Source: https://tendernation.io/opportunities/01a13c9a-36ab-7163-bfa8-facab69ed4a8/privilege-access-management-poc closed GB open procedure Suitable for SMEs # Privilege Access Management PoC [Ministry of Justice](https://tendernation.io/buyers/ministry-of-justice) Estimated value Not stated Published 14 Apr 2022 Deadline Closed 22 Apr 2022 ## Who can bid - Buyer says suitable for SMEs The buyer ticked “suitable for SMEs” on the notice. Anyone can still bid. - Open procedure Anyone can submit a full tender; there is no shortlisting stage. [More contracts for small businesses and VCSEs](https://tendernation.io/opportunities/for-small-businesses) ## About this tender Opportunity Outline: PAM (Privileged Access Management) is an additional security measure that can be placed in front of a system administration interface. Her Majesty's Courts and Tribunals Service (HMCTS) intend to run a pro bono proof of concept (POC) process to better understand how PAM can help protect the department. What is PAM: PAM is based on two central concepts: Just in time Administration and Just enough Administration. Just in time Administration: No assumed access is granted; Request access must be made. A Temporary credential is given to the system administrator through workflow. Just enough administration: Just enough Administration is another way of describing the concept of least privilege. Benefits of PAM: It will make it more difficult for an attacker to pivot into critical services, from an already compromised management access workstation. It will introduce an additional source of auditing, making it easier to identify misuse of administration interfaces. This will act as a strong deterrent against the insider threat, where a legitimate system administrator may consider abusing their access. It will introduce additional guard rails to help system administrators. They will hold less responsibility to protect their access credentials. It will help protect them from accidentally making unintended changes. Privilege Access Management would be an Enterprise level initiative covering all business areas that are part of the strategic roadmap, however the initial focus is on two groups within HMCTS. This contract opportunity only covers the pro bono POC. Hence, it will be for a pro bono contract. Proof of Concept: HMCTS wish to run one POC with two suppliers, to understand if a third-party security tool would be of any benefit to HMCTS systems. The POC is envisioned to last up to 3 months and be carried out asap. High Level Requirements to be used for the POC: The Key requirements that operate as a baseline for mitigation of the Cyber risks are: Just-in-time Administration Request access - workflow ### Approval process ### Just enough Administration (Least privilege) Full system level/ global admin privilege should be an exception Definition of role-based access management ### Strong logging and auditing Logging keystrokes which could leverage behavioural analytics Session recording ### Centralisation Policy management and roll out ### Reporting / metrics - BI Based Periodical user entitlement reviews Additional information: Further information available, please email: Read full description ## CPV classification Data security software package Source Contracts Finder (UK) [View official notice](https://www.contractsfinder.service.gov.uk/notice/8f067b5e-3b8f-4f30-a895-35864320a501) Never miss a tender like this again Get AI summaries, deadline alerts and a bid pipeline for tenders matched to your business. Free to start. [Track tenders free](https://tendernation.io/register) [Buyer profile Ministry of Justice: past awards and live tenders](https://tendernation.io/buyers/ministry-of-justice) [Sector More Software packages & information systems tenders](https://tendernation.io/sectors/software-information-systems) ## More tenders like this [Preliminary Market Engagement - Corporate Enterprise Resource Planning (ERP) · North East Lincolnshire Borough Council · 21 days left · 9 Nov 2026](https://tendernation.io/opportunities/01a15410-bf5e-72d1-8225-fbabeaba595f/preliminary-market-engagement-corporate-enterprise-resource-planning-erp) [Servers – Dostawa serwerów do klastra wirtualizacyjnego · Politechnika Rzeszowska · 2 days left · 21 Oct 2026](https://tendernation.io/opportunities/01a15183-2e23-7066-ba48-4fc2a9243b50/poland-servers-dostawa-serwerow-do-klastra-wirtualizacyjnego) [License management software package – Dostawa licencji bezpieczeństwa do Systemu DNS · Poczta Polska S.A. · 16 days left · 3 Nov 2026](https://tendernation.io/opportunities/01a15183-20fa-7396-87e7-40ce84cb0f4d/poland-license-management-software-package-dostawa-licencji-bezpieczenstwa-d) [Security software package – Pořízení a implementace integrovaného řešení EDR/XDR a SIEM · Fakultní nemocnice Plzeň · 30 days left · 18 Nov 2026](https://tendernation.io/opportunities/01a15183-1e5d-73ea-989e-b9c221c4c490/czechia-security-software-package-porizeni-a-implementace-integrovaneho-rese) [Computer servers – „Dostawa serwerów komputerowych wraz z dedykowanymi kartami graficznymi dla Copernicus PL Sp. z o.o.” · Copernicus Podmiot Leczniczy Spółka Z Ograniczoną Odpowiedzialnością · 3 days left · 22 Oct 2026](https://tendernation.io/opportunities/01a15183-08e5-7339-9a05-be1adf5996b5/poland-computer-servers-dostawa-serwerow-komputerowych-wraz-z-dedykowanymi) [Software package and information systems – Datenerfassungssystem · Dataport AöR · 15 days left · 3 Nov 2026](https://tendernation.io/opportunities/01a15183-43c5-7007-89f5-0ea2d1525f27/germany-software-package-and-information-systems-datenerfassungssystem)