Planning

SOC Out-of-Hours Protective Monitoring Service

DEFRA

This public procurement record has 3 releases in its history.

Planning

15 Dec 2025 at 17:14

Planning

15 Dec 2025 at 17:12

Planning

15 Dec 2025 at 17:09

Summary of the contracting process

The Department for Environment, Food & Rural Affairs (Defra) is in the planning stage of re-procuring its Security Operations Centre (SOC) out-of-hours protective monitoring service. This initiative is tailored for the IT services sector, specifically focusing on consulting, software development, Internet, and support. The procurement process is managed under the Crown Commercial Service's RM3764.3 Cyber Security Services 3 Dynamic Purchasing System (DPS). The key engagement timeline extends until 10th March 2026, with the contract intended to start on 1st November 2026. The initial contract term is set for three years, with potential extensions of up to two additional years. The procurement is intended for services across several regions including the UK, British Oversea Territories, Channel Islands, Europe, Isle of Man, and globally.

This tender presents significant opportunities for SMEs in the IT sector, as Defra seeks providers capable of delivering high-quality monitoring services outside regular business hours. Businesses that specialise in cybersecurity and possess the necessary capabilities to participate through the CCS DPS are encouraged to express interest. The flexible contract term offers a stable business opportunity, which can foster growth and allow firms to expand their expertise and portfolio within the public sector. Given the extensive geographical scope and requirement for specialised IT services, companies with robust infrastructure and experienced personnel in cybersecurity will find this tender particularly rewarding.

Find more tenders on our Open Data Platform.
How relevant is this notice?

D3 Tenders Premium

Win More Public Sector Contracts

AI-powered tender discovery, pipeline management, and market intelligence — everything you need to grow your public sector business.

Notice Title

SOC Out-of-Hours Protective Monitoring Service

Notice Description

Defra's Security Operations Centre (SOC) is reliant on a hybrid model for protective monitoring, whereby Defra's internal SOC provides coverage during standard business hours (09:00-17:00) Monday to Friday and an external supplier delivers monitoring outside these hours. Defra is seeking to reprocure this out-of-hours Protective Monitoring SOC service when the incumbent contract expires on 31st October 2026. Contract Term: The Authority is seeking an initial contract term of 3-years, with two options to extend for 1-year each (3+1+1). Route to Market: The Crown Commercial Service's RM3764.3 Cyber Security Services 3 DPS. Suppliers must register on the DPS via CCS' website and meet the Contracting Authority's requirements to be considered for this opportunity. Timelines* (2026) 10th March - ITT Stage 1 released 23rd March - ITT Stage 2 released 20th April - ITT Submission deadline 11th June - Contract Award 1st November - Contract Start Date *Please note that these are provisional timelines and could be subject to change at the Authority's discretion.

Publication & Lifecycle

Open Contracting ID
ocds-b5fd17-d5109687-8400-4a9d-b0dd-255786fee88b
Publication Source
Contracts Finder
Latest Notice
https://www.contractsfinder.service.gov.uk/Notice/48c369bc-b932-4fd0-9dff-6fed2171890d
Current Stage
Planning
All Stages
Planning

Procurement Classification

Notice Type
Market Engagement Notice
Procurement Type
Standard
Procurement Category
Services
Procurement Method
Not Specified
Procurement Method Details
Not specified
Tender Suitability
SME
Awardee Scale
Not specified

Common Procurement Vocabulary (CPV)

CPV Divisions

72 - IT services: consulting, software development, Internet and support


CPV Codes

72000000 - IT services: consulting, software development, Internet and support

Notice Value(s)

Tender Value
Not specified
Lots Value
Not specified
Awards Value
Not specified
Contracts Value
Not specified

Notice Dates

Publication Date
15 Dec 20252 months ago
Submission Deadline
Not specified
Future Notice Date
10 Mar 20262 weeks to go
Award Date
Not specified
Contract Period
Not specified - Not specified
Recurrence
Not specified

Notice Status

Tender Status
Planning
Lots Status
Not Specified
Awards Status
Not Specified
Contracts Status
Not Specified

Contracting Authority (Buyer)

Main Buyer
DEFRA
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
LONDON
Postcode
SW1P 4DF
Post Town
South West London
Country
England

Major Region (ITL 1)
TLI London
Basic Region (ITL 2)
TLI3 Inner London - West
Small Region (ITL 3)
TLI35 Westminster and City of London
Delivery Location
Not specified

Local Authority
Westminster
Electoral Ward
St James's
Westminster Constituency
Cities of London and Westminster

