are discoverable via passive IP network monitoring

4. Collect and analyse for malicious events from the relevant ICS logs

5. Provide evidence-based reporting of risks and vulnerabilities, suspicious and anomalous events and changes in asset profile

6. Provide a highly-customizable dashboard view of YVW's ICS threat level, incidents, health and other relevant information

The successful supplier will be engaged on an initial three (3) year contract, with the option to extend by up to two (2) years at the discretion of YVW.

YVW’s preference is to engage a single supplier or consortium (where a Prime needs to be nominated and will be the sole party YVW deals with) to implement and deliver the solution (services and platform) based on the stated requirements.