The following services are required to be purchased and resellers will be approached to complete:

• Analysis, review, a recommendation and strategy for an appropriate SIEM or SOAR based on Austrade’s technical environment and the Government’s compliance requirements
• Associated solution design
• Solution configuration and implementation
• Development of related documentation and diagrams including the strategy, implementation plan, Solution Architecture Documentation, as built configuration, event and log processing documentation, and monitoring processes and procedure runbooks.

Note, this does not include the cost and ongoing maintenance of the SIEM/SOAR.

Vendors are asked to indicate their ability to deliver the milestones on an agreed schedule, with full implementation no later than 30 June 2025.

Vendors are asked to indicate the suitability, availability, skills and experience of their proposed resources.

Vendors are asked to provide indicative costs for the work broken down for each milestone:

Vendors are asked to answer the questions detailed at Attachment C: Vendor and Third Party Security Requirements. Note that non-compliance with individual requirements in this document does not prevent you from being selected as the seller.

Estimated start date: Thursday, 01 May 2025

Initial contract duration: 2 months

Extension term: 12 months

Number of extensions: 2

Location of work: ACT

Working arrangements: Hybrid