Notice Information
Notice Title
Security Information Event and Management Software and Professional Services
Notice Description
Provision of security information event and management software
Lot Information
Lot 1
Procurement of a tool used to continuously monitor information systems and networks for security events and anomalies, collect and review logs, and aid in the investigation of security incidents.
Procurement Information
Following a comprehensive and competitive procurement process, a direct award to Elastic is being proposed based on the following critical factors: (i)Compliance with National Power Outage (NPO) Requirements: The procurement exercise established that only two solutions that sit high in the Gartner Quadrant, Splunk and Elastic, are capable of meeting the stringent National Power Outage (NPO) requirements. These requirements explicitly preclude the use of cloud-based SIEM solutions. Furthermore, both technologies are compatible with the selected Managed Security Service Provider (MSSP) and have readily available engineering expertise within the open market. This significantly reduces delivery risk and ensures continuity of service. (ii)Technical Recommendation and Internal Validation: The selected SOC MSSP has provided a strong recommendation in favor of Elastic, citing its suitability to meet the NPO constraints and operational needs. In parallel, the NESO Chief Security Office (CSO) has conducted an internal assessment of Elastic and confirmed it aligns with their functional and security requirements. This dual endorsement reinforces confidence in the technical and strategic fit of the solution. Furthermore, Elastic is already being used in CNI and the business for health monitoring purposes, so there is some experience in supporting it. (iii)Cost Efficiency: From a financial standpoint, Elastic is significantly more cost-effective option compared to Splunk. The estimated annual cost of implementing and maintaining Splunk is over eight times higher than that of Elastic. This substantial cost differential highlights the strong value for money achieved through a direct award to Elastic, making it the more economically viable solution. In light of the above considerations, namely compliance with critical NPO constraints, alignment with MSSP and CSO assessments, and marked cost savings, a direct award to Elastic is both justified and strategically sound.
Notice Details
Publication & Lifecycle
- Open Contracting ID
- ocds-h6vhtk-051626
- Publication Source
- Find A Tender Service
- Latest Notice
- https://www.find-tender.service.gov.uk/Notice/022341-2025
- Current Stage
- Award
- All Stages
- Award
Procurement Classification
- Notice Type
- Award Notice
- Procurement Type
- Standard
- Procurement Category
- Services
- Procurement Method
- Limited
- Procurement Method Details
- Award procedure without prior publication of a call for competition
- Tender Suitability
- Not specified
- Awardee Scale
- Not specified
Common Procurement Vocabulary (CPV)
- CPV Divisions
72 - IT services: consulting, software development, Internet and support
-
- CPV Codes
72260000 - Software-related services
Notice Value(s)
- Tender Value
- Not specified
- Lots Value
- Not specified
- Awards Value
- Not specified
- Contracts Value
- Not specified
Notice Dates
- Publication Date
- 16 May 20259 months ago
- Submission Deadline
- Not specified
- Future Notice Date
- Not specified
- Award Date
- 28 Apr 202510 months ago
- Contract Period
- Not specified - Not specified
- Recurrence
- Not specified
Notice Status
- Tender Status
- Complete
- Lots Status
- Cancelled
- Awards Status
- Active
- Contracts Status
- Active
Buyer & Supplier
Contracting Authority (Buyer)
- Main Buyer
- NATIONAL ENERGY SYSTEM OPERATOR LIMITED
- Contact Name
- Maria Slimpa
- Contact Email
- maria.slimpa1@nationalenergyso.com
- Contact Phone
- Not specified
Buyer Location
- Locality
- WOKINGHAM
- Postcode
- RG41 5BN
- Post Town
- Reading
- Country
- England
-
- Major Region (ITL 1)
- TLJ South East (England)
- Basic Region (ITL 2)
- TLJ1 Berkshire, Buckinghamshire and Oxfordshire
- Small Region (ITL 3)
- TLJ16 Berkshire West
- Delivery Location
- Not specified
-
- Local Authority
- Wokingham
- Electoral Ward
- Winnersh
- Westminster Constituency
- Wokingham
Further Information
Notice URLs
Open Contracting Data Standard (OCDS)
View full OCDS Record for this contracting process
The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.
