Enhanced Security Operations Managed Service

Provision of managed security operations, cyber threat intelligence, vulnerability management, breach simulation, DFIR, and security architecture services.

• 24x7x365 monitoring of SLC security telemetry
• L1 and L2 Security Operations Centre capability
• Incident identification, triage and investigation
• Security use-case monitoring and tuning
• Management of Microsoft Sentinel detections
• SOAR playbook execution and optimisation
• Escalation management
• Alert enrichment
• Threat hunting capability
• Malicious activity investigation

Terms and requirements

Contract type

Services contract

Contract dates

14 April 2028 to 30 April 2030

Certifications asked for

None stated

Lots

1

Suitable for SMEs

Yes

Category

Services

CPV codes

72000000

Services in this tender

• Managed security operations (SOC and MDR)Main service£207k typical24x7 managed extended detection and response service with SOC capability
• Cyber security consultancy and assurance£97k typicalDFIR retainer and security architecture and engineering support
• Cyber threat intelligence£124k typicalCyber threat intelligence service with feeds and reporting
• Penetration testing and IT health checks£82k typicalBreach attack simulation service

Lifecycle

1. Published
   9 September 2026
2. Deadline for bidsClosed
   22 October 2026
3. Contract awardedUsually published within a few months
4. Contract starts
   14 April 2028