FW - Services - Supply & Maintenance of Electronic Key Safes - Multi Site

Scottish and Southern Electricity Networks (Distribution and Transmission) intends to establish a Framework Agreement for the supply, delivery and installation of cabinet solution. This will include; integration with PAC access control systems, commissioning, maintenance and support services. SEN Distribution intends to replace 18 existing electronic key management cabinets that have reached end of life and are no longer supported, together with the installation of a further 4 new cabinets. SSEN Transmission has identified a requirement to deploy a new electronic key management solution across approximately 150 operational sites. The objective of this procurement is to establish a secure, cloud-based electronic key management solution that enables the safe storage, control and audit of keys used by Distribution and Transmission Engineering teams. The solution must integrate seamlessly with SSEN's existing PAC access control and security management systems and support efficient, secure access to critical operational assets. The scope includes, but is not limited to, the need to provide a robust and highly available secure key storage solution, that is auditable, tamper resistant, and an operationally viable management solution for vehicle, substation, key site and operational technology cabinet access keys. Additionally, the service will need to ensure that it is aligned to industry best practice security controls and recognised standards such as Cyber Essentials, Cyber Essentials Plus, ISO 27001/2, ISA/IEC 62443 2-1, 2-4, 3-2 & 3-3 and NIST 800-53.

The solution needs to support:

- Secure and auditable key management and reporting; - High availability (24 x 7 x 365) – failback solution – master key / break glass process / solution; - Centrally managed and cloud hosted; - Component based architecture and with integration capability out of the box to services such as PAC, CCTV and IDS; and - Ease of use and operational management. Successful Suppliers will be expected to demonstrate: o Understanding of recognised industry standards (Cyber Essentials, ISO27001/2,ISA/IEC 62443 2-1, 2-4, 3-2 & 3-3 and NIST 800-53); o A solution which is but not limited to a robust and highly available secure key storage solution; o Solution must be auditable and tamper resistant; o Solution must also be operationally viable for vehicle, substation, key site and operational technology cabinet key access; o High availability (24 x 7 x 365) – failback solution – master key / break glass process / solution; o Centrally managed and cloud hosted; o Component based architecture and with integration capability out of the box to services such as PAC, CCTV and IDS.