The NSW Department of Creative Industries, Tourism, Hospitality and Sport (DCITHS) has released a tender for the renewal and expansion of CrowdStrike Falcon Complete MDR licences across the DCITHS portfolio to strengthen cyber threat detection and response capabilities.
The DCITHS portfolio has completed a major cyber uplift program over the last three years, which delivered core security operations centre capabilities for its agencies.
Currently three agencies have Crowdstrike Falcon licensing together with Falcon Complete. The intention is to expand this capability to further agencies and provide the service for threee further years.
The successful supplier's activities will be to facilitate the provision of Crowdstrike Falcon licenses and Security Operations Centre as a service (SOCaaS) support for CrowdStrike’s MDR service to identify and limit the impact of cyber security threats.
The scope of work includes ensuring the validity and functionality of CrowdStrike MDR licenses for the specified number of endpoints; providing technical support and assistance for the MDR platform; continuous monitoring and management of the MDR platform to ensure optimal performance and threat detection; and regular reporting on security incidents, threat intelligence, and platform performance.
Out of scope is configuration of devices and systems operating in the individual agency’s environment to generate and forward required logs; physical security measures related to the server room, data centres, or any hardware; procurement or maintenance of physical hardware unless directly related to the EDR platform; and creation or revision of overarching organisational policies or procedures related to MDR and Log collection.
Close date for the tender is 6 March 2026 at 3:00 PM.