{
"tag": [
"compiled"
],
"id": "ocds-h6vhtk-051626-2025-05-16T15:42:30+01:00",
"date": "2025-05-16T15:42:30+01:00",
"ocid": "ocds-h6vhtk-051626",
"initiationType": "tender",
"tender": {
"id": "ocds-h6vhtk-051626",
"legalBasis": {
"id": "32014L0025",
"scheme": "CELEX"
},
"title": "Security Information Event and Management Software and Professional Services",
"status": "complete",
"classification": {
"scheme": "CPV",
"id": "72260000",
"description": "Software-related services"
},
"mainProcurementCategory": "services",
"description": "Provision of security information event and management software",
"lots": [
{
"id": "1",
"description": "Procurement of a tool used to continuously monitor information systems and networks for security events and anomalies, collect and review logs, and aid in the investigation of security incidents.",
"hasOptions": false,
"status": "cancelled"
}
],
"items": [
{
"id": "1",
"deliveryAddresses": [
{
"region": "UK"
}
],
"relatedLot": "1"
}
],
"procurementMethod": "limited",
"procurementMethodDetails": "Award procedure without prior publication of a call for competition",
"procurementMethodRationaleClassifications": [
{
"scheme": "TED_PT_AWARD_CONTRACT_WITHOUT_CALL",
"id": "D_TECHNICAL",
"description": "The works, supplies or services can be provided only by a particular economic operator due to absence of competition for technical reasons"
}
],
"procurementMethodRationale": "Following a comprehensive and competitive procurement process, a direct award to Elastic is being proposed based on the following critical factors: (i)Compliance with National Power Outage (NPO) Requirements: The procurement exercise established that only two solutions that sit high in the Gartner Quadrant, Splunk and Elastic, are capable of meeting the stringent National Power Outage (NPO) requirements. These requirements explicitly preclude the use of cloud-based SIEM solutions. Furthermore, both technologies are compatible with the selected Managed Security Service Provider (MSSP) and have readily available engineering expertise within the open market. This significantly reduces delivery risk and ensures continuity of service. (ii)Technical Recommendation and Internal Validation: The selected SOC MSSP has provided a strong recommendation in favor of Elastic, citing its suitability to meet the NPO constraints and operational needs. In parallel, the NESO Chief Security Office (CSO) has conducted an internal assessment of Elastic and confirmed it aligns with their functional and security requirements. This dual endorsement reinforces confidence in the technical and strategic fit of the solution. Furthermore, Elastic is already being used in CNI and the business for health monitoring purposes, so there is some experience in supporting it. (iii)Cost Efficiency: From a financial standpoint, Elastic is significantly more cost-effective option compared to Splunk. The estimated annual cost of implementing and maintaining Splunk is over eight times higher than that of Elastic. This substantial cost differential highlights the strong value for money achieved through a direct award to Elastic, making it the more economically viable solution. In light of the above considerations, namely compliance with critical NPO constraints, alignment with MSSP and CSO assessments, and marked cost savings, a direct award to Elastic is both justified and strategically sound."
},
"awards": [
{
"id": "022341-2025-1",
"relatedLots": [
"1"
],
"status": "active"
}
],
"parties": [
{
"id": "GB-COH-11014226",
"name": "NATIONAL ENERGY SYSTEM OPERATOR LIMITED",
"identifier": {
"legalName": "NATIONAL ENERGY SYSTEM OPERATOR LIMITED",
"id": "11014226",
"scheme": "GB-COH"
},
"address": {
"streetAddress": "NATIONAL ENERGY SYSTEM OPERATOR LIMITED",
"locality": "Wokingham",
"region": "UKJ",
"postalCode": "RG41 5BN",
"countryName": "United Kingdom"
},
"contactPoint": {
"name": "Maria Slimpa",
"email": "maria.slimpa1@nationalenergyso.com"
},
"roles": [
"buyer"
],
"details": {
"url": "https://www.neso.energy/",
"classifications": [
{
"scheme": "TED_CE_ACTIVITY",
"id": "ELECTRICITY",
"description": "Electricity"
}
]
}
},
{
"id": "GB-FTS-139907",
"name": "OFGEM",
"identifier": {
"legalName": "OFGEM"
},
"address": {
"locality": "London",
"countryName": "United Kingdom"
},
"roles": [
"reviewBody"
]
}
],
"buyer": {
"id": "GB-COH-11014226",
"name": "NATIONAL ENERGY SYSTEM OPERATOR LIMITED"
},
"contracts": [
{
"id": "022341-2025-1",
"awardID": "022341-2025-1",
"status": "active",
"dateSigned": "2025-04-29T00:00:00+01:00"
}
],
"language": "en"
}