Further Information

Notice Documents

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

Download

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

{
    "tag": [
        "compiled"
    ],
    "id": "ocds-b5fd17-d5109687-8400-4a9d-b0dd-255786fee88b-2025-12-15T17:14:57Z",
    "date": "2025-12-15T17:14:57Z",
    "ocid": "ocds-b5fd17-d5109687-8400-4a9d-b0dd-255786fee88b",
    "language": "en",
    "initiationType": "tender",
    "title": "SOC Out-of-Hours Protective Monitoring Service",
    "planning": {
        "milestones": [
            {
                "id": "1",
                "title": "Engagement end date",
                "type": "engagement",
                "dueDate": "2026-03-10T23:59:59Z"
            }
        ],
        "documents": [
            {
                "id": "1",
                "documentType": "marketEngagementNotice",
                "description": "Early engagement notice on Contracts Finder",
                "url": "https://www.contractsfinder.service.gov.uk/Notice/8a168224-607b-4a45-9b98-8897091e4315",
                "datePublished": "2025-12-15T17:09:11Z",
                "format": "text/html",
                "language": "en"
            },
            {
                "id": "2",
                "documentType": "marketEngagementNotice",
                "description": "Early engagement notice on Contracts Finder",
                "url": "https://www.contractsfinder.service.gov.uk/Notice/031b4bcf-fad1-4fde-a3a2-419957e87b15",
                "datePublished": "2025-12-15T17:09:11Z",
                "dateModified": "2025-12-15T17:12:32Z",
                "format": "text/html",
                "language": "en"
            },
            {
                "id": "3",
                "documentType": "marketEngagementNotice",
                "description": "Early engagement notice on Contracts Finder",
                "url": "https://www.contractsfinder.service.gov.uk/Notice/48c369bc-b932-4fd0-9dff-6fed2171890d",
                "datePublished": "2025-12-15T17:09:11Z",
                "dateModified": "2025-12-15T17:14:57Z",
                "format": "text/html",
                "language": "en"
            }
        ]
    },
    "tender": {
        "id": "CF-0583700D8d000003VQwdEAG",
        "title": "SOC Out-of-Hours Protective Monitoring Service",
        "description": "Defra's Security Operations Centre (SOC) is reliant on a hybrid model for protective monitoring, whereby Defra's internal SOC provides coverage during standard business hours (09:00-17:00) Monday to Friday and an external supplier delivers monitoring outside these hours. Defra is seeking to reprocure this out-of-hours Protective Monitoring SOC service when the incumbent contract expires on 31st October 2026. Contract Term: The Authority is seeking an initial contract term of 3-years, with two options to extend for 1-year each (3+1+1). Route to Market: The Crown Commercial Service's RM3764.3 Cyber Security Services 3 DPS. Suppliers must register on the DPS via CCS' website and meet the Contracting Authority's requirements to be considered for this opportunity. Timelines* (2026) 10th March - ITT Stage 1 released 23rd March - ITT Stage 2 released 20th April - ITT Submission deadline 11th June - Contract Award 1st November - Contract Start Date *Please note that these are provisional timelines and could be subject to change at the Authority's discretion.",
        "status": "planning",
        "classification": {
            "scheme": "CPV",
            "id": "72000000",
            "description": "IT services: consulting, software development, Internet and support"
        },
        "items": [
            {
                "id": "1",
                "deliveryAddresses": [
                    {
                        "postalCode": "SW1P 3JR"
                    },
                    {
                        "countryName": "British Oversea Territories"
                    },
                    {
                        "countryName": "Channel Islands"
                    },
                    {
                        "countryName": "Europe"
                    },
                    {
                        "countryName": "Isle of Man"
                    },
                    {
                        "countryName": "Rest of the World"
                    },
                    {
                        "countryName": "United Kingdom"
                    },
                    {
                        "postalCode": "SW1P 3JR"
                    },
                    {
                        "countryName": "British Oversea Territories"
                    },
                    {
                        "countryName": "Channel Islands"
                    },
                    {
                        "countryName": "Europe"
                    },
                    {
                        "countryName": "Isle of Man"
                    },
                    {
                        "countryName": "Rest of the World"
                    },
                    {
                        "countryName": "United Kingdom"
                    },
                    {
                        "postalCode": "SW1P 3JR"
                    },
                    {
                        "countryName": "British Oversea Territories"
                    },
                    {
                        "countryName": "Channel Islands"
                    },
                    {
                        "countryName": "Europe"
                    },
                    {
                        "countryName": "Isle of Man"
                    },
                    {
                        "countryName": "Rest of the World"
                    },
                    {
                        "countryName": "United Kingdom"
                    }
                ]
            }
        ],
        "suitability": {
            "sme": true,
            "vcse": false
        },
        "mainProcurementCategory": "services"
    },
    "parties": [
        {
            "id": "GB-CFS-236261",
            "name": "Defra",
            "identifier": {
                "legalName": "Defra"
            },
            "address": {
                "streetAddress": "2 Marsham Street",
                "locality": "London",
                "postalCode": "SW1P 4DF",
                "countryName": "UK"
            },
            "contactPoint": {
                "name": "Sara Bevan",
                "email": "network.procurement@defra.gov.uk",
                "telephone": "020 7270 3000"
            },
            "roles": [
                "buyer"
            ]
        }
    ],
    "buyer": {
        "id": "GB-CFS-236261",
        "name": "Defra"
    }
}