The scope of work is to deliver a Secure Service Edge (SSE) solution to enable Zero Trust Network Access (ZTNA).

{
  "awards": [
    {
      "id": "057493-2025-1",
      "relatedLots": [
        "1"
      ],
      "status": "active"
    }
  ],
  "bids": {
    "statistics": [
      {
        "id": "893",
        "measure": "bids",
        "relatedLot": "1",
        "value": 6
      }
    ]
  },
  "buyer": {
    "id": "GB-FTS-72764",
    "name": "Scotland Gas Networks (SGN)"
  },
  "contracts": [
    {
      "awardID": "057493-2025-1",
      "dateSigned": "2025-08-06T00:00:00+01:00",
      "id": "057493-2025-1",
      "status": "active"
    }
  ],
  "date": "2025-09-17T17:08:46+01:00",
  "id": "057493-2025",
  "initiationType": "tender",
  "language": "en",
  "ocid": "ocds-h6vhtk-02874b",
  "parties": [
    {
      "address": {
        "countryName": "United Kingdom",
        "locality": "Horley",
        "postalCode": "RH6 9HJ",
        "region": "UK",
        "streetAddress": "St Lawrence House, Station Approach"
      },
      "contactPoint": {
        "email": "mobasshir.mushtaq@sgn.co.uk"
      },
      "details": {
        "classifications": [
          {
            "description": "Production, transport and distribution of gas and heat",
            "id": "PRODUCTION_TRANSPORT_DISTRIBUTION_GAS_HEAT",
            "scheme": "TED_CE_ACTIVITY"
          }
        ],
        "url": "https://www.sgn.co.uk"
      },
      "id": "GB-FTS-72764",
      "identifier": {
        "legalName": "Scotland Gas Networks (SGN)"
      },
      "name": "Scotland Gas Networks (SGN)",
      "roles": [
        "buyer"
      ]
    },
    {
      "address": {
        "countryName": "United Kingdom",
        "locality": "Horley",
        "postalCode": "RH6 9HJ",
        "streetAddress": "St Lawrence House,"
      },
      "id": "GB-FTS-71661",
      "identifier": {
        "legalName": "SGN"
      },
      "name": "SGN",
      "roles": [
        "reviewBody"
      ]
    }
  ],
  "tag": [
    "award",
    "contract"
  ],
  "tender": {
    "classification": {
      "description": "Security services",
      "id": "79710000",
      "scheme": "CPV"
    },
    "description": "The scope of work is to deliver a Secure Service Edge (SSE) solution to enable Zero Trust Network Access (ZTNA). This new service will provide SGN with enhanced security controls to protect enterprise traffic to the internet, cloud services, and applications. The solution is intended for an initial three-year term, with the option to extend for a further two years.",
    "id": "ocds-h6vhtk-02874b",
    "items": [
      {
        "deliveryAddresses": [
          {
            "region": "UK"
          }
        ],
        "id": "1",
        "relatedLot": "1"
      }
    ],
    "legalBasis": {
      "id": "32014L0025",
      "scheme": "CELEX"
    },
    "lots": [
      {
        "description": "The scope of work is to deliver a Secure Service Edge (SSE) solution to enable Zero Trust Network Access (ZTNA). This new service will provide SGN with enhanced security controls to protect enterprise traffic to the internet, cloud services, and applications. The solution is intended for an initial three-year term, with the option to extend for a further two years.\nThe project will replace our current web proxy service with a Secure Service Edge (SSE) solution. \nSSE provides continuous risk assessment of sessions to be able to react in real time to risky behaviour, unlike current web proxies which only risk assess on connection. ZTNA and SSE will provide connectivity from any device based on identity, allowing for more flexible working end user use cases. This will also provide better risk assessments due to wider context of security controls applied to the sessions. This enhanced capability ensures more comprehensive protection for SGN now and into the future for management of cyber risks and continuous compliance towards our enhanced Cyber Assessment Framework (eCAF) requirements.\nDetails of the operational support will be discussed once a product has been selected. At this stage SGN would like to ensure support criteria can be met along side the technical requirements.\nSSE is the convergence of networking and security to provide a seamless and secure access. It will provide  SGN with new security controls and services to protect enterprise traffic to the internet, cloud services and applications. \nThe following are key features required but, not limited to;\n1. Zero Trust Network Access oversight and control \n2. Cloud Firewall capability\n3. Data Loss Prevention (DLP)  (this will also consist of integration with existing DLP solution on the Microsoft estate)\n4. Secure Web Gateway (SWG)\n5. Cloud Access Security Broker (CASB) (this will also consist of integration with existing CASB solution on the Microsoft estate)\n6. Seamless SSL inspection\n7. Advanced Threat Protection (ATP)",
        "hasOptions": false,
        "id": "1",
        "status": "cancelled"
      }
    ],
    "mainProcurementCategory": "services",
    "procurementMethod": "selective",
    "procurementMethodDetails": "Negotiated procedure with prior call for competition",
    "status": "complete",
    "techniques": {
      "hasFrameworkAgreement": true
    },
    "title": "The scope of work is to deliver a Secure Service Edge (SSE) solution to enable Zero Trust Network Access (ZTNA)."
  }
}