Department of Public Expenditure, Infrastructure, Public Service Reform and Digitalisation

FOI Request – Guidance and Oversight on ICT / Cybersecurity Procurement (Check Point / Vendor Lock In) Dear FOI Officer, Under the Freedom of Information Act 2014, I request access to records held by the Office of Government Procurement (OGP) concerning ICT and cybersecurity procurement where issues of brand specific specifications, vendor lock in or manufacturer certification requirements arise, including but not limited to procurements involving Check Point Software Technologies and its partners.For the period 1 January 2018 to present, please provide: 1.Copies of any circulars, guidance notes, policy documents or template materials issued by OGP to departments, agencies or State bodies which address: othe use or avoidance of brand specific technical specifications in tenders; ot he requirement to include “or equivalent” when referring to particular brands, standards or certifications; omanaging vendor lock in in ICT and cybersecurity procurements; othe use of manufacturer approved or manufacturer certified partners as eligibility criteria for bidders. 2.Copies of any reviews, audits, assessments or case studies undertaken by OGP that examine ICT/cybersecurity tenders run by: oESB / ESB Networks; othe Office of the Director of Public Prosecutions; oother justice sector bodies; where issues such as limited competition, single bidding, brand specific specifications or vendor lock in were identified. 3.Copies of any correspondence (emails or letters) between OGP and ESB / ESB Networks and/or the DPP which: odiscuss the design of ICT/cybersecurity tenders involving Check Point or its partners; oraise or respond to concerns about competition, brand specific requirements or vendor lock in; op rovide advice on the legality or appropriateness of requiring bidders to be a specific vendor’s certified or “Elite” partner. 4.Copies of any internal OGP briefing notes, discussion papers or recommendations prepared for Government, ministers or senior officials that discuss: odeclining competition (e.g. single bidding) in ICT/cybersecurity public procurement; oreliance on single vendors for critical infrastructure (including firewalls and cybersecurity solutions); opossible reforms or mitigation measures. If necessary to reduce workload, items 3 and 4 may be limited to the period 1 January 2020 to present and to correspondence/briefings involving senior OGP officials (e.g. Chief Procurement Officer and senior management). Please provide records electronically (PDF or similar) by email where possible. If any records are refused in whole or in part, please identify the record, specify the exemption(s) relied upon and explain how they apply. I ask that you consider the significant public interest in transparent, competitive and secure procurement of ICT and cybersecurity systems used across the State.