Health/E24-47488_IB: Provision of Cyber Security Services Industry Briefing

Summary

The Department of Health, Disability and Ageing will conduct a pre-release industry briefing to support an upcoming approach to market for Cyber Security Services. This session will provide an overview of the planned procurement and offer potential tenderers early insights into the Department’s requirements.As part of the upcoming procurement, the Department is seeking a qualified Cyber Security Partner to deliver specialised services within a complex ICT environment.The Cyber Partner will be responsible for the planning, implementation, operation, and continuous improvement of Cyber services aligned with the National Institute of Standards and Technology (NIST) Cybersecurity Framework v2.0.These services include:•    Security Operations Centre (SOC) Services – providing real  time monitoring, alerting, and correlation of security events across the Department’s infrastructure, platforms, and applications.•  Incident Response and Recovery – managing the full lifecycle of cyber incidents, including triage, investigation, containment, remediation, and recovery, with 24/7 on-call support.•   Security Use Case Development – designing and maintaining detection use cases aligned to frameworks such as MITRE ATT&CK (MITRE Adversarial Tactics, Techniques, and Common Knowledge), MaGMa (Management, Growth, Metrics & assessment), and integrating threat intelligence and CTIS (Cyber Threat Intelligence Sharing) feeds.•   Security Orchestration, Automation, and Response (SOAR) Platform Implementation – recommending and supporting a SOAR platform to automate and scale incident response, with the Department retaining licensing and ownership.•   Security Information and Event Management (SIEM) Tool Operations – managing the Department’s Splunk-based SIEM, including log ingestion, use case tuning, and performance optimisation.•   Vulnerability Management – operating and enhancing the Department’s Tenable-based vulnerability management tools across on-premise and cloud environments.•  Cyber Toolset Utilisation – using Microsoft Defender and other Department-provided tools to support detection, response, and analysis.•  Collaboration and Integration – working closely with the Department’s Service Integration and Management (SIAM) partner, Digital Services Delivery teams, and other service providers to ensure coordinated and effective service delivery.This is an industry briefing notificationIndustry Briefing25 August 20253PM AESTVirtual via Microsoft TeamsThe industry briefing will be held virtually via Microsoft Teams. Attendance is optional and subject to registration.No questions will be answered during the industry briefing. The purpose of the session is to provide background information only and support probity in the lead-up to the formal release of the Request for Tender (RFT).Following the release of the RFT, tenderers are invited to submit questions in writing to the Contact Officer atnexteradigital.Cyber@health.gov.au. All questions will be managed in accordance with the process outlined in the Conditions of Tender, ensuring consistent and transparent communication with all potential respondents.Interested parties wishing to attend must provide written notice to the Contact Officer by emailingnexteradigital.Cyber@health.gov.auno later than 5PM, Friday 22 August 2025.The notice (one per company) must include the names and email addresses of all proposed attendees and a mobile phone number for a nominated point of contact for the organisation. The Department will confirm registrations as received and issue joining details for the virtual briefing on the morning of the event.Please note: Attendance at the industry briefing is optional and not a prerequisite for responding to the subsequent procurement process.