The objective of this tender is to select a single supplier to provide a combined Managed Detection and Response (MDR) service covering SWS’ Corporate/IT and Operational Technology (OT) environments. SWS is seeking a 24/7/365 MDR service providing continuous monitoring, threat detection, triage, investigation, IT and OT incident response, case management, reporting and assurance evidence. The MDR Service must support SWS in meeting its regulatory and assurance obligations, including CAF, NIS and DWI requirements SWS operates an existing security tooling estate (e.g. Nozomi Networks, Cisco Cyber Vision and CrowdStrike). The MDR Service Provider will be expected to consume and integrate telemetry from these existing SWS tooling sources rather than replace them by default. Where a Tenderer identifies material gaps in the existing tooling estate, they should propose solutions to address those gaps as part of their proposed design and tender response. Estimated contract value for a 3-year contract with options to extend by 1-year and a further 1-year is £8.5m