Cyber Security Operations Centre CSOC

SR91442681, Request for information, managed Cyber Security Operations Centre

Energy Queensland is seeking information from established suppliers for a managed Cyber Security Operations Centre (CSOC) service across its corporate IT and Operational Technology (OT) environments.

The indicative scope includes 24x7 security monitoring, alert triage and investigation, incident notification and escalation, threat hunting, threat intelligence, detection and security platform engineering, OT security monitoring, and on-demand incident response and digital forensics. It also includes service management, incident exercises, knowledge transfer, transition and exit support.

Suppliers must support Microsoft Sentinel as EQL’s target security information and event management platform and integrate with EQL’s security platforms and ServiceNow. The service will operate alongside EQL’s internal teams, with EQL retaining incident command, risk acceptance and operational decisions.

This request is intended for suppliers with - An operational Australian-based 24x7 CSOC, Brisbane-based engagement and access to incident response, forensic and OT specialists.

Proven managed monitoring capability across both IT and OT environments.

Relevant electricity-sector or Australian critical infrastructure experience, supported by two comparable customer references.

Capacity to keep all EQL data handling within Australia, with no offshore access.

Willingness to use the Queensland Information Technology Contracting (QITC) framework for a future engagement.

This is an information-gathering and capability-screening activity, not a request for tender or a commitment to procure. It is not intended for software-only, advisory-only, penetration testing or staff augmentation offerings. Responses will inform EQL’s future service requirements and sourcing approach.

Background information / Compatibility requirements

Energy Queensland (EQL) currently uses a hybrid managed Cyber Security Operations Centre (CSOC) service across its corporate IT and Operational Technology (OT) environments. EQL retains responsibility for cyber security strategy, governance, risk acceptance, incident command and operational decisions. The managed service provides specialist capability and continuous operational coverage.

The current arrangement is approaching the end of its contracted term. This RFI seeks market information on available capabilities, service models, technologies, commercial approaches and transition practices to inform EQL’s future sourcing strategy. It is not a request for tender or a commitment to procure.

The proposed service must support Microsoft Sentinel as EQL’s target security information and event management (SIEM) platform. Suppliers should describe integration with Microsoft Defender, ServiceNow and other EQL-owned security platforms. Security incident records must be maintained in EQL’s ServiceNow environment or supported through bidirectional integration with supplier tooling.

The current environment includes Palo Alto XSOAR for enrichment, workflows, threat intelligence integration and approved response playbooks. EQL is considering future platform changes. Other than Microsoft Sentinel, the listed platforms provide context and do not commit EQL to retaining every component.

The service must support enterprise IT and passive OT monitoring, work with EQL teams and other service providers, and preserve EQL’s operational control. All EQL data handling must remain within Australia, with no offshore access. Suppliers must support monitoring and response continuity during transition and exit, and explain how service records, detection content, playbooks and documentation remain portable.

Desired Outcomes ('Nice to haves', Conditions & Warranties, SLA's, Project benefits): As per RFI documentations

Buyer: Energy Queensland Limited

Buyer location: 26 Reddacliff St, Newstead, Queensland 4006, Australia

VendorPanel reference: VP532064

Buyer's reference: SR91442681

Opens: Monday 02 November 2026 (E. Australia Standard Time)

Closes: Monday 30 November 2026 12:00 PM (E. Australia Standard Time)

Supplier query cut-off: Monday 30 November 2026 12:00 PM (E. Australia Standard Time)

Expected decision: Monday 28 December 2026 (E. Australia Standard Time)

Categories: IT & Telecomms; 1: IT Services; 2: Services - Application Expertise; 3: Services - Architecture & Design; 4: Services - Augmented Reality (AR); 5: Services - Benchmarking; 6: Services - Business Process Expertise; 7: Services - Call Centre & Information Services; 8: Services - Cloud Services; 9: Services - Managed Services; 10: Services - Other; 11: Services - Outsourced Services; 12: Services - Risk Management; 13: Services - Security Management; 14: Services - Support

Regions of service: Queensland; 1: Brisbane; All Regions of Service locations are within Australia.

Tender documents: 2

Published on VendorPanel Public Tenders. Documents and responses require free VendorPanel supplier registration.