Energy Queensland Limited

SR91442681

Monday 02 November 2026 (E. Australia Standard Time)

Monday 30 November 2026 12:00 PM (E. Australia Standard Time)

Monday 30 November 2026 12:00 PM (E. Australia Standard Time)

Monday 28 December 2026 (E. Australia Standard Time)

Energy Queensland Limited

26 Reddacliff St
Newstead, Queensland 4006
Australia

https://www.energyq.com.au/

Energy Queensland is Australia's largest, wholly government-owned electricity company.

We service customers and communities through our distribution businesses Energex and Ergon Energy Network, our regional Queensland retailer Ergon Energy Retail, and our integrated energy solutions provider Yurika.

The buyer has elected to have their personal and contact details hidden. These details will be revealed at the buyers discretion.

SR91442681, Request for information, managed Cyber Security Operations Centre

Energy Queensland is seeking information from established suppliers for a managed Cyber Security Operations Centre (CSOC) service across its corporate IT and Operational Technology (OT) environments.

The indicative scope includes 24x7 security monitoring, alert triage and investigation, incident notification and escalation, threat hunting, threat intelligence, detection and security platform engineering, OT security monitoring, and on-demand incident response and digital forensics. It also includes service management, incident exercises, knowledge transfer, transition and exit support.

Suppliers must support Microsoft Sentinel as EQL’s target security information and event management platform and integrate with EQL’s security platforms and ServiceNow. The service will operate alongside EQL’s internal teams, with EQL retaining incident command, risk acceptance and operational decisions.

This request is intended for suppliers with - An operational Australian-based 24x7 CSOC, Brisbane-based engagement and access to incident response, forensic and OT specialists.

Proven managed monitoring capability across both IT and OT environments.

Relevant electricity-sector or Australian critical infrastructure experience, supported by two comparable customer references.

Capacity to keep all EQL data handling within Australia, with no offshore access.

Willingness to use the Queensland Information Technology Contracting (QITC) framework for a future engagement.

This is an information-gathering and capability-screening activity, not a request for tender or a commitment to procure. It is not intended for software-only, advisory-only, penetration testing or staff augmentation offerings. Responses will inform EQL’s future service requirements and sourcing approach.

Energy Queensland (EQL) currently uses a hybrid managed Cyber Security Operations Centre (CSOC) service across its corporate IT and Operational Technology (OT) environments. EQL retains responsibility for cyber security strategy, governance, risk acceptance, incident command and operational decisions. The managed service provides specialist capability and continuous operational coverage.

The current arrangement is approaching the end of its contracted term. This RFI seeks market information on available capabilities, service models, technologies, commercial approaches and transition practices to inform EQL’s future sourcing strategy. It is not a request for tender or a commitment to procure.

The proposed service must support Microsoft Sentinel as EQL’s target security information and event management (SIEM) platform. Suppliers should describe integration with Microsoft Defender, ServiceNow and other EQL-owned security platforms. Security incident records must be maintained in EQL’s ServiceNow environment or supported through bidirectional integration with supplier tooling.

The current environment includes Palo Alto XSOAR for enrichment, workflows, threat intelligence integration and approved response playbooks. EQL is considering future platform changes. Other than Microsoft Sentinel, the listed platforms provide context and do not commit EQL to retaining every component.

The service must support enterprise IT and passive OT monitoring, work with EQL teams and other service providers, and preserve EQL’s operational control. All EQL data handling must remain within Australia, with no offshore access. Suppliers must support monitoring and response continuity during transition and exit, and explain how service records, detection content, playbooks and documentation remain portable.

As per RFI documentations

2

• Queensland
  1: Brisbane

All Regions of Service locations are within Australia.

None...

None...